Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/w-nnLB0gJHLqHYNGFppYN7WkZFM.roa
File: w-nnLB0gJHLqHYNGFppYN7WkZFM.roa (raw, json)
Hash identifier: QK4oKJXySakBc6G1Ar7UfRyPt44Ci6G96TsVap7g1D0=
Subject key identifier: C3:E9:E7:2C:1D:20:24:72:EA:1D:83:46:16:9A:58:37:B5:A4:64:53
Certificate issuer: /CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Certificate serial: 019C99464C2CEDFE2BA0F7F5FA679E051669
Authority key identifier: 26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/w-nnLB0gJHLqHYNGFppYN7WkZFM.roa
Signing time: Thu 26 Feb 2026 09:27:26 +0000
ROA not before: Thu 26 Feb 2026 09:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 194.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:46:4c:2c:ed:fe:2b:a0:f7:f5:fa:67:9e:05:16:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f45580a636103cc95abe810a0d06928b9a0ddf
Validity
Not Before: Feb 26 09:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3e9e72c1d202472ea1d8346169a5837b5a46453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:d9:41:e9:8f:b2:2a:6b:56:46:b4:b0:e3:
ba:c1:25:94:cf:78:b0:47:a8:6b:a3:05:30:ff:0a:
02:45:cb:a4:63:51:d7:2d:79:11:68:8f:42:10:e0:
4d:32:a9:82:74:86:51:68:40:1b:e9:5a:bd:85:ba:
9f:0e:21:00:03:2e:de:55:61:bd:4e:dc:b9:c5:a0:
68:9b:d7:fd:23:8e:6d:74:21:5d:4e:69:ef:a5:4f:
99:e1:49:d1:71:57:da:52:50:9a:1a:cc:e4:cd:14:
9d:ee:6e:cd:ce:4b:b5:09:de:c8:7a:7a:0a:a9:b1:
e9:16:b4:07:55:53:f7:8c:a9:b2:0b:1e:42:ea:55:
50:1d:2f:67:ed:4c:8b:53:a6:b4:27:2b:c0:1d:6a:
25:d1:6c:34:ef:0c:5a:9e:19:d6:17:a8:e2:a7:aa:
b6:a6:84:4e:46:96:26:b4:02:cb:6b:f7:4c:ea:90:
36:a5:6d:18:01:16:03:6f:2b:2a:c4:0a:31:24:96:
ee:4e:0d:a2:67:fa:85:ee:b0:27:2a:f2:66:1f:46:
ab:24:5d:55:21:43:9e:72:53:4e:fc:0b:ac:60:b4:
50:1f:d9:16:60:c2:2c:09:0f:c4:b6:86:00:7b:44:
8e:ca:61:7d:a6:d1:c7:5c:22:a6:d6:18:04:dc:84:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E9:E7:2C:1D:20:24:72:EA:1D:83:46:16:9A:58:37:B5:A4:64:53
X509v3 Authority Key Identifier:
keyid:26:F4:55:80:A6:36:10:3C:C9:5A:BE:81:0A:0D:06:92:8B:9A:0D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvRVgKY2EDzJWr6BCg0GkouaDd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/w-nnLB0gJHLqHYNGFppYN7WkZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/edc6d7-f7e8-4d92-9292-76419ca6732e/1/JvRVgKY2EDzJWr6BCg0GkouaDd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
89:42:68:cc:f8:eb:61:5b:12:c0:8b:e6:d2:0b:58:39:d2:12:
d0:97:a6:6e:e9:91:ef:de:d9:c2:c9:4e:73:8e:8c:b1:8b:a7:
a3:11:ee:46:1d:27:1f:e4:ce:e6:97:42:e3:ce:04:b5:d5:b1:
ad:88:86:03:9b:d8:59:a0:e2:f9:f4:ff:8a:c2:d7:3d:78:d9:
78:dc:e6:75:4c:88:21:f3:73:78:aa:22:cd:60:93:91:31:90:
03:f3:a7:b9:59:01:d9:69:54:d1:5f:ef:ca:d4:3b:2a:64:8d:
ec:25:8a:23:c3:3d:6e:2d:2f:7b:c4:a7:b2:ed:9b:25:dd:18:
1e:47:ca:1a:73:26:eb:9f:50:0f:45:f4:30:ee:1e:d3:7d:54:
20:d8:8f:d0:6f:cb:25:fa:8c:a5:60:33:96:86:1d:6d:a3:cb:
e9:8e:8c:51:c8:97:e8:b0:3c:06:e2:99:87:c4:1f:b3:a4:48:
89:53:93:c7:9f:21:c9:c3:90:fb:09:8b:b5:0e:41:fc:a4:07:
19:3f:39:6e:f9:f5:9e:de:70:38:1a:b0:96:a5:5a:02:68:5a:
48:9a:12:44:c7:b6:f1:1d:43:13:3a:98:86:ec:2d:c6:79:5e:
f3:30:70:75:ac:ab:ed:f9:a9:b9:84:aa:a3:47:f4:1f:dc:8a:
51:f7:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:10 2026 by rpki-client