Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa
File: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (raw, json)
Hash identifier: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=
Subject key identifier: C0:11:A3:81:D7:EE:FE:72:D1:47:80:E3:38:17:68:D0:FB:4A:24:C3
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 019C756B01FC08888579B36070B07411180D
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa
Signing time: Thu 19 Feb 2026 10:21:12 +0000
ROA not before: Thu 19 Feb 2026 10:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210350
IP address blocks: 2a11:c6c0::/48 maxlen: 48
2a11:c6c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:6b:01:fc:08:88:85:79:b3:60:70:b0:74:11:18:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Feb 19 10:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c011a381d7eefe72d14780e3381768d0fb4a24c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:e4:04:d6:1e:73:6c:ed:06:fd:f4:97:df:
f6:74:79:f8:3a:b3:69:60:27:d6:58:b6:51:3f:0a:
87:5e:e1:47:41:6d:eb:a6:ba:42:e2:38:6c:57:91:
50:72:bf:5b:ac:a7:85:ba:7e:d5:12:7e:61:2d:5b:
e9:16:d6:ac:2e:13:c0:83:cc:25:f6:0b:35:d1:eb:
84:c8:15:f6:75:a2:2b:de:2e:cc:c7:0f:46:14:0b:
d3:02:d5:00:8b:6e:d0:a4:89:6f:26:78:cd:4a:9b:
9f:5a:43:d6:d4:21:4a:cd:34:50:6e:31:7c:fe:65:
26:34:a7:c4:77:57:82:bc:20:95:ba:f8:b4:d8:3e:
80:ad:e5:58:85:3a:7d:a9:79:72:8f:19:74:a2:15:
47:22:be:14:02:70:c3:69:e2:88:b9:5f:64:a4:8e:
f0:c2:90:e3:d3:e8:dc:92:c4:51:1d:59:7f:1a:11:
ec:10:69:01:6f:b6:6b:6e:41:a9:aa:27:61:e1:f5:
6f:24:30:01:e1:32:d8:24:6d:d9:7b:70:cc:1b:58:
da:24:45:7e:20:a5:da:b4:d4:7f:15:50:0e:0e:53:
43:4a:4d:3a:34:6e:1b:8e:dc:a1:7a:b1:31:32:76:
33:fc:2f:87:b0:05:08:82:fa:c9:9b:12:cb:d3:e9:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:A3:81:D7:EE:FE:72:D1:47:80:E3:38:17:68:D0:FB:4A:24:C3
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c6c0::/47
Signature Algorithm: sha256WithRSAEncryption
84:e3:5b:9b:0a:f1:e8:2f:cc:03:03:6d:40:4c:f1:a1:5a:6d:
e8:fa:2f:bb:d2:d1:70:8b:16:36:39:ac:02:8c:fb:cf:df:0c:
80:53:42:e3:c7:ce:05:45:bb:f2:b0:3e:5f:01:0d:5d:b4:bf:
ab:fe:37:93:6a:5e:ea:7a:c8:5b:0e:37:3b:1f:75:24:e7:44:
38:c8:71:d9:7d:ae:6f:c0:19:24:31:05:53:a7:ab:c9:8f:12:
b4:ff:35:19:1b:cb:03:d2:03:b5:8f:8c:85:6b:d6:35:2f:24:
3d:3f:77:d9:42:e5:26:2e:b4:d8:92:45:e0:3f:2e:65:33:28:
f6:05:2b:d2:6f:47:06:12:a4:e9:ab:53:23:83:51:09:7a:d7:
ac:db:a7:5f:ae:ea:5a:6e:b2:e7:9a:c6:1c:5a:11:83:3c:5e:
b4:5d:9a:78:7e:76:0d:67:c4:8e:74:8c:19:36:8c:57:ca:ac:
4b:e7:3e:dd:64:b5:03:0b:c4:e0:69:0e:98:fd:37:23:67:3c:
96:31:b4:2a:80:19:02:d1:d8:af:88:a7:fe:43:50:ed:5f:1e:
82:4f:91:63:c3:b5:76:a8:4b:3d:6c:cd:10:c4:d9:97:ed:6a:
cf:ab:61:8f:29:82:af:50:7f:07:8f:9c:ef:e5:22:0a:eb:42:
d0:b6:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:04:27 2026 by rpki-client