Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa
File: wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa (raw, json)
Hash identifier: nD3Q9hGrHrUTsDLGxXCpl182FjBypKufxutT4cbNcEU=
Subject key identifier: C1:34:7D:5B:FD:5F:79:48:AD:0F:D5:B1:76:4D:C5:21:EF:4C:8E:AB
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019C8BBC1C950BE459C70FB37D2D84E91227
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa
Signing time: Mon 23 Feb 2026 18:21:26 +0000
ROA not before: Mon 23 Feb 2026 18:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7922
IP address blocks: 78.31.207.0/24 maxlen: 24
103.130.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:bc:1c:95:0b:e4:59:c7:0f:b3:7d:2d:84:e9:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 23 18:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1347d5bfd5f7948ad0fd5b1764dc521ef4c8eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:1e:ff:f6:d2:96:f1:2f:53:18:8e:0c:35:
dd:4f:71:9e:47:eb:ee:44:c6:e5:34:bb:4b:ea:5c:
15:8f:ec:8d:a2:3d:c2:d2:7b:eb:16:cb:be:01:61:
1a:71:78:8d:b9:99:89:6c:c7:7f:a9:fb:01:d3:4a:
f2:da:30:f2:d4:d9:00:9e:c3:97:0c:04:35:58:26:
b5:77:6b:77:04:a7:2b:ad:ee:74:52:6d:4e:02:b9:
f2:1f:3d:52:70:48:68:1c:a7:ef:47:17:cf:27:0a:
a8:3b:78:be:a4:6c:a9:74:24:8d:19:02:da:23:54:
f3:21:84:02:d2:0f:5e:c2:d2:10:76:d2:cc:c9:1d:
75:34:d6:3b:79:2c:7a:a2:5d:c9:af:0a:a8:6b:9e:
68:90:bd:b5:7f:85:d0:2c:cf:70:d1:df:a8:ce:a8:
33:c0:05:53:4c:94:2e:b4:ad:e8:71:f4:9c:26:ad:
7e:0b:82:c3:90:30:b2:04:04:be:ba:dd:10:aa:d7:
39:80:d1:a9:c3:ec:03:dc:9e:97:ac:92:27:33:10:
94:04:d6:cf:71:77:ec:0d:72:b0:3d:a7:b8:0c:41:
25:3d:be:6f:fa:22:cf:3e:6a:26:f2:f4:25:4f:cc:
19:28:4c:f6:39:d6:98:1f:04:52:32:a4:08:6e:b7:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:7D:5B:FD:5F:79:48:AD:0F:D5:B1:76:4D:C5:21:EF:4C:8E:AB
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/wTR9W_1feUitD9Wxdk3FIe9Mjqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.207.0/24
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bc:3e:56:35:24:a1:2d:1f:03:ea:08:f1:d5:a6:13:40:96:
0d:f1:32:61:4a:3b:d3:b7:b0:98:0b:43:7d:60:39:55:3b:c7:
c2:aa:56:23:f6:42:29:1c:5b:0f:b1:68:90:17:8e:5b:a9:68:
d1:fe:e9:98:61:bd:f8:ad:7c:85:62:8e:48:9a:33:75:47:65:
75:e1:d6:8d:2e:ac:df:ee:a0:73:7e:46:6e:fb:d0:a2:97:bd:
56:48:87:ae:e3:3b:78:a5:ad:fc:37:74:bf:0b:bb:2d:ac:6b:
ce:e6:cd:17:02:13:88:48:a5:de:56:36:29:81:12:65:9c:2b:
03:71:e2:73:b6:3d:b2:c0:70:e5:6b:e1:34:42:fa:77:fc:5d:
d1:b0:82:5d:94:58:7d:d5:30:5d:43:a1:33:d6:3c:5f:55:72:
fc:8e:d3:87:61:55:20:dc:24:cd:39:e2:7a:4d:d8:5f:fe:48:
af:cd:ac:32:bc:4a:19:9d:a3:a4:8e:87:50:2a:08:a1:e9:1e:
19:f7:6e:4b:49:88:31:aa:4e:08:7d:86:aa:5c:fc:0e:cb:3a:
e7:ab:f3:42:69:5a:9c:94:d2:3d:7e:0a:d3:32:3c:c6:3e:ce:
08:a9:f8:46:c3:03:b7:dc:55:94:9c:1a:cc:99:bd:04:db:61:
71:92:07:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyLvByVC+RZxw+zfS2E6RInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwMjIzMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTM0N2Q1YmZkNWY3OTQ4YWQwZmQ1YjE3NjRkYzUyMWVmNGM4ZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkMe//bSlvEvUxiODDXdT3GeR+vu
RMblNLtL6lwVj+yNoj3C0nvrFsu+AWEacXiNuZmJbMd/qfsB00ry2jDy1NkAnsOX
DAQ1WCa1d2t3BKcrre50Um1OArnyHz1ScEhoHKfvRxfPJwqoO3i+pGypdCSNGQLa
I1TzIYQC0g9ewtIQdtLMyR11NNY7eSx6ol3Jrwqoa55okL21f4XQLM9w0d+ozqgz
wAVTTJQutK3ocfScJq1+C4LDkDCyBAS+ut0Qqtc5gNGpw+wD3J6XrJInMxCUBNbP
cXfsDXKwPae4DEElPb5v+iLPPmom8vQlT8wZKEz2OdaYHwRSMqQIbrds4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFME0fVv9X3lIrQ/VsXZNxSHvTI6rMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvd1RSOVdfMWZlVWl0RDlXeGRrM0ZJZTlNanFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATh/PAwQA
Z4KyMA0GCSqGSIb3DQEBCwUAA4IBAQArvD5WNSShLR8D6gjx1aYTQJYN8TJhSjvT
t7CYC0N9YDlVO8fCqlYj9kIpHFsPsWiQF45bqWjR/umYYb34rXyFYo5ImjN1R2V1
4daNLqzf7qBzfkZu+9Cil71WSIeu4zt4pa38N3S/C7strGvO5s0XAhOISKXeVjYp
gRJlnCsDceJztj2ywHDla+E0Qvp3/F3RsIJdlFh91TBdQ6Ez1jxfVXL8jtOHYVUg
3CTNOeJ6Tdhf/kivzawyvEoZnaOkjodQKgih6R4Z925LSYgxqk4IfYaqXPwOyzrn
q/NCaVqclNI9fgrTMjzGPs4IqfhGwwO33FWUnBrMmb0E22Fxkgez
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:58 2026 by rpki-client