Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/WnHzbxcWnfjBlVEJkzUqvflkBLA.roa
File: WnHzbxcWnfjBlVEJkzUqvflkBLA.roa (raw, json)
Hash identifier: eI8gIZ4QgUUkSDU1/GTW0FbHxY0wg/TC2Y43t8FWow0=
Subject key identifier: 5A:71:F3:6F:17:16:9D:F8:C1:95:51:09:93:35:2A:BD:F9:64:04:B0
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 01A0106959B3AA41414C8E6B41EB344C02AD
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/WnHzbxcWnfjBlVEJkzUqvflkBLA.roa
Signing time: Mon 17 Aug 2026 15:48:54 +0000
ROA not before: Mon 17 Aug 2026 15:48:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25307
IP address blocks: 2001:4c68:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:69:59:b3:aa:41:41:4c:8e:6b:41:eb:34:4c:02:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Aug 17 15:48:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a71f36f17169df8c195510993352abdf96404b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:a1:43:6f:01:8b:51:6e:4e:92:2a:d8:d8:
bb:de:2f:d2:61:d4:aa:3e:63:3c:2a:b4:79:1b:a2:
13:33:a7:0f:1c:89:3d:47:b3:47:1d:c1:44:ea:2b:
26:25:41:0d:89:20:d8:a3:8b:da:04:51:70:a6:ee:
35:8b:5e:32:33:6b:c8:89:8d:93:73:7d:9d:34:20:
b7:39:f6:1b:ce:68:fb:bc:48:3d:07:0f:fe:d8:ac:
e0:ec:93:81:11:e2:22:99:b0:2c:7a:9e:0f:17:57:
e0:6c:3b:6b:6e:f7:4e:05:70:9c:b8:5b:e2:5a:c4:
c2:83:ea:1f:48:70:98:a4:10:2d:aa:5a:83:fe:d9:
fc:eb:b6:27:58:0d:cd:ad:62:ec:3a:53:44:75:d5:
f2:57:46:28:e9:f7:be:df:c8:4d:53:0b:16:fc:b7:
f3:d7:b1:bb:c2:d8:c7:a8:cc:11:21:79:a1:51:97:
c4:d5:93:59:58:d9:d5:fa:b9:70:9b:33:fe:ba:81:
49:57:9e:06:c8:a9:f3:29:d0:0a:95:41:85:6c:77:
d4:62:67:25:5e:3c:ef:85:c6:50:9d:7e:59:3e:34:
c0:6c:a8:30:1d:3e:67:bc:9a:f6:f4:03:7d:fa:00:
88:e2:88:7f:56:7a:d0:4c:ed:71:05:56:75:b7:c5:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:71:F3:6F:17:16:9D:F8:C1:95:51:09:93:35:2A:BD:F9:64:04:B0
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/WnHzbxcWnfjBlVEJkzUqvflkBLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4c68:301::/48
Signature Algorithm: sha256WithRSAEncryption
12:a9:b2:18:41:29:91:00:01:e9:b4:86:76:00:0a:80:4b:1f:
bd:8b:fb:a4:d2:04:dd:3d:ab:a8:89:5d:6b:4d:d6:46:39:db:
22:0e:fd:70:70:50:6c:dc:cd:f6:5f:62:e3:70:50:ec:3c:b4:
88:3d:ec:b0:8c:3a:0a:0e:c8:43:53:96:d8:23:30:f7:6e:f4:
9d:a6:a8:7d:6e:4f:e0:e5:bd:d4:66:b0:07:c4:a3:27:4a:55:
15:61:92:fe:22:9d:b7:3e:a4:b9:6d:70:c5:57:6f:38:3c:2e:
44:da:f7:a9:60:55:ee:c9:eb:9b:57:b3:27:84:9f:15:93:d4:
32:d3:63:87:a5:f0:45:f1:a9:9b:74:02:a8:61:12:81:88:c4:
11:f8:c3:d4:c5:1c:63:34:33:fa:65:fa:5a:9e:2a:ed:8c:16:
b8:a2:60:4a:a3:95:72:36:0b:10:bd:89:a1:fd:f3:11:f7:85:
37:d1:75:92:d8:61:1b:7a:de:57:f0:82:eb:0d:30:00:d3:b0:
85:5f:bd:d7:c8:c8:55:2e:c8:98:32:79:8d:1c:9f:62:ce:e4:
4e:61:d5:b2:93:39:ce:dc:30:41:2b:1f:a8:8e:57:0d:78:a1:
da:ec:51:94:0f:7f:87:48:3e:49:8c:6c:af:90:d8:e0:84:7f:
8b:37:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:05 2026 by rpki-client