Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/wtAobWAtIsJ9eoMextQEU1zoyGo.roa
File: wtAobWAtIsJ9eoMextQEU1zoyGo.roa (raw, json)
Hash identifier: QGRc3yCeMrwfNC3vCqeJOv3KoeMn2Gn4BzCoJrTisLA=
Subject key identifier: C2:D0:28:6D:60:2D:22:C2:7D:7A:83:1E:C6:D4:04:53:5C:E8:C8:6A
Certificate issuer: /CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Certificate serial: 019B77C704CC08B9718B94AD78F48C407DDC
Authority key identifier: 55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/wtAobWAtIsJ9eoMextQEU1zoyGo.roa
Signing time: Thu 01 Jan 2026 04:18:10 +0000
ROA not before: Thu 01 Jan 2026 04:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211458
IP address blocks: 185.23.110.0/24 maxlen: 24
2a10:df40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:04:cc:08:b9:71:8b:94:ad:78:f4:8c:40:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5577b4b87ab86aca577e56e38d5b8a5813cccc3d
Validity
Not Before: Jan 1 04:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2d0286d602d22c27d7a831ec6d404535ce8c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:09:c2:b9:50:7f:df:56:bf:25:ad:50:71:
2f:67:a2:d4:31:46:d2:d2:da:6d:db:58:2d:dc:c4:
75:13:37:a5:55:74:a7:38:40:85:c9:db:ff:ba:1d:
eb:70:a1:68:29:df:72:cf:1b:03:f2:62:c4:d1:c9:
f3:84:da:23:74:be:28:67:7f:d5:4a:3c:98:19:8c:
59:22:a6:92:93:6a:4e:b3:14:d6:e2:02:d5:16:37:
ec:39:db:a2:b2:ae:63:a6:ab:01:1a:84:78:fd:a6:
2d:ae:cf:11:8a:f7:19:aa:31:69:f6:6c:29:a2:ac:
1b:5c:38:30:e4:f9:5c:86:01:8d:e5:15:7e:83:df:
1a:f4:48:c6:ab:d5:96:6b:59:0d:ed:64:1a:36:1f:
8a:2a:19:85:ec:a0:31:27:46:1f:b9:9c:b9:04:b8:
2d:7a:39:24:df:4a:4a:0c:89:98:45:b7:86:b0:7e:
2e:5c:11:d8:63:e7:0c:a7:a8:70:f7:5c:3a:ea:42:
8a:0e:ce:72:7f:11:b7:da:99:19:0b:1a:52:d7:5b:
37:bf:54:7c:4f:f7:83:9a:ad:8b:f8:19:47:cd:fb:
b4:85:ed:c6:25:41:87:3a:1d:c1:fd:3c:f2:d8:80:
85:c6:25:6e:3f:d1:15:9b:bd:0d:46:86:eb:04:b7:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:28:6D:60:2D:22:C2:7D:7A:83:1E:C6:D4:04:53:5C:E8:C8:6A
X509v3 Authority Key Identifier:
keyid:55:77:B4:B8:7A:B8:6A:CA:57:7E:56:E3:8D:5B:8A:58:13:CC:CC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXe0uHq4aspXflbjjVuKWBPMzD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/wtAobWAtIsJ9eoMextQEU1zoyGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d158e1-512b-4486-af87-b490a6d6be25/1/VXe0uHq4aspXflbjjVuKWBPMzD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.110.0/24
IPv6:
2a10:df40::/29
Signature Algorithm: sha256WithRSAEncryption
96:e6:12:83:8c:51:6b:fa:f9:1d:07:5a:4c:cd:56:33:d3:e9:
6b:c6:56:ea:f4:ff:4e:f1:cd:46:10:f9:a1:ee:16:93:2f:f0:
ea:9f:90:62:f4:a0:39:22:6e:cc:bb:de:02:70:04:9f:a3:78:
06:07:2d:c3:c0:47:09:41:8c:0e:71:7f:36:e8:60:82:27:e5:
57:f8:4d:20:46:4c:90:55:74:95:2a:c7:25:3a:f4:1f:7d:9e:
c7:21:3f:c5:f9:bc:a5:bc:0c:ae:a1:2f:bd:e0:5a:64:81:8c:
64:71:eb:61:5c:b8:b9:aa:1d:d4:a4:42:74:bc:58:fe:d8:24:
aa:55:7c:0b:73:26:ec:31:25:1b:c8:86:89:f0:2e:67:bb:c1:
db:12:c6:46:71:ca:a8:4b:de:46:bd:76:ad:5a:47:f9:75:fd:
0c:07:33:3b:d9:dc:9f:0e:e3:70:01:54:9a:69:52:5f:aa:fd:
4d:4d:0a:1f:c3:8f:22:96:0b:ff:51:bc:37:bf:24:08:1c:1c:
53:b0:d7:c7:77:d1:57:15:74:b5:c2:22:84:8e:9f:ab:31:72:
5d:79:8c:3d:4c:11:81:42:bd:ba:db:5f:3d:42:75:d6:0f:ec:
7f:2f:a5:1a:55:ae:00:76:83:c9:4b:31:bf:65:fc:61:5c:0d:
0a:9e:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:56 2026 by rpki-client