Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/WUaM5ilAPH-D9YxJO0tBjb5UqeA.roa
File: WUaM5ilAPH-D9YxJO0tBjb5UqeA.roa (raw, json)
Hash identifier: 2s5WM8piz53LhTZIiMHbjkTVNE13rJmuQh0N4/W6csE=
Subject key identifier: 59:46:8C:E6:29:40:3C:7F:83:F5:8C:49:3B:4B:41:8D:BE:54:A9:E0
Certificate issuer: /CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Certificate serial: 019E1CC116422188A234BC61924D027F6ABB
Authority key identifier: D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/WUaM5ilAPH-D9YxJO0tBjb5UqeA.roa
Signing time: Tue 12 May 2026 15:14:36 +0000
ROA not before: Tue 12 May 2026 15:14:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212386
IP address blocks: 176.119.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:c1:16:42:21:88:a2:34:bc:61:92:4d:02:7f:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3aaee1788b16e0a71a4206a8ab8dac6807ee89f
Validity
Not Before: May 12 15:14:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59468ce629403c7f83f58c493b4b418dbe54a9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:87:12:49:a7:5c:0f:2e:f2:e3:67:8c:33:
27:63:45:07:62:01:f5:59:c4:cd:a4:12:0c:98:d4:
ac:06:bd:fb:94:67:ba:2c:d2:c6:ad:7e:38:10:4b:
53:5a:b8:43:88:dd:bc:12:54:8a:70:61:94:af:bb:
ca:06:28:9a:78:2a:e1:15:31:a2:6c:e0:fd:4d:b5:
26:cb:a2:62:c7:1d:26:0a:3a:cd:31:1f:4d:5e:15:
6c:80:29:f1:d8:17:3e:8c:69:8b:a6:b8:6d:51:67:
97:fe:1b:da:82:f9:80:a7:67:de:34:b1:52:d0:82:
56:0b:0f:ea:22:1c:51:ff:e8:13:2e:89:6c:fc:83:
ff:3b:94:6b:b5:e7:2c:e6:7d:cf:d9:60:26:3f:25:
96:97:c2:be:ec:59:b7:8a:2d:c5:7e:b2:54:a2:69:
25:b6:8f:de:e9:d2:1a:c1:b7:62:26:43:c7:36:0e:
ae:72:d3:0c:72:2a:a6:56:f6:2c:0e:9a:fc:8c:bf:
e9:9d:20:1d:0c:b3:23:7e:07:88:fc:4c:52:50:9d:
4d:ca:7d:df:4e:8d:14:2f:c2:dd:25:82:63:b5:6c:
1e:aa:68:c1:c2:1d:8a:f1:f6:b1:44:ed:6a:b1:f6:
ac:21:0a:03:14:02:3c:f2:ba:8f:89:98:98:08:a0:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:8C:E6:29:40:3C:7F:83:F5:8C:49:3B:4B:41:8D:BE:54:A9:E0
X509v3 Authority Key Identifier:
keyid:D3:AA:EE:17:88:B1:6E:0A:71:A4:20:6A:8A:B8:DA:C6:80:7E:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06ruF4ixbgpxpCBqirjaxoB-6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/WUaM5ilAPH-D9YxJO0tBjb5UqeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/51b241-3129-424b-9dd4-458d15a454ad/1/06ruF4ixbgpxpCBqirjaxoB-6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ef:87:21:4d:1c:b5:1b:80:e5:5a:ca:e4:8f:8f:6f:23:91:
67:77:cf:ab:26:1f:1b:06:9a:61:d8:1a:f9:98:39:01:23:30:
b8:d5:ac:bd:80:9a:39:8d:ac:e2:a3:cd:b9:4f:de:fd:68:c6:
99:59:59:40:fe:93:b2:11:bc:78:2f:20:66:2c:16:e8:ef:ad:
28:7c:d0:0b:8d:ed:ed:60:44:fa:d7:9e:b3:90:18:78:1f:e2:
81:31:1a:eb:d7:0f:93:40:9a:4c:02:84:d9:2a:91:e7:a2:43:
fc:c6:27:4f:98:16:c1:d0:ce:ae:fd:66:30:06:d3:0a:00:be:
31:29:65:21:48:8b:f3:aa:c0:dc:b5:c7:d2:0a:fc:7f:39:31:
eb:62:65:91:d7:e2:a9:f6:c3:bb:81:f7:36:ba:c8:06:63:ab:
32:be:d8:42:01:d4:cb:9a:cb:46:0b:e8:c6:fd:af:1a:39:38:
8b:00:3e:5d:46:b7:66:e1:dd:db:fa:94:e6:38:79:63:fb:23:
5e:d8:eb:b7:5f:06:57:18:a9:59:35:ad:f6:44:a3:5d:99:84:
b6:93:cf:8c:c5:a3:35:05:b1:ed:a4:47:eb:6a:ab:1a:03:9f:
34:90:d0:e0:30:35:10:32:4e:c1:57:d8:d2:20:ca:cf:7e:75:
56:5a:e1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:21 2026 by rpki-client