Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa
File: WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa (raw, json)
Hash identifier: GmfV7EEWhKbI0gi0zpi283vs2OrNBsy92kA7RhKK+MI=
Subject key identifier: 5A:76:0C:AB:65:E9:44:1E:90:0E:14:B3:64:CF:1A:17:73:33:0A:BB
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368C8D87BD2EFE627B2848D658CFA0E
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199327
IP address blocks: 2a0c:e304:10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:d8:7b:d2:ef:e6:27:b2:84:8d:65:8c:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a760cab65e9441e900e14b364cf1a1773330abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:cf:c9:a4:42:02:9b:30:d2:04:43:57:3d:
9e:5d:a2:c1:ea:f8:0f:ff:5b:8e:4d:b5:92:61:fe:
04:ee:25:77:ec:b9:c9:06:09:a7:29:b3:ce:20:05:
2c:8e:e5:1e:9c:78:52:64:d6:94:12:db:47:c4:fa:
52:28:13:66:d9:36:33:d0:c5:10:05:81:7b:79:ca:
7f:fb:b1:21:65:93:ec:e8:03:e9:58:77:65:98:59:
e0:a2:b9:43:6c:00:01:a1:fc:7d:58:dd:30:db:83:
00:63:a5:e3:99:3f:71:db:de:64:b5:58:ae:67:d7:
97:1b:a3:82:9e:a2:bc:6c:63:4a:68:b4:76:e5:77:
d1:4d:0c:0b:2b:71:6e:79:cc:fb:c6:d7:53:f7:17:
6d:fc:4a:0a:5d:a9:d5:ff:2f:d2:58:e8:16:ed:98:
6c:88:da:7a:cc:34:76:7d:f6:dd:6a:18:72:88:e6:
b5:d6:a6:90:dd:83:c7:f7:aa:13:01:e8:7c:28:6d:
cb:c4:12:3f:6c:65:ea:10:96:73:a1:3d:5e:21:92:
04:47:84:b2:86:2b:35:85:99:63:90:8b:b8:08:86:
ae:2b:3c:5a:b5:0b:f7:94:e0:2b:dd:ac:86:a5:a3:
cf:4d:7a:df:ce:c7:f2:7d:a2:d8:f0:00:0f:ba:c1:
73:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:0C:AB:65:E9:44:1E:90:0E:14:B3:64:CF:1A:17:73:33:0A:BB
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/WnYMq2XpRB6QDhSzZM8aF3MzCrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e304:10::/44
Signature Algorithm: sha256WithRSAEncryption
06:63:c0:7d:ab:20:64:f0:70:05:7c:e2:3c:43:05:1c:7b:25:
8b:f5:6e:ea:b9:c9:4a:f5:8c:00:07:e8:f8:1c:21:11:50:9f:
2d:06:3c:2d:e2:36:3d:75:68:b3:84:95:31:f2:7e:08:2b:86:
b3:1f:b4:15:b9:d6:5b:fb:84:08:0a:d5:a8:8b:85:49:e9:b3:
6c:90:c4:ad:1f:9b:c2:9b:93:ac:0e:57:c0:8c:e4:cf:f2:f6:
5d:52:38:01:04:1b:89:9d:c7:31:d3:ad:7a:76:38:d2:0c:78:
12:fd:60:4a:27:2a:80:42:ca:2e:5b:fb:f9:54:f7:7c:0f:49:
97:5c:81:bf:74:90:d4:47:38:7d:e8:c8:41:84:76:f8:15:3b:
e4:54:5e:28:59:ad:e8:dd:97:e5:b9:be:ea:60:3b:9d:f2:02:
c5:6e:31:fc:f6:8e:3c:de:01:c8:83:36:c2:81:7e:65:1e:4b:
f0:bf:19:b8:d8:d3:5c:23:c2:2d:f5:36:f3:38:4f:c7:8c:90:
73:5e:96:74:ce:e4:43:43:75:9b:47:e9:bb:eb:01:4f:47:91:
14:81:94:ea:94:a4:b2:d9:5e:54:d4:08:bf:a7:f2:f0:08:aa:
3a:17:61:d8:ff:1c:48:04:69:05:43:2b:68:42:04:82:28:fd:
4c:df:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:34 2026 by rpki-client