Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/VqOZ3whRsxduxnMTa6JPRP4vLkk.roa
File: VqOZ3whRsxduxnMTa6JPRP4vLkk.roa (raw, json)
Hash identifier: yVIoDQ/N+zQsCmaCOZyMs4NA8XIuM7z80Q1qrJrjLlk=
Subject key identifier: 56:A3:99:DF:08:51:B3:17:6E:C6:73:13:6B:A2:4F:44:FE:2F:2E:49
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019C8A134EFE55BC52F2DBAE9F264B583B93
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/VqOZ3whRsxduxnMTa6JPRP4vLkk.roa
Signing time: Mon 23 Feb 2026 10:37:26 +0000
ROA not before: Mon 23 Feb 2026 10:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 217.22.240.0/23 maxlen: 23
217.22.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:13:4e:fe:55:bc:52:f2:db:ae:9f:26:4b:58:3b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Feb 23 10:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56a399df0851b3176ec673136ba24f44fe2f2e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:6d:f8:5e:c7:fb:b0:86:f2:15:08:a2:ae:
f9:8d:7d:8f:fd:36:80:0d:d0:fa:f2:7d:1e:71:29:
ec:db:2b:b0:6f:94:ba:cf:9b:8d:53:dc:43:0d:66:
9d:89:08:0f:87:4c:ea:c1:e4:96:df:78:d9:fc:3f:
81:e5:7c:5c:04:2c:c4:10:51:9f:da:42:10:b0:2e:
83:e9:6c:02:51:bb:b2:d0:46:87:f9:66:fa:df:e3:
c4:63:76:b7:06:32:ef:ed:e3:61:6d:ef:dd:8b:39:
f0:05:85:d6:6e:be:2e:ec:3e:c8:1a:dd:9c:eb:bb:
65:e9:a0:d2:78:ca:5e:2a:e5:f6:83:65:27:d1:30:
6e:9f:79:11:ba:10:a8:17:cc:46:d3:75:06:59:5b:
f0:b1:92:a0:9c:69:0f:21:ad:69:aa:98:2b:cb:8b:
93:ba:e1:4f:48:fb:e6:93:1b:51:a1:0c:b0:c5:50:
66:17:f5:11:85:54:87:ab:e6:e9:01:82:00:21:fd:
db:6f:1c:a0:cb:f8:29:43:15:b3:77:95:3c:2d:0c:
35:da:23:a0:c2:db:81:4f:17:b1:44:ff:85:fc:a5:
b5:2a:e4:a7:1b:de:1c:05:17:d7:ac:fd:bc:45:26:
ec:bc:94:68:28:df:88:45:ac:a3:07:d9:4f:18:be:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:99:DF:08:51:B3:17:6E:C6:73:13:6B:A2:4F:44:FE:2F:2E:49
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/VqOZ3whRsxduxnMTa6JPRP4vLkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.240.0/23
217.22.248.0/23
Signature Algorithm: sha256WithRSAEncryption
02:9b:79:eb:97:b4:80:3c:50:ab:03:a6:1a:d4:cf:48:b8:ff:
80:0d:f8:fb:41:c2:71:db:90:3d:e5:4c:66:5e:6b:4f:1b:c0:
89:03:b2:45:84:2b:86:d7:fe:20:6c:eb:7e:fe:1c:22:76:70:
15:82:df:08:0d:84:b9:3d:c5:c7:5f:5d:3e:14:6c:98:2f:ee:
d3:85:47:da:51:b4:b8:ec:79:d3:be:c6:4e:a5:fc:70:c6:d1:
d0:13:80:84:1a:89:88:3c:65:ef:8f:a4:83:52:85:49:57:7e:
b6:5b:2d:f6:ea:50:46:ee:97:b9:54:ad:90:b8:19:a5:52:17:
ff:12:36:b7:d0:e4:cc:0b:ff:27:3c:3f:c5:52:e5:fd:43:32:
d5:3d:14:c0:9b:51:63:c0:cc:79:ae:29:3e:0f:71:cc:8b:cb:
13:4b:0d:b9:05:40:47:8f:61:35:9f:c1:78:6b:66:82:b8:fa:
1d:a5:02:c3:ac:e3:c4:ba:28:a1:cb:c7:64:fd:9f:6a:91:47:
b8:17:ed:c5:e5:de:a0:81:11:91:57:ab:aa:f2:0b:0d:ba:d3:
4e:3b:72:32:a6:64:5c:e5:8f:f3:de:f5:30:52:e7:89:be:76:
4d:18:75:bb:fa:26:2d:fc:61:0d:9c:aa:72:98:40:74:98:ef:
6b:39:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:07 2026 by rpki-client