Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Jw--HlTP7Hg1Cz9lCICcQLdMm4Y.roa
File: Jw--HlTP7Hg1Cz9lCICcQLdMm4Y.roa (raw, json)
Hash identifier: mD8DwQb8VCzHqAz1/iXJZrxkINTD03oKF/WvOyQ25ek=
Subject key identifier: 27:0F:BE:1E:54:CF:EC:78:35:0B:3F:65:08:80:9C:40:B7:4C:9B:86
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019D96647B0A710E87ABB63B360F43CD92F5
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Jw--HlTP7Hg1Cz9lCICcQLdMm4Y.roa
Signing time: Thu 16 Apr 2026 13:04:20 +0000
ROA not before: Thu 16 Apr 2026 13:04:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150423
IP address blocks: 82.119.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:64:7b:0a:71:0e:87:ab:b6:3b:36:0f:43:cd:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Apr 16 13:04:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=270fbe1e54cfec78350b3f6508809c40b74c9b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:00:a4:ab:ab:58:9f:ce:60:2c:6a:02:db:
e6:e6:80:47:1a:29:99:4b:e9:30:b1:e0:12:48:c5:
d9:da:0d:17:6c:7f:29:a0:91:cc:22:bf:50:08:65:
98:a0:e5:00:f8:a6:ed:53:c9:db:10:85:17:99:e8:
44:f2:df:1e:f7:7d:c0:ff:e6:97:47:3b:b7:a9:01:
4d:c8:91:77:9c:fd:c0:c9:b6:98:3c:f2:08:4b:40:
1e:95:7d:f4:1c:b6:78:59:8c:7a:96:1b:5f:a3:b8:
3e:58:1a:41:53:eb:15:45:60:52:68:91:7f:49:2d:
8c:d3:79:55:41:0c:42:4c:f9:a9:eb:70:8f:60:4b:
6e:f2:46:71:18:99:bb:77:a4:0e:fe:17:32:d1:74:
7e:e7:25:5b:bf:b5:79:d0:41:47:af:39:40:00:42:
88:4b:5a:4c:45:cb:74:e0:4e:6d:e8:a0:19:60:72:
82:33:06:08:2d:22:4a:54:52:4d:d2:3b:cb:47:f1:
fb:ee:67:0e:8e:1f:f4:ac:00:12:0f:95:ca:de:e6:
e7:63:41:e5:19:57:24:be:15:28:5f:6a:12:c5:5c:
63:fd:ac:86:be:3b:f7:29:94:cb:cd:6c:c5:7f:d9:
aa:07:8b:41:da:3b:6c:41:07:31:05:ac:18:b9:af:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:BE:1E:54:CF:EC:78:35:0B:3F:65:08:80:9C:40:B7:4C:9B:86
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/Jw--HlTP7Hg1Cz9lCICcQLdMm4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.203.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9d:8e:4a:49:3c:89:68:6c:b3:ec:83:18:9d:d0:15:da:bc:
b4:41:83:23:c5:5a:ab:b8:14:7b:b2:6e:c1:be:3b:85:8c:e6:
36:40:ce:2d:9e:e2:2f:81:44:80:4b:85:a6:45:a1:bd:c1:06:
bd:56:39:28:e6:d2:80:a2:fb:76:89:12:b7:50:f5:bc:20:ae:
5c:be:7e:8e:c6:b3:98:e6:f1:70:42:d5:60:95:d9:a4:69:24:
73:b7:7a:76:37:f2:f8:f6:d4:0a:61:f8:52:ec:fc:40:c2:32:
fc:27:cf:5c:3d:e0:43:f9:da:72:8d:0f:00:a5:56:b2:c8:12:
d4:f6:ce:98:7f:f4:cc:a7:46:f9:35:27:d5:83:0a:c0:87:dc:
10:2c:ea:64:63:ec:80:f4:96:41:a1:64:ac:53:1d:c7:09:27:
65:70:8a:0c:27:a7:d9:5d:3b:85:9b:c7:ce:d8:ef:87:07:81:
88:eb:21:f2:b7:00:2d:93:29:74:90:b4:1a:b6:8a:eb:6f:e8:
05:98:df:53:96:a9:5d:7d:d8:8d:95:40:ac:3f:3e:9e:97:52:
e5:e0:c7:6a:66:fe:37:2d:d4:fb:d9:a7:b1:fb:d4:fe:6e:0f:
66:2b:2c:5f:ae:3a:1b:ed:fd:81:d7:8d:59:9e:06:14:27:44:
4b:db:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:41 2026 by rpki-client