Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wYLVaYJ1U6s8OXKG19QFbWs1Two.roa
File: wYLVaYJ1U6s8OXKG19QFbWs1Two.roa (raw, json)
Hash identifier: ln9cckdkgPsXrBKd0cxivQ8NKxrob81gqkBEOINEhQo=
Subject key identifier: C1:82:D5:69:82:75:53:AB:3C:39:72:86:D7:D4:05:6D:6B:35:4F:0A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C50FF48C220F25942E1889A2937BF61AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wYLVaYJ1U6s8OXKG19QFbWs1Two.roa
Signing time: Thu 12 Feb 2026 08:37:13 +0000
ROA not before: Thu 12 Feb 2026 08:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208111
IP address blocks: 185.13.156.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:50:ff:48:c2:20:f2:59:42:e1:88:9a:29:37:bf:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 12 08:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c182d569827553ab3c397286d7d4056d6b354f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:12:d2:18:8f:92:83:c2:5a:c5:68:10:f4:
0b:ce:1c:f0:e6:c5:8d:70:73:f8:b9:54:e2:e4:6f:
cc:60:dd:cf:ad:22:55:72:c0:a6:60:be:d3:82:bc:
d5:49:9d:62:80:af:3f:1f:f1:e9:bd:da:52:f8:ba:
d9:a3:91:c7:68:28:31:ac:7c:1a:ba:be:2d:c2:ed:
be:0b:f7:e8:38:75:74:51:73:2e:32:e9:1a:b5:e6:
78:1d:91:8f:c5:59:29:a0:77:8b:02:45:01:06:3c:
57:33:d3:b5:85:11:dc:3b:e8:a7:f3:4b:73:af:22:
54:40:9f:7b:92:23:4a:61:39:2f:6a:74:88:a0:22:
34:25:69:ca:d7:21:42:bb:48:cb:5d:48:40:50:31:
ac:50:67:c8:ff:bd:21:f3:a3:3b:e1:bf:cc:ea:74:
fd:29:f9:1f:47:ec:47:fb:67:a2:b0:86:58:8b:c1:
a3:49:ef:4b:06:55:08:74:37:0e:f9:f7:1d:9d:a4:
f4:47:07:be:5a:91:65:09:f4:e7:c5:0b:8d:6b:05:
0a:a3:10:e0:ab:4e:80:e5:1b:be:0c:f3:9b:9e:a9:
e3:36:2c:14:5d:ad:67:5f:29:83:f5:02:61:82:67:
b0:8c:5f:de:f5:0a:b2:3c:7a:fe:f3:b3:67:75:e3:
49:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:D5:69:82:75:53:AB:3C:39:72:86:D7:D4:05:6D:6B:35:4F:0A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wYLVaYJ1U6s8OXKG19QFbWs1Two.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.156.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:a1:ae:01:b9:b0:56:aa:b2:b0:63:4a:be:8f:61:16:d6:
1a:b8:54:12:46:9b:c2:85:c9:af:de:12:28:f8:9f:79:ce:82:
44:4d:ac:71:17:6b:b2:52:21:34:89:7b:0a:2c:20:a6:52:ab:
97:80:0d:72:b4:92:95:d7:87:6a:e8:eb:db:d6:f5:b9:b4:82:
4f:73:e1:cc:61:25:d2:e0:6d:48:f6:67:38:2d:7a:37:e6:88:
7c:11:97:63:b8:11:cc:bc:0f:45:bb:d5:9e:b1:8c:19:83:8b:
47:8f:2c:2e:ff:bc:bb:fd:40:ea:7f:97:97:56:f2:bc:6d:7c:
ca:10:60:a0:0f:a6:56:b4:52:d5:f3:e4:45:23:85:d4:f7:3b:
68:33:9b:b1:b8:64:5b:11:b6:4b:9f:b2:74:1e:e4:f6:cc:77:
50:99:e5:70:20:1d:f8:ea:a7:c3:5f:c1:0d:49:db:1a:59:54:
ad:dc:c2:9c:66:7a:e3:81:33:25:96:35:0e:37:e0:0e:bf:8c:
46:9a:6e:6d:4d:78:21:7a:61:6e:5f:06:e9:47:5e:ca:49:35:
25:c7:56:f9:ed:a7:57:23:15:e2:b3:12:f8:e0:d3:82:9e:35:
9b:e5:53:80:ba:35:89:82:ef:01:61:85:ee:53:fb:a6:8b:3d:
8a:f0:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:43 2026 by rpki-client