Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wBXwsccmqyJDcZ3zaeX15SQQRTY.roa
File: wBXwsccmqyJDcZ3zaeX15SQQRTY.roa (raw, json)
Hash identifier: WuUisQGKPuMF/EYC273zB1SEw+CNZyKQ5mzYUFRkZs4=
Subject key identifier: C0:15:F0:B1:C7:26:AB:22:43:71:9D:F3:69:E5:F5:E5:24:10:45:36
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01A114E1D13592751F178C5787283A54391D
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wBXwsccmqyJDcZ3zaeX15SQQRTY.roa
Signing time: Wed 07 Oct 2026 05:41:45 +0000
ROA not before: Wed 07 Oct 2026 05:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 185.36.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:e1:d1:35:92:75:1f:17:8c:57:87:28:3a:54:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Oct 7 05:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c015f0b1c726ab2243719df369e5f5e524104536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:9e:a3:01:a5:d9:cc:9d:f3:41:74:63:11:
9f:d7:56:97:52:f2:15:2c:61:46:0a:95:57:3b:cb:
31:74:a0:a9:41:9d:fd:6e:f2:72:62:eb:66:66:fb:
0e:68:98:9d:ed:67:6a:cc:46:57:b2:11:41:d5:c8:
59:64:57:e2:fd:82:25:48:ed:52:53:2d:d4:70:83:
39:6b:89:2b:f9:69:e3:ae:90:a4:28:46:44:5f:5c:
55:6c:77:5c:51:c1:57:48:ee:32:14:a5:a5:d5:2e:
31:b5:9d:01:6f:7f:35:dc:01:1f:f0:27:02:46:a2:
f4:55:36:3a:91:9c:30:55:6c:66:66:5a:8a:93:2f:
a1:e0:d0:e1:cc:96:5d:3c:8f:76:1b:55:ca:72:0b:
05:9d:d7:43:42:2f:ed:30:e0:5b:b9:5d:c7:2b:f6:
4d:fb:ba:5b:60:b2:2e:ac:fe:2d:06:e5:4f:ab:2c:
70:a7:7d:9e:80:b1:b4:03:16:dd:f5:00:48:41:ae:
02:f6:6e:d3:26:67:d6:d3:2d:b3:1f:c7:48:65:7f:
e6:6c:10:c5:04:d2:e7:55:e3:dd:52:db:b1:33:bd:
d0:16:6b:2b:17:00:39:9b:44:0d:b3:34:09:2f:a9:
a4:49:bc:0c:66:84:fe:bd:86:1c:d5:02:2b:04:1e:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:F0:B1:C7:26:AB:22:43:71:9D:F3:69:E5:F5:E5:24:10:45:36
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/wBXwsccmqyJDcZ3zaeX15SQQRTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d4:80:f2:53:79:46:fd:88:ac:12:02:f2:3e:a8:c3:70:e5:
5b:84:dc:c8:2c:69:eb:dd:4d:6c:a4:ca:17:07:bb:ca:e6:7e:
0c:f0:b0:49:6c:f3:db:c2:52:9c:aa:fc:a6:0d:e6:72:fe:d4:
eb:90:95:75:8e:f2:7d:92:01:8a:19:fc:5e:ca:2d:8b:ab:9f:
f7:6d:07:26:f1:91:19:80:00:f5:0b:c9:46:57:59:97:8c:8b:
ed:61:da:21:2c:29:4e:75:ac:7d:51:20:8a:23:af:4b:1e:35:
c5:74:25:d9:d1:48:45:ab:65:25:60:d8:d0:7c:b8:37:76:d9:
c2:c4:b9:c7:7a:d3:79:28:7d:7f:63:03:1f:c5:47:ed:61:52:
f6:bb:e9:80:fd:e3:7e:2a:fd:ed:be:af:11:8b:37:0b:44:f2:
2d:04:f0:6f:ff:f3:36:5c:79:c4:88:e2:df:78:03:6f:be:1c:
57:0b:bd:d9:85:ab:69:ba:c4:e9:19:a3:63:ae:aa:e7:b7:39:
01:f2:c6:88:a5:87:43:b6:d1:c0:fb:dc:cd:d9:e7:ed:5d:38:
17:c9:73:d2:48:2b:2a:ae:2e:68:0e:37:c8:a6:4b:8b:5a:0e:
99:38:aa:95:10:1e:a1:20:da:2a:be:08:e8:b8:ef:da:98:4e:
4c:8a:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:57:36 2026 by rpki-client