Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/frQcDyBVpcPJ2rt_ZrMnfmcl-iA.roa
File: frQcDyBVpcPJ2rt_ZrMnfmcl-iA.roa (raw, json)
Hash identifier: LNm05X+oSXNLv8nJXan47SoyS4Tx5azZLykxO0DPvFM=
Subject key identifier: 7E:B4:1C:0F:20:55:A5:C3:C9:DA:BB:7F:66:B3:27:7E:67:25:FA:20
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019FA520C262B0B1BA1686C330C761574A14
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/frQcDyBVpcPJ2rt_ZrMnfmcl-iA.roa
Signing time: Mon 27 Jul 2026 19:50:15 +0000
ROA not before: Mon 27 Jul 2026 19:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 94.158.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:20:c2:62:b0:b1:ba:16:86:c3:30:c7:61:57:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jul 27 19:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eb41c0f2055a5c3c9dabb7f66b3277e6725fa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:0e:4e:fc:46:b1:98:f6:98:8e:56:90:c4:
cf:b4:e5:55:32:be:b1:3c:9a:03:34:ac:13:09:d5:
59:14:f1:2e:21:2f:21:b1:09:77:cc:97:cf:d6:ef:
99:bc:74:b5:0d:96:6a:8b:2b:86:0f:56:02:c2:11:
6c:e7:a8:64:ac:75:73:74:44:fc:27:cb:7b:e8:b4:
bf:74:35:31:9d:e6:93:86:d1:ad:43:00:bf:3b:f5:
27:ab:d9:6d:a5:b6:dd:66:af:a0:69:25:47:1f:bf:
64:16:02:de:b1:fa:58:c6:ae:c0:70:9d:ca:46:4f:
d9:3f:84:54:33:42:56:31:5b:28:47:9a:b7:6d:95:
f3:95:5b:52:8c:a7:fd:92:ed:26:d2:4f:97:8f:ee:
74:72:62:ee:9f:ed:c4:5f:d7:38:be:ec:d0:49:d4:
14:13:15:67:b8:8f:3b:70:3e:f7:ca:9a:9b:ab:66:
65:07:75:a9:b8:95:c8:f6:ee:b4:b3:53:d7:40:eb:
14:64:7f:dc:19:f5:79:35:88:37:1d:60:32:14:50:
7d:90:67:ed:50:86:a7:3b:46:bb:d3:c3:1c:64:c4:
aa:51:d3:b0:4c:63:bc:28:7a:3c:82:3b:67:70:8b:
e8:21:6e:d5:88:6e:b7:a9:da:d4:2a:bb:f0:50:22:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:1C:0F:20:55:A5:C3:C9:DA:BB:7F:66:B3:27:7E:67:25:FA:20
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/frQcDyBVpcPJ2rt_ZrMnfmcl-iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:94:c2:4a:95:cb:4b:14:0d:24:6a:4b:9a:23:5c:53:a5:a7:
62:2f:d4:5a:f6:f0:b0:81:c1:b5:ea:ae:91:6d:e8:0d:8b:f4:
38:a3:09:34:7a:c6:84:06:e9:e7:78:6a:56:e2:19:76:9d:43:
46:3f:72:88:59:38:e7:71:7d:5d:58:b9:37:d0:e5:68:3c:71:
ef:66:36:ae:8b:9d:40:7b:a4:cc:ec:de:27:24:39:cb:53:7a:
b7:73:7c:b0:30:d1:96:6e:dc:70:a4:a2:4f:c4:30:8d:03:6c:
03:c1:d2:30:bb:54:11:3c:6b:34:0d:a8:94:ce:8a:22:61:59:
e2:f1:46:b3:91:04:af:76:1d:f6:6f:73:be:6e:32:38:bb:30:
18:98:da:71:8a:4c:03:b7:aa:c0:30:69:3c:f8:23:fd:a5:03:
66:65:22:04:d2:b0:19:e8:71:58:ce:80:2c:19:6a:6d:87:da:
ea:2d:47:8b:03:fc:6d:aa:f2:f0:c1:1a:79:2b:fd:bb:b5:50:
85:ea:a8:24:fc:33:b4:6e:be:11:f6:e3:73:9e:e5:61:3c:b6:
94:2d:3b:79:0f:80:3e:10:95:52:ff:33:6a:89:e3:f8:1a:be:
b7:9f:64:32:e2:b6:f7:67:4b:92:19:85:b4:86:4d:cf:0a:4c:
96:0f:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:36 2026 by rpki-client