Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wjAYrO6idvG1Eo4b2-8haZjHJeQ.roa
File: wjAYrO6idvG1Eo4b2-8haZjHJeQ.roa (raw, json)
Hash identifier: zZLqI094ELV9kNPyj5vwFS+LNe8tp02Z/PGlsgoN0D0=
Subject key identifier: C2:30:18:AC:EE:A2:76:F1:B5:12:8E:1B:DB:EF:21:69:98:C7:25:E4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019C94E78DC6C8363C741DBCBB8053C4B51E
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wjAYrO6idvG1Eo4b2-8haZjHJeQ.roa
Signing time: Wed 25 Feb 2026 13:05:29 +0000
ROA not before: Wed 25 Feb 2026 13:05:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 93.119.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:e7:8d:c6:c8:36:3c:74:1d:bc:bb:80:53:c4:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 25 13:05:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23018aceea276f1b5128e1bdbef216998c725e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:40:8f:e4:d7:c5:12:b9:20:45:2d:39:b1:
fb:6a:b1:d9:b5:20:fb:d6:62:b9:54:b0:e0:7d:01:
39:d9:6b:0d:27:55:ca:2e:42:04:60:31:a6:a9:98:
f9:97:ae:1c:d6:c5:89:8b:67:dc:18:9e:e1:0f:2b:
dd:62:15:43:72:42:e4:17:87:a6:13:69:8f:f0:7a:
82:b4:eb:6f:ee:52:3b:e2:fb:d4:b0:7e:51:80:de:
16:c0:b9:a4:97:62:58:66:12:a7:aa:5d:64:e7:37:
4a:95:a4:2b:69:50:b9:bf:7f:96:6f:73:79:60:f7:
5b:0e:4c:e9:7c:6e:e9:c7:b8:8a:23:e3:ae:97:0c:
3d:c3:8c:d8:0d:2c:00:15:49:da:de:c4:be:07:39:
bc:fb:1d:ba:b7:da:77:27:53:14:14:b5:47:47:2f:
69:79:3c:49:84:44:97:a5:19:a5:18:5b:e9:d7:ea:
29:dc:f7:6b:d2:7a:37:e7:a6:3e:74:0d:b4:b7:4c:
83:97:ba:38:18:a8:56:7d:6d:08:ff:d0:7e:cc:c1:
c3:45:ae:94:b3:c9:bd:6a:12:cc:7a:9d:a7:ae:d1:
85:4d:67:1e:62:63:d3:ca:dc:83:de:77:85:05:44:
04:87:8a:36:ad:f0:5a:71:8f:02:d9:2b:ca:dd:d6:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:30:18:AC:EE:A2:76:F1:B5:12:8E:1B:DB:EF:21:69:98:C7:25:E4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/wjAYrO6idvG1Eo4b2-8haZjHJeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:71:d4:2c:82:6f:22:32:5a:f5:d5:66:fc:e7:03:20:5e:20:
fe:09:bc:9b:d2:e6:46:39:c8:0d:ee:82:31:b2:d6:97:3d:e3:
60:34:f5:4c:57:0c:75:d6:e6:57:93:37:0a:11:48:f8:e9:1f:
09:35:90:11:ac:01:44:82:fd:e5:56:97:d8:1a:89:76:aa:f8:
e6:d8:ac:62:a5:e7:ca:76:6b:8c:17:1b:12:22:10:01:6f:49:
17:88:83:28:13:78:ed:57:7a:15:52:44:1b:50:f8:e3:40:b0:
8b:65:b8:c5:58:22:47:c7:3f:92:16:26:74:dd:7f:8e:65:c1:
c0:f1:1c:d1:e6:51:04:f1:15:6e:09:db:7b:c0:bb:41:82:22:
6f:3f:5d:be:85:2b:7b:0b:b9:a8:34:38:06:4a:d5:e1:f0:4a:
ce:66:11:8a:0b:f3:bb:79:37:cb:fe:25:c8:99:68:70:cb:85:
56:20:86:e1:b2:6d:76:07:2a:46:ef:99:41:3f:48:e2:a3:7e:
92:44:47:34:58:25:68:82:08:c6:95:01:ba:d0:f9:0a:d4:c9:
b0:b5:b3:1a:91:e3:4d:2f:17:65:9f:7d:a5:3f:8c:ff:41:22:
c1:ce:9d:da:f7:00:39:70:d3:34:98:4f:b4:eb:a0:c1:44:3e:
f2:ec:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:37 2026 by rpki-client