Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/WSF63vx3-3kzV57SCYN5uxEsnh4.roa
File: WSF63vx3-3kzV57SCYN5uxEsnh4.roa (raw, json)
Hash identifier: Y5dUR1knuXpFVT1JaRCk2XwHEZb4ddAQx+uv00b5po4=
Subject key identifier: 59:21:7A:DE:FC:77:FB:79:33:57:9E:D2:09:83:79:BB:11:2C:9E:1E
Certificate issuer: /CN=b945d22d376fca197b2e84e1ee5732034432ffad
Certificate serial: 019B7C809492D9731C8371A79BB0FF9A0B05
Authority key identifier: B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/WSF63vx3-3kzV57SCYN5uxEsnh4.roa
Signing time: Fri 02 Jan 2026 02:19:19 +0000
ROA not before: Fri 02 Jan 2026 02:19:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43862
IP address blocks: 91.234.142.0/24 maxlen: 24
91.234.143.0/24 maxlen: 24
195.234.16.0/24 maxlen: 24
195.234.17.0/24 maxlen: 24
2001:67c:2890::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:94:92:d9:73:1c:83:71:a7:9b:b0:ff:9a:0b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945d22d376fca197b2e84e1ee5732034432ffad
Validity
Not Before: Jan 2 02:19:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59217adefc77fb7933579ed2098379bb112c9e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:a3:e7:c5:a0:6c:fd:5e:82:08:93:c9:77:
5f:ae:7a:f0:bc:10:f9:72:5b:cb:60:a7:3a:89:77:
1b:8f:44:fc:dc:69:76:ef:b9:19:8d:58:fc:e9:e5:
2a:66:d0:51:26:34:ac:90:e9:e4:66:70:8c:18:db:
a1:41:c3:9a:90:57:61:37:48:72:e6:f0:6c:cf:15:
5b:4d:9d:c9:00:5b:fd:0d:4e:d6:84:2f:ed:d0:6e:
c1:11:b0:a7:02:a9:5a:04:01:00:8e:cb:83:f8:c0:
cd:28:c8:fc:be:0a:a5:82:71:d7:6f:e1:49:49:bd:
6d:19:81:f6:8f:36:54:6b:0e:8d:a0:93:e6:4a:97:
d4:4a:44:19:78:64:28:c4:1e:34:ae:3a:1b:f0:3f:
3d:1b:87:20:b7:4e:0c:d5:85:1a:4f:20:11:90:ba:
d4:0e:3d:86:89:6a:3a:56:ec:20:dc:44:ec:a8:2b:
58:15:42:62:d1:dc:9d:18:31:4a:4a:5c:7f:aa:af:
7e:9a:9b:0f:ea:38:ad:82:83:1d:d0:e7:5d:01:f4:
c9:9a:c9:36:ba:5f:88:54:53:58:c6:1d:18:a3:a8:
b2:70:38:bf:0b:3d:93:67:c7:b5:70:f1:e4:ec:22:
1f:53:b5:93:03:af:1f:31:a1:39:2b:48:74:6d:7a:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:21:7A:DE:FC:77:FB:79:33:57:9E:D2:09:83:79:BB:11:2C:9E:1E
X509v3 Authority Key Identifier:
keyid:B9:45:D2:2D:37:6F:CA:19:7B:2E:84:E1:EE:57:32:03:44:32:FF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUXSLTdvyhl7LoTh7lcyA0Qy_60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/WSF63vx3-3kzV57SCYN5uxEsnh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/638a8e-7f08-42f5-a98c-4c5e67e5ee25/1/uUXSLTdvyhl7LoTh7lcyA0Qy_60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.142.0/23
195.234.16.0/23
IPv6:
2001:67c:2890::/48
Signature Algorithm: sha256WithRSAEncryption
62:e4:01:89:98:a9:af:a5:69:a3:18:48:0d:b1:ac:66:83:54:
68:08:f1:cb:ee:a2:1d:e8:cf:90:98:ea:ee:bf:41:84:35:3f:
74:b3:db:3a:7c:c2:74:42:74:f7:7a:f8:79:61:ec:01:7f:86:
87:36:e8:26:dd:ce:ab:58:3c:3d:07:18:b2:de:d7:3e:6c:95:
31:c8:66:06:c6:ae:6d:ca:a3:72:35:af:0d:5c:da:83:a8:69:
01:06:53:fd:ad:f7:13:23:e3:eb:32:69:2e:5c:e5:86:46:50:
fa:26:95:61:c2:00:cd:30:7c:97:69:86:cb:d7:26:3e:18:d4:
72:1d:d1:39:e4:37:44:ce:8a:23:41:2d:4f:de:5a:fd:ca:3d:
f3:ff:b0:e2:70:db:2f:a9:48:26:51:2f:b4:84:c5:b2:2c:29:
86:81:05:6b:03:77:dc:d5:bf:10:20:e3:a1:64:1e:69:61:e2:
23:aa:b9:43:1e:62:30:a7:52:55:40:17:53:4b:c4:c7:f5:ca:
62:6d:91:aa:1d:a8:af:9e:54:f6:a7:6d:47:04:41:2d:23:1c:
ce:20:62:fa:cc:74:8a:13:80:a6:ca:2f:b0:9a:8b:d7:bc:39:
4f:d0:d6:ee:36:35:c6:54:9f:62:0d:b7:f2:86:cf:db:2e:ec:
66:c8:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:20 2026 by rpki-client