Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa
File: WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa (raw, json)
Hash identifier: wrideVt96yprnS97lOHBi0r+Cs611ZDyctZNvffjpbQ=
Subject key identifier: 58:F7:73:38:94:F8:2C:2F:D3:70:24:66:F1:19:B1:1A:35:FF:60:AE
Certificate issuer: /CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Certificate serial: 01999AB846EE10C980CF0046E562A1FF506C
Authority key identifier: F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa
Signing time: Tue 30 Sep 2025 13:03:11 +0000
ROA not before: Tue 30 Sep 2025 13:03:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205899
IP address blocks: 194.26.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:b8:46:ee:10:c9:80:cf:00:46:e5:62:a1:ff:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e41e7327c2c310ce066afaf8719886d71fb380
Validity
Not Before: Sep 30 13:03:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58f7733894f82c2fd3702466f119b11a35ff60ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:be:8d:ea:09:ab:61:38:81:66:e3:71:2a:
d4:87:e1:6c:eb:cc:bb:4c:af:f1:d1:97:09:53:4f:
7f:2d:be:5b:04:fa:2e:f6:56:e1:64:ad:d0:f2:89:
ca:0a:2c:10:18:61:7c:ac:5c:04:c3:71:01:b5:7a:
49:75:cf:2b:86:c6:cf:05:14:af:09:8f:75:76:82:
38:e8:8d:22:1f:9b:fe:12:88:fc:d4:a1:a1:be:16:
52:51:54:ac:8b:da:47:36:78:68:21:88:14:c0:47:
7f:eb:c0:ed:5f:52:79:b5:95:6e:e1:5b:61:e7:6e:
82:3d:d7:ed:ee:60:f2:db:a2:d7:1d:82:80:c5:96:
6e:73:a5:f7:37:29:da:f6:af:cd:d0:85:10:a1:67:
88:e2:bb:91:ad:6f:74:d4:ac:ca:9d:e6:32:92:6e:
88:cf:4d:fa:d9:b3:6b:f3:27:05:dc:9e:07:1e:c2:
cd:f9:38:55:a8:bc:76:b3:dd:98:c8:58:6d:18:03:
a4:e7:80:7f:80:b7:c0:b0:86:2b:cb:45:a0:53:4b:
ce:89:9d:5e:d3:c6:da:7f:9c:fe:22:7b:70:19:1b:
ad:24:65:f5:fd:5f:68:46:f6:c9:86:ef:2d:f7:fc:
d7:86:5e:49:00:7a:ac:b9:ff:16:09:83:e4:20:57:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:73:38:94:F8:2C:2F:D3:70:24:66:F1:19:B1:1A:35:FF:60:AE
X509v3 Authority Key Identifier:
keyid:F5:E4:1E:73:27:C2:C3:10:CE:06:6A:FA:F8:71:98:86:D7:1F:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9eQecyfCwxDOBmr6-HGYhtcfs4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/WPdzOJT4LC_TcCRm8RmxGjX_YK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eec2e9-cbae-4659-9384-13b746bba262/1/9eQecyfCwxDOBmr6-HGYhtcfs4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:34:6e:b5:16:6c:0b:9c:2e:af:3e:b1:98:c5:63:3d:89:65:
2d:a2:1d:d9:c6:72:24:44:e9:2f:03:48:61:8b:da:24:0c:63:
3f:ad:e4:58:f3:d1:e3:03:bb:19:d2:fd:1f:5f:b4:6d:70:df:
fd:1a:06:95:53:6b:4d:83:1d:be:1f:8d:1c:75:eb:f1:1b:39:
39:f8:b1:07:35:3c:27:ae:5f:cb:87:91:68:d0:b3:ec:79:5e:
a5:e3:f4:20:bf:d2:8a:c1:4c:31:24:0a:95:9d:d7:b3:81:c8:
c6:d7:db:31:7a:57:c1:df:f0:03:72:66:f4:57:a8:35:9d:8a:
43:00:e2:a3:53:d7:d3:2c:8d:4e:8a:a6:df:76:6a:02:08:ce:
0a:ba:f9:45:9a:16:99:30:d1:db:57:a3:a8:0b:a5:76:1f:c4:
c6:54:f2:d8:b5:0d:fd:19:7d:ca:3d:2c:6e:5b:7a:90:02:b6:
cd:7f:f7:7f:bd:8d:66:69:ee:24:0b:0b:30:70:f2:ab:f2:6d:
23:d9:d4:ee:c5:82:c8:2e:28:18:84:79:8c:65:09:73:63:e1:
8d:95:52:2f:dd:12:c3:72:37:3a:3d:4c:0c:89:d4:c3:9e:1e:
38:1a:31:9e:1e:21:96:d7:3f:9a:e4:8d:6f:ba:5b:aa:9a:fe:
2d:f9:34:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:09 2025 by rpki-client