Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Wa87ZwDlm2kr7EAa8ruzJPN6zIs.roa
File: Wa87ZwDlm2kr7EAa8ruzJPN6zIs.roa (raw, json)
Hash identifier: eeRPW9UP3Zh/4LQrWkVzPMUzrYJ4zenpeqZ7enkrjZI=
Subject key identifier: 59:AF:3B:67:00:E5:9B:69:2B:EC:40:1A:F2:BB:B3:24:F3:7A:CC:8B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C8E636FAD43F49B46DBD447E4D8196D18
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Wa87ZwDlm2kr7EAa8ruzJPN6zIs.roa
Signing time: Tue 24 Feb 2026 06:43:27 +0000
ROA not before: Tue 24 Feb 2026 06:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212895
IP address blocks: 81.18.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:63:6f:ad:43:f4:9b:46:db:d4:47:e4:d8:19:6d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 24 06:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59af3b6700e59b692bec401af2bbb324f37acc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:f2:67:cb:47:39:e4:cf:f0:ec:66:4f:40:
25:6c:7b:c3:f5:11:df:3c:5b:93:e9:41:a4:6a:81:
dc:e3:78:6c:e4:ad:cc:91:28:8b:b3:62:9f:34:d1:
85:39:29:87:29:6e:6a:bb:91:a5:4d:95:4f:32:25:
1c:1d:f0:e2:b9:fb:85:a7:ca:01:cf:73:f2:58:ae:
f9:e8:f5:f0:31:6f:de:43:f6:68:ec:f7:f9:94:39:
35:ad:78:ed:72:b5:0e:b8:c8:83:e5:5d:c1:7b:53:
86:46:81:3f:50:4e:df:c4:31:79:e6:90:3a:04:cb:
ad:75:ea:62:2f:ec:b0:ee:2a:dc:95:bc:d9:9c:5e:
b8:bb:00:af:17:1e:30:0f:17:38:05:19:73:50:ed:
01:7a:a0:2b:33:ea:f4:67:ee:96:b1:4a:b3:5f:f2:
8f:9a:94:e9:ae:d7:8e:31:22:73:85:7a:ec:95:9c:
2b:50:4a:fb:c6:2b:d8:64:c4:88:92:2e:7b:28:87:
0f:60:d0:09:38:2f:6d:a9:bc:61:56:b1:0c:2d:bf:
b5:c6:1a:4f:40:b8:20:d5:e2:b0:b0:fb:03:11:e1:
cb:7e:9c:53:74:25:48:13:02:c5:e7:96:74:e6:b0:
61:dc:7b:0c:64:1c:4d:9a:f1:21:36:bf:3c:7e:d7:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:3B:67:00:E5:9B:69:2B:EC:40:1A:F2:BB:B3:24:F3:7A:CC:8B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Wa87ZwDlm2kr7EAa8ruzJPN6zIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.58.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fc:16:f5:89:28:ee:e8:9a:ab:11:bc:e1:43:8b:cb:88:c1:
fd:2a:9b:0f:e1:14:01:be:90:36:cf:ad:34:77:33:23:36:ea:
3a:82:75:0c:5f:29:06:79:a3:33:78:c2:db:a8:b9:1b:c2:72:
49:d4:e1:fb:3a:0e:19:7f:72:bd:e7:9b:21:46:9e:0a:1e:4f:
c0:01:ff:d1:50:c5:4c:03:d3:0d:af:d2:77:ef:e6:a1:21:2e:
0e:17:c4:a7:e5:e6:04:d8:d7:9d:37:30:3e:7e:ac:2d:bf:5f:
f1:0b:38:28:d8:99:df:ce:37:0a:af:63:d3:25:e4:6b:29:fb:
a4:05:4b:d3:db:0b:c1:60:49:ac:f8:0a:69:07:7a:66:2a:7a:
29:be:c3:59:9e:3c:26:10:c4:94:b2:49:7e:bf:7d:e1:66:58:
cf:89:ac:d4:c7:3f:1b:80:0b:c1:3b:64:7c:9a:26:60:2b:54:
4a:e6:75:50:0e:5c:88:0a:54:e4:cf:e1:57:d7:c7:d9:39:a9:
ee:0b:84:40:46:4d:8e:c8:30:4b:b0:ab:9f:e5:27:e2:d1:68:
49:2a:57:39:3d:a7:fc:fc:85:21:56:1b:e2:1f:ed:52:09:39:
91:b5:0a:c4:f9:cd:48:75:57:7b:7c:28:e9:a6:d7:05:26:d5:
7a:eb:7c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:47 2026 by rpki-client