Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/wksYSx05kpG2_m1bA5uuiXnqKFc.roa
File: wksYSx05kpG2_m1bA5uuiXnqKFc.roa (raw, json)
Hash identifier: k+uDuqacR/yRBvtSsf1I4NfjvCtYBj4iQtFjb6MXywg=
Subject key identifier: C2:4B:18:4B:1D:39:92:91:B6:FE:6D:5B:03:9B:AE:89:79:EA:28:57
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019DF78D505CBD3329F7A23D1F8E857AEBB1
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/wksYSx05kpG2_m1bA5uuiXnqKFc.roa
Signing time: Tue 05 May 2026 09:52:06 +0000
ROA not before: Tue 05 May 2026 09:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51306
IP address blocks: 194.127.244.0/22 maxlen: 24
2a07:cf80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:8d:50:5c:bd:33:29:f7:a2:3d:1f:8e:85:7a:eb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: May 5 09:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c24b184b1d399291b6fe6d5b039bae8979ea2857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:3e:c5:36:1d:11:78:fa:fb:16:ec:c2:b6:
4e:3a:a9:63:d1:d9:1f:26:e2:c9:88:79:8e:be:67:
4a:29:08:aa:b2:e5:fb:01:9d:b5:06:19:7a:04:96:
89:a0:47:6a:71:51:a2:25:48:4c:7a:7b:a5:c6:85:
f3:49:eb:ef:17:fe:69:2b:bb:1a:8a:8f:de:6e:ee:
16:66:d0:8c:14:5f:0b:a1:59:1c:e5:c8:ac:ec:b5:
1a:ae:cc:d3:a0:81:e2:9f:93:ee:0d:ef:30:d7:df:
4c:b1:e3:ad:82:08:ae:10:c0:1b:a9:3d:0a:a0:c7:
00:d7:b8:2c:3f:4a:ed:5d:8e:65:d7:22:bd:f8:9b:
6f:84:f2:5b:26:81:ac:90:0c:89:17:63:d5:c2:3b:
8b:5c:01:29:1e:53:2c:1e:7b:9f:68:d2:2a:17:e5:
30:e0:33:90:4c:04:45:70:8f:52:91:38:19:4e:c0:
45:b2:86:0b:06:72:f0:8a:42:fc:d4:af:9a:51:28:
ad:cf:dd:f4:e5:83:58:15:9b:32:ef:31:cd:1b:37:
1c:f7:49:58:1f:13:32:fb:92:f4:05:cb:5b:19:31:
21:b6:88:e7:ec:62:a7:11:08:e2:b8:cf:4f:93:de:
3f:9a:c3:01:16:fb:f0:55:2e:e9:4e:89:d5:c2:6f:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:18:4B:1D:39:92:91:B6:FE:6D:5B:03:9B:AE:89:79:EA:28:57
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/wksYSx05kpG2_m1bA5uuiXnqKFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.244.0/22
IPv6:
2a07:cf80::/32
Signature Algorithm: sha256WithRSAEncryption
17:b5:75:26:71:5e:31:2b:0b:93:d6:86:5d:20:8e:96:5a:4c:
00:e6:8d:6e:cf:28:c2:8e:e3:7b:e3:4d:75:3f:5d:82:fc:0f:
97:39:8e:7b:5e:10:fd:d0:4e:68:c0:13:52:ad:ba:9b:11:6f:
5a:9b:e0:ea:f9:22:b5:8b:c4:b5:48:dc:4c:58:0f:c9:6d:fd:
b4:cd:b5:1f:9a:e3:17:75:07:c9:2a:78:4d:5a:1f:af:76:66:
86:92:67:58:81:7f:56:43:d3:80:b2:c5:2f:e1:ac:88:ae:85:
57:2f:21:81:5c:13:ba:3c:f1:8f:a8:f4:af:d5:fb:ac:35:02:
9b:c4:37:78:ef:fb:2a:6a:fb:c4:44:63:2b:f1:6d:a2:62:bd:
b4:78:9e:1e:bc:9b:e3:64:91:41:cf:f8:ba:e4:3c:54:1c:e0:
32:83:61:7b:f4:60:9d:62:61:03:d2:74:14:f0:cf:91:99:cc:
34:df:30:01:24:a2:fb:f1:f4:b1:98:c1:d1:a2:8a:b8:c3:17:
4e:1b:f0:5c:96:bc:e8:02:ad:ff:3f:79:7f:98:88:b2:c7:05:
cd:d7:22:03:2b:7d:13:45:bc:39:1d:80:0e:65:6a:e6:40:01:
61:78:d1:e9:a6:58:9b:35:89:c2:5e:15:16:17:ba:ba:5f:f7:
a2:26:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:39 2026 by rpki-client