Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wt4arE8aq0j9QUnZdYjCgQA4KE8.roa
File: wt4arE8aq0j9QUnZdYjCgQA4KE8.roa (raw, json)
Hash identifier: Wf+8drhwEyYnWOvWQqOC+IPf2/ohM2ew9EmbUhWiq90=
Subject key identifier: C2:DE:1A:AC:4F:1A:AB:48:FD:41:49:D9:75:88:C2:81:00:38:28:4F
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019B77C7555686EAFC3A5B09758DF74F24FD
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wt4arE8aq0j9QUnZdYjCgQA4KE8.roa
Signing time: Thu 01 Jan 2026 04:18:30 +0000
ROA not before: Thu 01 Jan 2026 04:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49423
IP address blocks: 176.118.185.0/24 maxlen: 24
2a0d:ca47:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:55:56:86:ea:fc:3a:5b:09:75:8d:f7:4f:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 1 04:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2de1aac4f1aab48fd4149d97588c2810038284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:b2:2c:18:21:76:d3:e4:dd:ad:3e:6d:ce:
65:30:04:0b:54:b7:39:f8:e0:84:ea:22:1e:7f:b6:
b2:70:ea:69:b4:f7:b3:ab:5f:de:bc:6d:ba:3a:0a:
7b:a2:87:4b:3c:f2:51:be:ef:e2:3d:b2:fe:c3:95:
a4:a1:c4:a7:90:b7:a0:94:71:02:eb:3a:2f:fc:73:
7b:0a:29:a3:d9:48:79:59:55:3a:35:2f:c3:85:b6:
c6:09:0e:f8:b6:ac:e5:aa:aa:b7:11:36:0d:2b:2f:
e4:86:8c:e3:d4:53:21:d1:4f:09:bc:e6:b1:0b:ec:
64:1f:93:fb:cb:6b:2a:b6:c3:4d:9f:0b:a8:5d:41:
2f:f2:55:a6:4d:88:84:b4:40:01:af:ac:16:e7:30:
2a:0c:ad:56:c9:90:3d:7b:f6:40:20:bb:97:ec:b4:
28:8e:a6:d3:45:84:bb:c6:f1:7d:24:39:31:9c:33:
8d:d7:c5:2a:50:cb:c6:23:90:a8:7e:2a:84:aa:b4:
09:64:cd:99:53:f0:fa:01:36:82:0c:10:55:b3:df:
0b:a8:58:ab:66:e4:49:cb:0a:54:f0:80:a0:b3:45:
47:45:c9:f2:aa:a3:18:59:6d:ec:22:ee:8c:93:77:
98:4a:03:69:19:de:10:07:a5:79:5c:4a:bc:88:64:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:1A:AC:4F:1A:AB:48:FD:41:49:D9:75:88:C2:81:00:38:28:4F
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/wt4arE8aq0j9QUnZdYjCgQA4KE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.185.0/24
IPv6:
2a0d:ca47:2::/48
Signature Algorithm: sha256WithRSAEncryption
a0:b7:d8:23:63:a3:f3:65:f2:30:1d:e1:9b:90:f7:7d:37:1c:
ca:59:c0:bd:aa:fd:65:61:7b:e5:51:73:dc:da:5c:0b:16:13:
15:22:c1:b2:54:6e:4c:ba:4f:c0:2c:70:9b:91:dd:d0:5e:0c:
ee:b3:fa:94:46:68:1f:2c:0d:aa:b3:c2:24:33:5f:91:6e:3e:
1a:8d:b5:28:32:45:da:e4:48:94:e6:b6:43:35:5b:1b:56:db:
dc:85:44:60:ef:c0:98:86:7b:75:f1:31:be:07:84:d5:17:fb:
e4:c3:fe:fe:af:36:aa:99:02:45:fc:34:21:ec:8b:25:98:28:
40:0b:dc:77:4a:20:62:25:d1:ff:f6:32:e0:e7:40:e2:7e:ed:
88:13:a5:f1:8d:b2:b6:00:78:90:72:ee:f4:2b:e2:8e:09:ef:
30:3a:43:8f:23:f1:40:e4:b2:3b:0e:ac:d6:89:15:fd:0d:0f:
94:4b:83:a6:18:07:57:b8:1a:40:07:40:22:86:3b:55:56:0c:
d4:ca:4e:f5:33:c3:fa:8a:71:01:0a:fc:17:af:86:bd:ac:38:
d7:a9:f3:b1:08:c2:ab:c4:74:a0:bf:c0:a3:b5:78:25:64:ac:
7a:9a:bb:98:1e:2b:9d:7f:41:f8:8c:03:b6:68:d3:35:59:e8:
bc:a6:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:40 2026 by rpki-client