Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/wXYslh9daqxVdpjLENOri_Gkabc.roa
File: wXYslh9daqxVdpjLENOri_Gkabc.roa (raw, json)
Hash identifier: 9LvmPHXeSyF1LLUJyo35Xz9ELuGmAcM1NO5fTifvClg=
Subject key identifier: C1:76:2C:96:1F:5D:6A:AC:55:76:98:CB:10:D3:AB:8B:F1:A4:69:B7
Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Certificate serial: 019B7EA732B05372F9DEC52E7BDCA1260C06
Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/wXYslh9daqxVdpjLENOri_Gkabc.roa
Signing time: Fri 02 Jan 2026 12:20:45 +0000
ROA not before: Fri 02 Jan 2026 12:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51112
IP address blocks: 178.217.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:32:b0:53:72:f9:de:c5:2e:7b:dc:a1:26:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3
Validity
Not Before: Jan 2 12:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1762c961f5d6aac557698cb10d3ab8bf1a469b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:de:d6:9f:d1:0e:1b:9e:3c:cc:b3:7e:e2:
ea:dd:ae:87:48:13:fd:64:98:f4:ed:cc:43:31:e0:
09:6a:46:05:f4:4e:dd:2d:23:8a:e4:6b:6f:74:f0:
6c:36:99:92:7a:17:79:4a:41:29:06:9b:82:5e:77:
52:43:63:8b:e3:ea:33:ea:f1:9c:9c:4e:43:00:44:
52:16:f9:08:a7:e3:e0:81:d8:6a:3a:3c:9f:aa:f3:
1d:ec:8f:ed:e2:56:b2:6d:57:25:7c:23:c1:34:ff:
23:35:64:4d:3d:b0:14:e3:84:f0:14:5d:7b:f6:7c:
f2:6c:1a:7d:e9:1d:33:34:bd:51:f7:3b:95:ec:c3:
30:a8:3b:a4:71:95:42:11:0d:2d:0f:fa:35:ad:85:
34:ff:05:aa:24:1b:ac:1d:0d:66:d1:d3:ec:09:81:
ef:23:da:b3:cf:c6:63:98:30:f4:d6:6b:b8:16:16:
64:a7:dd:ed:eb:28:3e:3a:1e:40:01:7f:88:3f:f0:
61:41:72:48:0c:24:f5:3b:4b:86:39:d7:90:37:70:
28:cc:2e:3f:c4:7c:bb:77:a0:17:7c:d3:5b:b5:ab:
1f:7e:7b:eb:5b:02:7c:03:04:33:ee:06:46:fb:25:
5e:65:a6:d8:13:d4:25:51:1f:cf:90:c6:9c:4c:39:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:2C:96:1F:5D:6A:AC:55:76:98:CB:10:D3:AB:8B:F1:A4:69:B7
X509v3 Authority Key Identifier:
keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/wXYslh9daqxVdpjLENOri_Gkabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.217.72.0/21
Signature Algorithm: sha256WithRSAEncryption
be:99:2f:9e:69:db:f3:00:f5:8d:84:31:9e:bc:e7:57:49:61:
6b:94:b6:5f:77:08:2c:f3:5c:e1:1a:ba:f5:5e:80:79:c7:6b:
e5:91:f9:8e:ae:c1:6a:df:4e:6d:e0:03:06:6a:79:61:29:00:
45:76:cd:93:9c:47:a4:7e:fe:1c:82:7b:d3:85:45:30:e1:c6:
e2:ef:dd:7a:07:0c:60:e3:07:e0:e2:fd:be:6c:dc:ad:76:52:
2c:9a:7e:07:49:95:ae:f5:af:d4:84:76:15:76:bf:06:75:7b:
48:a8:e4:04:da:bc:dd:82:c2:71:cf:bb:00:aa:2e:e4:d1:83:
34:ee:9b:34:df:5c:57:37:4c:26:42:37:c6:01:eb:c7:cf:2c:
76:26:aa:ee:7c:4e:b5:2a:ea:9e:e9:a8:80:2b:65:39:3d:11:
a4:80:88:5c:53:7d:62:a4:25:45:71:0b:5b:7a:21:4c:3b:2d:
df:cf:d7:f4:94:a1:c1:98:fc:a2:39:16:73:79:6e:29:8a:b2:
25:02:f6:11:34:64:1f:20:e1:42:3e:aa:b0:8e:c3:ac:b1:41:
16:5a:8b:6c:28:25:5b:41:df:1d:a7:2c:fa:82:9d:1a:2f:dd:
36:32:cd:29:f5:90:0c:5b:41:47:5b:ec:34:d1:86:ec:29:bc:
e7:cb:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:00 2026 by rpki-client