Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/mles2HufiUWM-bsQWIxbze50R9M.roa
File: mles2HufiUWM-bsQWIxbze50R9M.roa (raw, json)
Hash identifier: rKI59qRmtj0GTCrvg0k8WJz/Yy2pIbgEKyCcyy6drm0=
Subject key identifier: 9A:57:AC:D8:7B:9F:89:45:8C:F9:BB:10:58:8C:5B:CD:EE:74:47:D3
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01A17C888AC6B969E14FB43D07C89070E277
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/mles2HufiUWM-bsQWIxbze50R9M.roa
Signing time: Tue 27 Oct 2026 08:44:45 +0000
ROA not before: Tue 27 Oct 2026 08:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 94.158.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:88:8a:c6:b9:69:e1:4f:b4:3d:07:c8:90:70:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Oct 27 08:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a57acd87b9f89458cf9bb10588c5bcdee7447d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:f2:64:63:ed:28:03:b7:a4:8c:79:ad:3b:
86:5b:ba:70:2b:54:f7:8e:6c:1b:cf:dc:97:70:14:
3c:55:b4:c5:67:81:37:a0:da:21:4a:09:24:43:a2:
82:35:4f:c4:21:a7:ab:4f:c9:58:1a:77:28:89:ab:
9c:df:36:93:67:59:d2:93:d9:ad:09:95:85:c9:02:
a5:22:fc:49:8d:14:d1:32:9b:3e:e6:3f:00:a6:a2:
33:bf:a5:39:78:3a:1c:48:99:60:ed:4b:91:17:55:
12:6a:b5:1e:5e:fb:ff:b3:f5:41:4d:f4:23:5d:7e:
c9:b1:b7:e2:84:4e:2f:95:39:34:5a:db:f2:20:5e:
16:f8:cd:c0:7f:a2:b3:1f:1a:60:8a:54:71:8a:29:
b8:ca:aa:7f:7a:c3:c0:10:d5:6a:eb:f6:91:ec:cd:
f1:9e:07:16:20:31:75:16:c3:51:1c:3c:3d:10:84:
4f:c8:97:87:af:8b:d5:b9:d5:45:6c:92:3f:fd:0a:
3a:31:23:7d:d8:29:7c:a7:f9:91:c5:7c:83:2f:1d:
ab:82:45:bf:c6:dd:51:f9:5a:a6:a3:f8:f4:d8:e3:
19:18:6e:97:5c:eb:71:bb:25:33:f0:68:ca:81:88:
1e:ac:ec:72:44:8b:8e:71:89:60:0e:f0:c0:b8:f8:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:AC:D8:7B:9F:89:45:8C:F9:BB:10:58:8C:5B:CD:EE:74:47:D3
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/mles2HufiUWM-bsQWIxbze50R9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:fb:e1:10:90:61:1f:19:10:44:6a:16:70:ed:e6:a6:d7:32:
33:03:4f:66:17:b7:3b:74:b0:7d:c5:cd:4b:71:77:0e:d7:62:
d8:d8:b7:c5:90:0c:de:ae:35:07:2e:c5:8c:a5:f8:68:39:82:
48:bc:94:7c:23:5f:2b:8e:b7:0d:f9:10:5c:63:9c:a3:e4:bc:
ff:d1:40:b4:39:53:25:dd:98:72:3b:75:93:90:fb:58:36:04:
52:9d:9c:34:84:9f:f0:5f:d3:7d:2b:3a:66:17:5b:10:89:31:
43:70:ea:ae:ba:c7:80:3d:97:0d:2e:a5:e8:e8:d0:84:c7:b8:
8c:bc:9e:bc:03:fe:28:d8:6e:fe:e1:a8:1f:bb:ed:64:2d:fb:
b0:60:02:a3:5c:a1:ca:2b:bb:7e:83:fa:6a:00:b8:48:b6:48:
b3:8e:c2:f4:ae:fc:a5:0d:63:13:0c:25:64:c1:49:a9:56:8a:
17:93:6f:56:d2:23:f4:be:ae:7d:49:bf:7c:a6:98:1a:d1:ef:
5a:b7:f0:da:73:00:87:af:88:b0:aa:74:3c:58:ba:9f:a1:d5:
3f:ea:f7:2f:13:53:da:0c:98:04:7f:36:fa:43:70:b7:ab:25:
0c:0d:10:7a:32:31:03:61:f2:76:11:75:8a:e0:7a:07:9d:5d:
03:b2:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:03:08 2026 by rpki-client