Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/c-WMvw8Hz1uOUsuliQon0TlsTqo.roa
File: c-WMvw8Hz1uOUsuliQon0TlsTqo.roa (raw, json)
Hash identifier: VW+Dwh3fsEdxsXfuUs2W4EklP+G82KCr77puJxgKF3Q=
Subject key identifier: 73:E5:8C:BF:0F:07:CF:5B:8E:52:CB:A5:89:0A:27:D1:39:6C:4E:AA
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 01A1151341BE398C45E9C576574951301E01
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/c-WMvw8Hz1uOUsuliQon0TlsTqo.roa
Signing time: Wed 07 Oct 2026 06:35:45 +0000
ROA not before: Wed 07 Oct 2026 06:35:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202499
IP address blocks: 109.205.194.0/24 maxlen: 24
176.106.184.0/22 maxlen: 23
176.106.184.0/23 maxlen: 23
176.106.186.0/23 maxlen: 23
176.106.188.0/23 maxlen: 23
193.142.188.0/22 maxlen: 24
195.216.208.0/23 maxlen: 24
2a0c:9b40::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:13:41:be:39:8c:45:e9:c5:76:57:49:51:30:1e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Oct 7 06:35:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73e58cbf0f07cf5b8e52cba5890a27d1396c4eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:f9:69:be:74:b4:b3:e6:29:87:2e:2d:65:
2d:bb:22:df:62:ee:78:d8:f1:c2:a4:16:e6:14:b2:
83:eb:c5:4a:85:f2:93:5c:58:99:f2:ae:36:98:12:
fb:32:2e:cc:39:c7:1c:8c:1e:ba:d1:90:8a:7b:46:
ae:b4:1d:7c:5b:65:54:56:39:83:27:aa:02:c1:05:
51:47:fd:e4:fc:e6:00:a0:45:02:35:78:70:d6:db:
3b:24:93:b5:f4:59:89:ce:5e:ea:33:62:65:b2:39:
f2:99:22:fb:5e:ed:32:8f:cd:c5:47:ce:24:76:7e:
68:01:9c:98:5c:27:eb:b4:fa:09:92:e7:f1:5d:18:
71:e2:14:b2:92:2b:a9:cb:67:d2:28:cf:da:73:e7:
c8:47:9a:fe:34:14:79:b1:b6:0f:66:90:93:8b:5b:
9f:90:82:f1:e6:f9:d2:ff:55:b4:f8:96:69:62:85:
66:8f:37:34:94:a6:f0:33:0b:7f:cf:15:86:cc:fa:
df:72:04:df:37:33:b2:d2:03:be:67:a9:52:d1:e0:
1b:ea:8a:c7:5c:2d:b1:0f:26:d9:26:74:6a:ba:38:
08:c2:4d:fb:7a:4d:14:b3:29:7a:81:ac:24:9a:a4:
50:67:70:74:11:eb:92:76:af:d9:52:54:b2:0a:a5:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:8C:BF:0F:07:CF:5B:8E:52:CB:A5:89:0A:27:D1:39:6C:4E:AA
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/c-WMvw8Hz1uOUsuliQon0TlsTqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.194.0/24
176.106.184.0-176.106.189.255
193.142.188.0/22
195.216.208.0/23
IPv6:
2a0c:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
95:5b:eb:fd:eb:7d:df:35:fc:70:6b:38:93:dd:0e:df:0c:ca:
8c:e2:e2:50:48:2d:31:b2:53:82:55:ef:02:2c:87:6f:a3:0b:
c2:cb:ff:7b:2d:b2:ba:1a:34:dc:ad:a0:da:61:45:a3:bf:3f:
15:3b:76:13:c1:41:78:b1:80:27:15:b5:32:73:27:20:bf:bb:
73:6f:9b:ce:1c:31:41:b1:45:3e:ff:e1:bd:b9:03:80:95:35:
e9:7a:4e:11:38:11:3e:1e:c9:52:5f:76:82:c2:84:45:ab:45:
fc:3d:2e:f1:f4:a5:a1:c7:ad:3e:f2:c9:33:f8:ee:7c:63:9a:
21:4d:f9:b1:17:2f:ca:35:e6:29:55:31:ed:c1:8b:48:ba:59:
cc:29:11:89:8a:31:83:d8:a6:38:c3:2d:b4:a8:93:ca:b9:94:
7c:46:23:26:7b:68:ea:1e:b3:f3:74:1f:ff:27:09:dd:a0:43:
71:e4:34:15:c8:ec:20:5c:c8:b3:d0:19:89:b8:0b:4e:79:67:
6d:e5:8e:62:28:03:5a:fd:0a:54:c7:64:f8:dc:f5:5f:e8:4f:
21:9a:ad:15:cb:5c:b3:97:35:98:06:92:dc:9e:cb:0f:0a:d8:
3d:d5:1e:68:eb:88:b9:24:e0:cd:23:51:3c:58:f2:bb:bc:16:
c2:09:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:02 2026 by rpki-client