Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/weNO45GUCwTuBMl02Hs7MGyLIDA.roa
File: weNO45GUCwTuBMl02Hs7MGyLIDA.roa (raw, json)
Hash identifier: UHoWgJ77ysJuzj53yeCGNQqXD5+nHW0LaScWNZEdWvc=
Subject key identifier: C1:E3:4E:E3:91:94:0B:04:EE:04:C9:74:D8:7B:3B:30:6C:8B:20:30
Certificate issuer: /CN=cf86c5f55de8b06263c73159734a90f409dafea3
Certificate serial: 01A08AEB3C7CE3851F77977AA40F2D19DB69
Authority key identifier: CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/weNO45GUCwTuBMl02Hs7MGyLIDA.roa
Signing time: Thu 10 Sep 2026 10:44:27 +0000
ROA not before: Thu 10 Sep 2026 10:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213161
IP address blocks: 37.72.103.0/24 maxlen: 24
91.193.112.0/24 maxlen: 24
212.11.94.0/24 maxlen: 24
2a06:d780::/32 maxlen: 32
2a06:d781::/32 maxlen: 32
2a06:d782::/32 maxlen: 32
2a06:d783::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:eb:3c:7c:e3:85:1f:77:97:7a:a4:0f:2d:19:db:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf86c5f55de8b06263c73159734a90f409dafea3
Validity
Not Before: Sep 10 10:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1e34ee391940b04ee04c974d87b3b306c8b2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:8f:94:47:21:bc:7c:2e:a0:24:3f:fd:68:
17:93:f4:b8:e6:d1:ed:4b:88:1b:93:6a:50:4f:45:
33:cd:77:0a:5e:fc:06:2e:a8:07:17:07:fc:e0:51:
1c:6b:a7:3c:93:b4:15:a3:ab:54:19:f1:ce:f8:b7:
58:27:b2:e8:b0:96:b1:bc:db:26:7c:02:ff:1e:89:
72:b2:4a:fe:db:dc:f2:33:e2:f3:c8:c9:e4:f8:5c:
ae:58:ab:9e:85:61:d6:84:22:61:12:b4:87:67:cb:
7f:f4:25:c6:10:54:45:54:0f:10:db:93:b0:4a:92:
92:96:75:18:7e:e9:13:b3:12:2c:ee:e9:da:7a:c9:
12:2b:fc:b2:97:a1:4c:68:50:1b:bd:27:9c:41:e4:
03:3e:cf:13:2f:b8:60:50:dd:e5:da:32:ec:6b:89:
a8:44:90:90:a5:eb:5e:06:56:81:0b:ec:8b:16:b5:
0a:6b:f2:89:40:b7:43:10:8c:56:76:35:22:b6:4f:
8a:11:d8:3d:87:77:fc:5f:80:2f:f2:ab:60:0c:31:
53:de:d0:43:ba:b9:c1:61:fa:46:e1:4a:d9:02:79:
40:dd:7d:84:00:80:2b:4c:1b:d0:65:aa:ca:93:e4:
49:df:a7:fb:d2:13:a0:65:fb:bd:ec:43:09:0c:c5:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:4E:E3:91:94:0B:04:EE:04:C9:74:D8:7B:3B:30:6C:8B:20:30
X509v3 Authority Key Identifier:
keyid:CF:86:C5:F5:5D:E8:B0:62:63:C7:31:59:73:4A:90:F4:09:DA:FE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4bF9V3osGJjxzFZc0qQ9Ana_qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/weNO45GUCwTuBMl02Hs7MGyLIDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d2038a-643b-4aa0-8ece-f12b04e2a85b/1/z4bF9V3osGJjxzFZc0qQ9Ana_qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.103.0/24
91.193.112.0/24
212.11.94.0/24
IPv6:
2a06:d780::/30
Signature Algorithm: sha256WithRSAEncryption
51:b7:e1:48:e5:9d:42:d1:14:2c:ea:bc:c6:91:b5:e1:33:05:
9c:01:3f:d3:30:e0:7f:88:83:5c:f9:f0:d6:5d:0c:b8:fd:98:
0f:e2:65:ea:90:2f:7d:13:53:dd:45:35:11:91:f6:8a:9d:2b:
55:99:3f:b1:73:3a:f3:5b:26:55:ec:cb:70:74:7b:b7:4a:80:
6d:9c:79:9b:87:a9:b8:a9:86:82:a9:5f:80:b2:c5:1f:70:c5:
15:33:c8:cf:46:9d:88:f4:1a:c5:e7:76:e6:1c:c4:e7:89:0b:
5c:c2:ef:64:8d:b7:69:0e:40:b1:cc:40:dd:fa:ae:26:a1:9c:
a1:7f:19:17:94:bc:bd:a9:1a:19:de:31:54:35:27:e8:a2:7d:
c0:f6:46:9c:12:54:f8:da:e3:f4:23:ad:d7:93:b6:97:40:fe:
0c:e4:82:1f:79:ce:80:cc:18:af:cc:2f:47:92:09:12:0b:b6:
a8:d4:82:26:10:53:b8:88:fd:33:6d:87:a5:35:22:98:a9:47:
5b:1a:40:c6:f1:75:b7:45:ae:5d:66:8b:14:3d:ef:43:a2:2a:
37:88:df:d1:cd:e1:1f:ee:a0:7c:af:ac:6c:ec:9a:4c:d5:1c:
8e:be:9f:42:44:0e:69:71:c2:de:de:a8:c7:a6:b2:41:72:be:
37:cb:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:28 2026 by rpki-client