Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WCqlUBSDrY77Z9sxTsVO9QsQb58.roa
File: WCqlUBSDrY77Z9sxTsVO9QsQb58.roa (raw, json)
Hash identifier: GBt0685d0//jGJB+08Hy8EIEYNRxZlwfcuGYpk9+ZRQ=
Subject key identifier: 58:2A:A5:50:14:83:AD:8E:FB:67:DB:31:4E:C5:4E:F5:0B:10:6F:9F
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0CAE78B3335EFB0D0FD6D2603EB6B23BC
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WCqlUBSDrY77Z9sxTsVO9QsQb58.roa
Signing time: Tue 22 Sep 2026 20:56:07 +0000
ROA not before: Tue 22 Sep 2026 20:56:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218803
IP address blocks: 95.164.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:e7:8b:33:35:ef:b0:d0:fd:6d:26:03:eb:6b:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 22 20:56:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582aa5501483ad8efb67db314ec54ef50b106f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:fd:2f:38:76:9d:fe:6f:76:32:de:22:bf:
43:44:ed:ff:27:4f:10:da:68:fe:28:79:f7:a6:22:
21:c3:09:05:20:14:4d:9b:41:5f:b6:b7:96:2f:90:
5c:e9:92:f6:a4:f2:51:77:79:cc:94:26:87:e6:e9:
ac:3b:f6:1a:d1:27:eb:34:fb:71:c4:f5:92:27:b5:
00:20:5f:32:dd:ef:52:bd:b6:be:47:e5:76:a6:0f:
4f:57:b1:d3:3b:36:41:45:60:35:9a:1e:e1:07:b8:
ce:d8:de:75:c3:e8:07:04:d8:11:51:b5:b7:09:e0:
77:39:c0:32:71:32:cb:3c:12:ac:71:5d:ad:3d:9b:
5a:a2:2e:5c:0e:33:fc:57:62:f1:11:86:76:34:1d:
b0:4b:cf:00:6d:79:d5:ea:97:65:8b:73:99:11:1c:
e9:7a:9d:d4:12:b0:4d:40:fb:c4:94:09:a5:fd:31:
ef:97:d1:4d:9c:0a:61:8a:0a:5a:7c:d3:1d:34:e9:
ca:08:e9:2c:19:15:c4:64:a7:69:47:61:0e:f2:8c:
ec:86:d7:36:69:3c:d9:03:1c:b4:91:da:6f:de:94:
14:0f:dc:6c:18:85:25:2f:40:1c:ee:e4:22:f9:9e:
3e:b4:10:e6:b7:38:1d:c2:13:d0:6c:54:40:66:3e:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:A5:50:14:83:AD:8E:FB:67:DB:31:4E:C5:4E:F5:0B:10:6F:9F
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/WCqlUBSDrY77Z9sxTsVO9QsQb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:5d:ba:63:87:9d:de:83:59:f4:69:22:e6:f2:27:86:0d:51:
9b:0e:68:2a:e6:5b:c2:72:56:d5:2f:1f:39:99:5d:13:35:22:
3b:81:2e:73:ba:5b:90:80:d2:20:e8:08:c8:fd:8c:59:c2:08:
9b:9f:b9:b6:af:2f:f5:8a:94:09:ab:ef:91:4f:31:b2:66:c0:
03:1a:af:bc:36:60:d9:63:35:f2:00:5d:2d:62:bb:65:d0:dc:
fa:d7:0b:5d:68:33:79:e4:28:df:c9:60:cc:5c:91:1a:58:0f:
48:4e:cf:e1:92:25:6e:8c:0f:54:39:54:7c:62:05:73:4a:c3:
a6:69:65:2e:3b:a3:d3:13:a9:2b:05:50:4f:29:15:30:5a:41:
26:70:2d:0e:47:4e:dc:17:27:37:3a:75:30:bd:17:fe:7c:fb:
1f:b9:9d:20:47:7e:bf:7a:c7:c9:85:bf:da:52:ee:12:d9:25:
79:e1:af:7c:f9:a9:56:d4:32:d8:2c:32:98:b1:f4:1d:bb:01:
7c:9c:7f:d7:8f:a7:ae:9f:7f:9f:b4:dc:8b:fc:1f:fb:b7:79:
12:fc:f3:fb:41:d8:1b:75:df:05:67:90:1c:49:01:27:04:80:
fc:3e:24:bd:2e:86:ca:5a:2b:1a:e5:38:24:ee:12:d3:48:cc:
cf:97:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:59:39 2026 by rpki-client