Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/wLTabeG6W9scPK-KgjhmQT_cofg.roa
File: wLTabeG6W9scPK-KgjhmQT_cofg.roa (raw, json)
Hash identifier: knKii4to9f3vWO2m5lSB+g8YQoY/mZRmcxoRXUr8ZI8=
Subject key identifier: C0:B4:DA:6D:E1:BA:5B:DB:1C:3C:AF:8A:82:38:66:41:3F:DC:A1:F8
Certificate issuer: /CN=78ed8979d3e814c5150993e9c8089d255426df05
Certificate serial: 01A09E5FB49B43FBB6449486080773A96B64
Authority key identifier: 78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/wLTabeG6W9scPK-KgjhmQT_cofg.roa
Signing time: Mon 14 Sep 2026 05:24:27 +0000
ROA not before: Mon 14 Sep 2026 05:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 136.144.20.0/24 maxlen: 24
136.144.21.0/24 maxlen: 24
185.245.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:5f:b4:9b:43:fb:b6:44:94:86:08:07:73:a9:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ed8979d3e814c5150993e9c8089d255426df05
Validity
Not Before: Sep 14 05:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0b4da6de1ba5bdb1c3caf8a823866413fdca1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:70:98:ee:6f:8d:d9:cd:16:ab:4e:a0:dc:ca:
a3:8b:02:9e:9a:27:87:f7:aa:c0:69:10:7a:e2:82:
4d:a9:a3:79:71:f8:c8:8e:83:22:14:46:1b:c4:6a:
06:e2:60:eb:ec:a2:de:fb:4e:28:0f:73:aa:8a:c9:
72:4e:58:bc:d6:65:9c:4f:e9:87:19:1a:17:3d:59:
60:4a:d7:3e:94:6d:6b:77:eb:08:40:60:69:c5:ba:
9c:ed:83:d6:73:52:da:27:3e:dd:e4:9e:4e:0e:a3:
06:92:4b:56:1d:8e:b1:08:27:08:4a:2a:37:ed:2b:
38:5e:62:8e:1c:8a:03:ac:b4:49:ba:c5:4d:6e:dd:
89:0b:5a:fb:bd:3c:f9:2a:95:64:54:cd:66:71:ec:
00:af:0f:53:91:6b:3d:63:85:2f:7b:98:6a:85:5a:
34:5d:14:a5:2b:bb:87:e2:96:44:1e:fe:79:2b:3c:
22:81:49:a5:35:d1:28:56:9c:13:88:60:d8:34:8b:
1d:54:16:e2:36:51:5d:42:19:dd:c3:0a:9d:47:8f:
b4:6b:a6:6c:c9:c9:c7:6d:15:cd:6c:76:44:c9:87:
cb:7d:33:b7:c0:4b:1b:13:6d:3a:06:e4:bb:63:20:
21:fb:81:b4:94:bf:ec:65:19:30:45:36:11:3c:f3:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:DA:6D:E1:BA:5B:DB:1C:3C:AF:8A:82:38:66:41:3F:DC:A1:F8
X509v3 Authority Key Identifier:
keyid:78:ED:89:79:D3:E8:14:C5:15:09:93:E9:C8:08:9D:25:54:26:DF:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO2JedPoFMUVCZPpyAidJVQm3wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/wLTabeG6W9scPK-KgjhmQT_cofg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d0dc9-6bad-4be4-b51c-d238d56d99be/1/eO2JedPoFMUVCZPpyAidJVQm3wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.20.0/23
185.245.163.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:16:34:03:d7:2d:7a:b3:fa:33:de:b4:2d:e7:a2:1a:ff:66:
8a:22:8e:23:dd:4b:c2:c5:84:4b:3d:15:35:3f:04:fa:06:48:
90:b8:59:cc:b6:cd:a5:56:11:e4:5f:9e:16:55:3b:e5:a5:19:
72:5e:c4:5a:64:fc:26:1e:ad:26:89:06:a2:7c:7b:11:53:d3:
19:24:88:6a:a8:e7:e0:8b:0f:50:35:f3:bf:f5:6b:ed:0c:3d:
07:d3:ee:60:1d:ba:6b:c4:e9:d2:b4:d4:11:8f:9d:4a:ea:43:
ec:92:75:f4:7a:12:2d:bb:1a:99:07:cb:d3:d2:3f:30:f4:7d:
18:d0:8a:cd:79:79:b9:c0:02:37:b2:39:ab:ea:cb:a5:82:b0:
6b:8c:af:8a:19:2c:f5:db:c0:d1:12:35:fa:a8:ca:62:6b:3d:
99:2c:b3:74:fe:db:46:9b:59:23:90:cb:29:36:6c:9c:28:d2:
1d:af:e0:ab:9d:26:fb:ef:57:6d:66:65:fb:8f:5f:67:83:6e:
e7:e4:bf:7a:e6:70:33:80:94:d6:8c:c0:dd:64:76:48:ff:43:
70:01:fe:08:45:10:2b:9e:46:cf:dd:c8:52:4c:1e:df:9f:26:
f7:50:1a:fc:ae:ef:f7:6b:90:d2:9a:7e:6f:b3:e7:4e:3f:9d:
c1:30:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:03:24 2026 by rpki-client