Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Wi7IqvDgVK392tuCNUoibcF9Xwc.roa
File: Wi7IqvDgVK392tuCNUoibcF9Xwc.roa (raw, json)
Hash identifier: 8UDRh/dVbBhU/0zaDX6N0W8S2rKIEZNL8f2ZIttBB5A=
Subject key identifier: 5A:2E:C8:AA:F0:E0:54:AD:FD:DA:DB:82:35:4A:22:6D:C1:7D:5F:07
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019C767AEBFB889114847B43E35F63B805E5
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Wi7IqvDgVK392tuCNUoibcF9Xwc.roa
Signing time: Thu 19 Feb 2026 15:18:13 +0000
ROA not before: Thu 19 Feb 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 800
IP address blocks: 95.210.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:7a:eb:fb:88:91:14:84:7b:43:e3:5f:63:b8:05:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Feb 19 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a2ec8aaf0e054adfddadb82354a226dc17d5f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:ae:d4:6b:78:55:9c:dc:9b:b1:f3:97:19:
de:92:58:1f:e7:64:45:2c:e1:62:4a:47:15:30:33:
88:c1:c1:fb:8c:fd:3c:ea:9c:87:36:c5:0e:56:c4:
02:30:b4:d7:d7:07:2d:df:8b:cb:ce:e1:87:81:b5:
1b:6f:80:da:a9:c7:d4:a5:d2:fa:4a:a4:11:1c:41:
76:f5:d2:86:24:c6:79:ff:3b:cb:69:d8:b4:45:16:
1a:9b:e5:7b:3c:44:23:c3:0b:54:55:d6:fa:1e:a7:
53:74:01:9c:ad:33:86:3d:70:c3:40:c5:a6:da:11:
ba:eb:00:1a:54:b9:af:9e:77:28:6b:99:40:a1:66:
e5:78:ac:5a:b8:39:2d:4b:48:e6:ee:a6:5e:cf:c6:
38:3d:6f:9d:6a:40:6b:67:15:4c:48:f1:cc:28:b3:
1f:19:1d:01:65:fb:b9:04:d5:3f:0a:b9:be:4c:48:
79:12:30:c5:4a:03:eb:95:5b:1d:86:e9:c2:5f:d3:
7a:ca:0d:8c:cb:02:29:03:e5:f1:f1:41:5d:84:59:
79:c7:6f:b9:d6:44:5d:17:93:1d:2c:e9:fa:c6:87:
43:4f:73:5a:5b:bb:cc:b5:04:c8:b5:df:c2:24:5c:
c9:e4:33:f6:d3:8c:a2:34:a6:76:60:72:6a:02:33:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:C8:AA:F0:E0:54:AD:FD:DA:DB:82:35:4A:22:6D:C1:7D:5F:07
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/Wi7IqvDgVK392tuCNUoibcF9Xwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.210.94.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6f:8e:4f:1f:40:24:14:fe:76:25:37:5a:a6:0b:33:ea:bc:
ad:24:62:aa:72:11:3c:2c:1d:18:24:bb:54:ed:5f:b8:09:1a:
e1:b3:a9:60:c4:e5:f7:b8:a3:27:33:a4:0b:f1:af:07:bc:2c:
6f:1a:f2:d0:e9:f3:46:5b:b2:86:2c:b0:1f:49:dd:5e:eb:7e:
ba:ad:6d:ad:60:a2:8e:d0:5c:26:4e:cc:ac:8c:bf:30:77:f3:
ea:59:1c:07:55:88:fe:ee:27:02:25:22:cd:1f:ea:e0:bf:11:
ce:01:9d:61:cf:47:54:0b:a4:da:d3:40:b1:02:06:6b:79:f4:
a7:7b:28:95:18:bf:76:ad:e4:0a:67:de:7a:0b:d6:9a:6f:de:
0a:b6:83:03:78:98:4a:7c:61:7e:85:d3:02:f3:f5:ae:30:9d:
55:37:c6:07:7c:6a:77:41:ef:fc:31:80:c2:ea:74:e0:e2:32:
14:97:6d:e3:02:f6:b6:ce:1f:a1:66:ee:ec:8c:24:58:6d:88:
5b:97:8c:6c:9f:bd:00:f2:a5:fb:15:9c:4c:a9:b3:12:43:2e:
e4:8c:fc:88:c0:89:52:67:c8:83:16:a4:5b:cd:4e:25:71:11:
75:9d:60:1c:24:57:39:8b:10:87:de:ae:d4:f1:13:d0:a4:01:
d6:e8:08:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZx2euv7iJEUhHtD419juAXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjYwMjE5MTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTJlYzhhYWYwZTA1NGFkZmRkYWRiODIzNTRhMjI2ZGMxN2Q1ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wOu1Gt4VZzcm7Hzlxneklgf52RF
LOFiSkcVMDOIwcH7jP086pyHNsUOVsQCMLTX1wct34vLzuGHgbUbb4DaqcfUpdL6
SqQRHEF29dKGJMZ5/zvLadi0RRYam+V7PEQjwwtUVdb6HqdTdAGcrTOGPXDDQMWm
2hG66wAaVLmvnncoa5lAoWbleKxauDktS0jm7qZez8Y4PW+dakBrZxVMSPHMKLMf
GR0BZfu5BNU/Crm+TEh5EjDFSgPrlVsdhunCX9N6yg2MywIpA+Xx8UFdhFl5x2+5
1kRdF5MdLOn6xodDT3NaW7vMtQTItd/CJFzJ5DP204yiNKZ2YHJqAjN0WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFouyKrw4FSt/drbgjVKIm3BfV8HMB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEvV2k3SXF2RGdWSzM5MnR1Q05Vb2liY0Y5WHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9JeMA0G
CSqGSIb3DQEBCwUAA4IBAQADb45PH0AkFP52JTdapgsz6rytJGKqchE8LB0YJLtU
7V+4CRrhs6lgxOX3uKMnM6QL8a8HvCxvGvLQ6fNGW7KGLLAfSd1e6366rW2tYKKO
0FwmTsysjL8wd/PqWRwHVYj+7icCJSLNH+rgvxHOAZ1hz0dUC6Ta00CxAgZrefSn
eyiVGL92reQKZ956C9aab94KtoMDeJhKfGF+hdMC8/WuMJ1VN8YHfGp3Qe/8MYDC
6nTg4jIUl23jAva2zh+hZu7sjCRYbYhbl4xsn70A8qX7FZxMqbMSQy7kjPyIwIlS
Z8iDFqRbzU4lcRF1nWAcJFc5ixCH3q7U8RPQpAHW6Ain
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:55:14 2026 by rpki-client