Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WggEhQD6d7I3PE9SEE8ADUco5QI.roa
File: WggEhQD6d7I3PE9SEE8ADUco5QI.roa (raw, json)
Hash identifier: jTi+R2bqRPilhxFMVT+65ad10pjb8vGQ2hBU42NT6Mk=
Subject key identifier: 5A:08:04:85:00:FA:77:B2:37:3C:4F:52:10:4F:00:0D:47:28:E5:02
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1BCB43369F693A94DEB78988C3881363A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WggEhQD6d7I3PE9SEE8ADUco5QI.roa
Signing time: Sun 08 Nov 2026 19:48:08 +0000
ROA not before: Sun 08 Nov 2026 19:48:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 37.221.110.0/24 maxlen: 24
83.136.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bc:b4:33:69:f6:93:a9:4d:eb:78:98:8c:38:81:36:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Nov 8 19:48:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a08048500fa77b2373c4f52104f000d4728e502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:d2:67:17:e5:d9:0b:fe:6e:d4:0c:b6:ef:
e3:07:08:a3:eb:99:19:8e:76:6c:cc:19:ed:61:2d:
1e:72:6f:6f:1c:1f:41:3c:eb:dd:19:0a:4e:8b:ed:
41:a7:3e:33:29:39:8b:47:55:5e:02:b3:4f:a3:ab:
8e:e1:50:0a:91:16:2a:4e:52:93:0d:53:36:fa:0b:
93:3d:bb:f2:73:83:a6:51:5f:f6:f7:9e:40:1a:1c:
ac:6e:6c:2a:17:7c:e8:47:d3:7c:28:5c:d9:e6:52:
de:a8:e3:72:5d:a2:8d:e4:86:8e:f7:77:3c:61:40:
bb:63:bd:54:6b:b6:b1:c8:57:da:e8:eb:aa:52:3b:
be:87:7f:a3:b5:41:ad:f3:d9:49:ac:e9:bf:a3:cb:
3a:f8:27:f1:74:ea:ac:01:b8:fa:75:b2:58:79:71:
df:38:2b:7a:f2:bd:b8:96:df:09:36:2a:0e:78:d0:
76:20:f1:fa:75:74:39:8e:68:9b:a8:d2:28:38:f3:
76:c5:97:60:6e:88:ff:76:1c:09:84:f5:41:6b:14:
31:f7:ae:86:f5:f0:c2:30:2a:01:da:02:f4:14:7a:
41:c1:29:ab:a7:18:03:a9:67:80:05:32:c3:3f:57:
e3:e3:2c:97:4e:d9:be:15:06:3f:56:7e:e5:73:eb:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:04:85:00:FA:77:B2:37:3C:4F:52:10:4F:00:0D:47:28:E5:02
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/WggEhQD6d7I3PE9SEE8ADUco5QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.110.0/24
83.136.50.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4e:d7:ab:53:98:06:d5:15:89:6e:a6:13:62:23:09:59:8f:
74:bf:e8:69:b3:2c:5c:cf:5b:a8:53:14:86:c2:c1:e3:de:0a:
78:c3:57:da:4b:62:3e:80:33:06:c2:fd:c6:9f:ca:d7:f1:4f:
67:ab:9b:68:f5:f4:19:4b:46:3b:8f:46:9e:02:d8:10:58:2b:
64:ed:3b:76:96:21:c5:79:c8:ad:fc:2e:b2:e1:0e:36:01:ba:
bc:85:cf:78:05:38:84:5f:3a:90:47:b9:5b:9c:88:4f:71:6f:
77:8b:72:f4:bf:5f:bd:01:e9:b7:1e:26:ad:35:e7:c9:47:37:
53:51:8b:8c:96:3a:e5:d9:43:ca:51:a4:72:71:2e:4c:1b:3e:
4b:c6:1d:35:a0:1c:ea:57:15:70:3f:6f:ca:ee:03:31:d6:a8:
fd:17:f7:60:39:1c:ff:7e:e5:48:0a:aa:63:b6:bf:61:8e:36:
f8:fa:21:b1:ab:b7:33:50:18:2c:f6:f7:7b:8a:c1:8e:95:65:
c2:c9:ab:44:e0:09:11:df:55:8b:c3:d7:e9:37:96:77:23:03:
96:63:0e:83:ab:d3:18:c5:c9:c9:a2:ad:c6:99:e7:08:d3:8a:
84:61:0d:66:c4:7e:50:ae:32:f1:45:f2:e3:58:7f:cd:17:7d:
a8:fb:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:33:02 2026 by rpki-client