Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/WvwVjJHMOPWNlxS8HTbROtz0-MU.roa
File: WvwVjJHMOPWNlxS8HTbROtz0-MU.roa (raw, json)
Hash identifier: eOtN3+OEhxMDpWk6PNAgFifujhWFTlA2nbdD568BWFg=
Subject key identifier: 5A:FC:15:8C:91:CC:38:F5:8D:97:14:BC:1D:36:D1:3A:DC:F4:F8:C5
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D8C2667299D36F02AE01DEF69A49B4ED6
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/WvwVjJHMOPWNlxS8HTbROtz0-MU.roa
Signing time: Tue 14 Apr 2026 13:20:20 +0000
ROA not before: Tue 14 Apr 2026 13:20:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199030
IP address blocks: 216.236.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:26:67:29:9d:36:f0:2a:e0:1d:ef:69:a4:9b:4e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 14 13:20:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5afc158c91cc38f58d9714bc1d36d13adcf4f8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:d6:fb:c8:88:d0:6d:68:5d:d9:8c:6f:88:
c7:13:da:9e:16:40:62:21:64:7c:4b:a0:80:69:69:
36:09:2c:e5:06:9e:b6:9d:61:c9:8d:90:66:6f:26:
aa:ce:10:41:18:ed:96:01:36:fa:44:e2:65:b4:cb:
16:67:ad:a2:95:40:61:d0:86:fc:93:c0:5d:ac:43:
6e:4b:76:e3:a8:94:50:24:1f:fe:36:a8:33:74:fc:
f4:2c:88:c5:c2:c9:41:53:a9:f7:8e:df:86:79:e9:
dd:2f:d1:5e:fd:90:fe:e1:0a:74:af:3f:f1:95:d5:
3a:2e:76:c7:a0:da:a5:73:37:11:bf:42:69:d1:0e:
0b:b2:d0:00:5d:de:a6:b4:52:68:51:e2:e5:7f:6d:
9e:e7:46:a0:02:4f:c8:ce:b6:1e:2f:03:3b:3f:51:
5f:3b:d7:62:70:d5:1e:26:c5:ba:6c:83:00:d7:16:
b7:a4:d8:7f:81:82:be:6a:38:73:28:eb:d3:94:1b:
d5:c4:04:0f:08:ac:9f:e1:da:a2:cf:c4:14:19:69:
d0:22:f7:aa:9b:3b:62:b6:93:d9:23:76:1c:bf:38:
1b:a5:31:1c:19:43:0c:7b:8f:9a:dc:7b:2e:2a:d9:
5f:53:36:a6:e1:be:13:fb:e0:90:7a:a8:f9:56:33:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FC:15:8C:91:CC:38:F5:8D:97:14:BC:1D:36:D1:3A:DC:F4:F8:C5
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/WvwVjJHMOPWNlxS8HTbROtz0-MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:e9:b5:a3:2c:8c:87:bf:85:4e:ee:22:07:fc:47:aa:69:cb:
d5:7c:70:d3:0a:ff:74:0e:31:08:1f:18:e0:16:52:1d:2a:89:
42:c8:b0:6f:76:cd:4d:32:d6:f0:fa:79:5f:5c:ab:53:21:90:
6a:73:31:74:9b:4c:0e:11:de:69:62:12:fb:88:88:b6:47:8f:
46:10:57:3a:0f:ef:bd:37:0d:3d:86:f7:e4:60:bd:4a:3e:2c:
12:98:0e:7b:bc:04:b1:3b:67:46:52:b5:b1:47:27:87:2d:d2:
90:b0:84:29:e2:d7:af:47:28:4c:54:f7:63:e2:ae:a9:3f:67:
53:ee:d8:bc:42:45:44:c8:0d:3d:3f:65:3e:cd:f7:f0:be:a6:
ac:c9:47:fc:0a:f5:ac:53:b4:d6:f5:c2:10:3e:f3:10:36:93:
dc:e2:2f:8c:4f:cd:9c:64:61:24:b6:3f:80:a3:ba:e1:09:08:
02:36:29:2e:ad:46:62:e7:8d:f2:6f:b3:57:7c:3a:45:b8:17:
37:ab:74:2b:ff:74:24:d4:f6:e4:5f:92:44:e5:5e:4e:14:47:
9f:65:06:3d:cf:63:24:9c:46:9f:d9:8f:9c:f3:ed:d9:04:fc:
48:63:b8:19:9f:84:00:16:10:fa:05:df:c2:b6:0d:8f:20:90:
2c:85:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:15 2026 by rpki-client