Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/1WFjwMGMePlEAC8bm7XUOdRFj34.roa
File: 1WFjwMGMePlEAC8bm7XUOdRFj34.roa (raw, json)
Hash identifier: fW2dzpRcyQ80IgEJ6uR/Uw++9kayO/2mr9G7qpsC/1w=
Subject key identifier: D5:61:63:C0:C1:8C:78:F9:44:00:2F:1B:9B:B5:D4:39:D4:45:8F:7E
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 019B797F0DAB66006CB1ED2A51C88A4D7F4B
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/1WFjwMGMePlEAC8bm7XUOdRFj34.roa
Signing time: Thu 01 Jan 2026 12:18:48 +0000
ROA not before: Thu 01 Jan 2026 12:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205431
IP address blocks: 176.12.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:0d:ab:66:00:6c:b1:ed:2a:51:c8:8a:4d:7f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Jan 1 12:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d56163c0c18c78f944002f1b9bb5d439d4458f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:b4:7d:a6:2b:14:47:d0:d2:e6:fb:75:7a:
2f:10:b7:43:2b:5b:b0:ea:41:d8:63:be:0f:4e:73:
a1:15:1c:35:fd:0d:9f:3c:86:75:58:f3:a7:20:58:
46:43:f4:97:03:11:4d:f8:5b:cc:db:ad:95:c0:a4:
5d:7e:ed:fb:a8:71:ca:8b:bf:2c:7d:1c:cb:0e:25:
46:85:8b:13:1a:f8:b1:64:fd:93:ce:f2:ff:f8:4a:
46:54:a8:0d:3a:44:c8:75:0d:a5:73:ba:87:a6:c4:
20:ee:e7:61:fd:92:49:02:37:66:d7:e8:f8:1e:13:
6c:cb:4f:f0:88:d5:a3:d4:b0:a0:1a:3e:38:6a:0e:
37:2a:df:bc:9d:03:2a:d4:c3:56:fe:3d:a4:a2:d0:
79:d6:db:46:ee:f2:e9:69:3b:98:ad:ba:18:c5:62:
b7:b6:f6:65:0c:ef:29:58:37:c5:4e:e0:77:1d:37:
76:eb:c4:56:2e:62:13:10:49:7b:6b:55:37:96:13:
d8:df:79:7f:2c:85:73:2b:38:c6:21:05:b8:27:ec:
a7:b7:44:dc:84:4f:bd:9c:ce:b7:90:c1:2d:b0:46:
71:46:d0:86:f2:4c:7b:82:4b:62:fc:a0:99:62:79:
36:9b:f4:01:23:e2:f7:cc:bd:dc:e9:52:79:80:8c:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:63:C0:C1:8C:78:F9:44:00:2F:1B:9B:B5:D4:39:D4:45:8F:7E
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/1WFjwMGMePlEAC8bm7XUOdRFj34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.12.72.0/21
Signature Algorithm: sha256WithRSAEncryption
39:b7:68:4a:6e:9c:92:c7:9e:33:e4:0f:58:81:57:50:df:c3:
e0:f2:21:93:37:f2:31:4c:cb:b4:69:8c:55:98:13:31:f7:45:
b4:26:a2:4c:30:94:37:d1:4b:88:9b:c9:18:27:1a:a5:2d:0b:
e0:33:0c:dd:be:7f:24:1b:6d:ea:27:8c:b5:58:92:bf:ba:c7:
9c:bf:ea:12:5a:7a:74:b5:24:ed:3f:43:53:f9:6f:c5:e1:af:
b9:37:0b:02:6d:ba:ce:05:2a:31:f8:26:ef:7f:f0:14:d8:b4:
f3:bd:96:e6:0c:2c:68:c5:9f:81:80:d9:c4:1e:73:46:11:9e:
39:1d:b6:67:48:be:64:07:87:53:d4:bd:2b:be:75:4b:a2:21:
bb:aa:a3:4d:52:a7:07:bb:42:5f:64:9b:80:dc:33:4e:33:b9:
27:70:3e:5c:06:b8:8f:1e:f0:c0:ce:59:3b:f5:26:e8:03:df:
80:b9:47:58:75:bb:84:21:e6:e1:c3:66:a7:6b:53:36:5c:a3:
f1:83:2b:ad:b0:9b:2d:15:4a:a3:af:9a:9c:20:e0:4b:eb:bd:
65:1c:56:fe:4f:b4:01:c0:c6:9c:e5:7c:1e:c2:ed:55:b2:7a:
1a:3b:7f:a9:b1:88:19:e3:7a:21:51:79:e8:f6:ef:09:58:72:
7d:0b:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:05:36 2026 by rpki-client