Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/T5vwBG-Jelek2tVRSifMvoFFgm0.roa
File: T5vwBG-Jelek2tVRSifMvoFFgm0.roa (raw, json)
Hash identifier: 5VrI2FPDIeobu7mD5m/TBs2V5vcm2y+xIX+UXJ0WGJ4=
Subject key identifier: 4F:9B:F0:04:6F:89:7A:57:A4:DA:D5:51:4A:27:CC:BE:81:45:82:6D
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019FA520C1CC3E8D038EA108460BC89B35D2
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/T5vwBG-Jelek2tVRSifMvoFFgm0.roa
Signing time: Mon 27 Jul 2026 19:50:15 +0000
ROA not before: Mon 27 Jul 2026 19:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208437
IP address blocks: 94.158.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:20:c1:cc:3e:8d:03:8e:a1:08:46:0b:c8:9b:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jul 27 19:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f9bf0046f897a57a4dad5514a27ccbe8145826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:99:a8:6c:2d:4c:18:fe:b6:f5:41:73:1e:
d4:d5:2f:94:87:a9:c4:6b:2e:ef:e1:a8:29:45:8d:
a4:9b:90:2f:f5:5b:87:54:58:f1:6e:ee:19:02:a6:
07:71:4c:27:ae:9a:c8:fa:ef:89:4b:07:18:59:42:
7d:5b:25:f1:09:38:e4:71:08:41:49:3c:fd:1c:3d:
7f:95:3e:9c:9d:91:a9:b9:d0:46:5d:44:a7:ae:f9:
a9:b5:b6:c4:cc:50:0f:30:53:3b:16:79:71:8b:36:
23:dc:06:35:2e:46:16:8c:38:7c:a0:86:99:ad:c4:
da:b8:db:4e:53:4e:9a:ff:c2:52:23:f2:b3:98:96:
74:44:32:98:81:bb:83:4b:2a:f2:ed:8b:f1:32:88:
1c:03:b3:3e:e5:ef:51:48:e3:cb:04:8e:33:94:8e:
f0:ad:d6:34:5f:17:95:db:4e:fb:66:b3:b7:7b:03:
0c:c4:40:32:f9:aa:dc:85:96:be:19:ab:85:d4:af:
a4:81:0c:8e:48:09:0d:bc:c8:cf:5e:b6:f2:a4:5a:
b6:98:59:04:f2:7d:28:a3:1b:04:c9:24:31:ce:40:
ed:03:51:5d:41:04:5d:11:1c:c7:96:07:6a:54:cb:
c6:87:8c:3d:d2:60:f6:86:90:ea:05:4c:93:53:d9:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9B:F0:04:6F:89:7A:57:A4:DA:D5:51:4A:27:CC:BE:81:45:82:6D
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/T5vwBG-Jelek2tVRSifMvoFFgm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.185.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:17:00:1d:76:78:51:bb:1b:30:d8:9e:aa:cd:31:4d:a8:17:
00:c9:69:41:3f:e7:7b:be:60:74:90:6a:24:5c:98:0f:6f:93:
f4:d0:50:1e:a4:7b:8d:eb:9c:d3:fd:cb:68:81:8c:f3:85:51:
57:a4:27:56:0f:0c:fb:71:56:12:0c:c9:72:cd:1d:83:1e:ad:
77:0d:b1:94:8a:81:8c:9e:be:7e:8c:3f:95:51:3a:a9:79:57:
b2:b6:c5:5c:8b:8a:e5:2f:5b:4b:34:76:44:94:4f:5a:41:f3:
15:fb:c2:61:06:9a:f5:c0:29:33:d2:fa:81:83:20:e1:ca:7b:
72:9d:20:ea:41:32:4f:34:11:bb:a3:d3:2a:25:08:53:3c:57:
ec:e4:85:78:be:a8:ce:7b:3b:08:b4:c6:0d:4c:7f:d9:45:c3:
f8:5d:2c:20:ab:9a:c6:0d:a6:01:0e:32:05:0f:1e:8d:33:43:
3d:60:8f:4f:da:3b:08:17:f3:05:b4:66:2c:32:f7:be:07:94:
67:88:e3:69:a5:2b:51:22:40:3a:23:64:00:ca:f9:fd:1e:1a:
ed:3b:26:58:60:ce:18:03:52:56:2f:b2:e9:56:f6:af:e5:ce:
0f:84:bc:0e:02:28:dd:b3:03:9c:b3:0b:dc:e6:fc:6d:eb:c7:
c6:c7:8c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:15 2026 by rpki-client