Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wbAZHUQcW_5izdbEnjntCaF2iSk.roa
File: wbAZHUQcW_5izdbEnjntCaF2iSk.roa (raw, json)
Hash identifier: rxpoOnYZt0UOoQfJLT28tv4yR6G72BZPFqFDyoHLkMI=
Subject key identifier: C1:B0:19:1D:44:1C:5B:FE:62:CD:D6:C4:9E:39:ED:09:A1:76:89:29
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019C48A4B9E8120BFC7A5EFFD6D26D4746E1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wbAZHUQcW_5izdbEnjntCaF2iSk.roa
Signing time: Tue 10 Feb 2026 17:41:20 +0000
ROA not before: Tue 10 Feb 2026 17:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 77.111.96.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:a4:b9:e8:12:0b:fc:7a:5e:ff:d6:d2:6d:47:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 10 17:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1b0191d441c5bfe62cdd6c49e39ed09a1768929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:a4:9d:36:3c:5f:c3:02:2e:f9:d1:39:37:
5e:92:50:a7:73:22:9f:8a:41:08:d9:97:62:28:c1:
46:db:b7:61:03:35:52:53:e2:82:62:be:01:86:27:
be:58:42:8a:ab:12:21:0d:44:b4:0a:40:3d:a8:70:
81:7b:b3:23:3d:8a:2c:2b:34:ac:f2:c2:65:6e:0c:
be:33:ad:0d:d0:16:b7:25:9e:c8:57:df:40:69:a2:
15:64:84:54:61:99:e6:42:0b:86:77:0d:e5:03:06:
db:80:09:aa:cf:7e:45:39:87:0a:52:46:bf:86:5d:
d6:4c:99:92:fd:55:b1:03:c6:0b:fe:e8:ce:78:20:
ff:b6:38:87:a4:c4:ab:0f:75:81:39:39:c9:79:bd:
54:4e:26:11:ca:14:a0:f5:27:25:e9:08:e8:f7:58:
be:85:e7:6c:62:51:88:ff:5f:0b:81:d4:d3:ab:fe:
61:1f:0e:de:b3:3c:7a:69:30:f0:36:b9:2a:4d:33:
5f:d7:b7:7e:8c:d3:ea:c6:24:15:52:ff:e8:ef:4e:
95:3f:aa:b8:0e:b3:60:3a:f3:9c:52:fd:4b:41:0e:
a8:43:b9:18:6c:ca:dc:e6:f6:9f:56:ac:11:90:59:
e5:7f:c8:39:73:4b:ac:7b:21:65:c5:c7:cf:bf:1e:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:19:1D:44:1C:5B:FE:62:CD:D6:C4:9E:39:ED:09:A1:76:89:29
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wbAZHUQcW_5izdbEnjntCaF2iSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/24
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9e:7b:78:80:83:d2:4e:01:72:16:07:b4:df:f6:fb:61:da:
c8:70:1b:cc:d5:d6:36:b4:82:3a:d7:1d:4f:86:3c:40:b4:f6:
9d:05:b6:56:e9:61:fb:f4:49:cb:37:2d:9a:fa:89:32:f7:38:
2b:e3:2f:3b:68:03:6e:b6:d0:50:23:30:0e:9b:80:ca:05:70:
f3:00:6f:08:7d:08:0f:22:e7:6b:7c:d1:75:f9:dd:b9:fc:fb:
53:c8:9c:82:c2:a3:a6:b9:19:ae:77:9b:82:a3:20:0f:20:f3:
4d:96:74:00:7c:74:36:28:b6:1e:e3:30:46:44:da:47:5f:5e:
7f:5c:20:6a:05:91:34:24:08:24:35:10:aa:b7:51:94:c2:b8:
59:73:87:f3:7e:cb:e4:98:7a:06:ce:b3:05:09:58:a5:a0:84:
d5:6e:a5:0c:48:d4:2a:08:7e:8e:9a:1b:ad:db:52:0e:92:dc:
46:ce:3a:55:dd:3a:03:66:57:c0:ca:bb:c5:9a:d4:26:d4:3d:
f3:f1:c2:5c:06:e0:83:5d:fd:0d:65:7f:a3:c6:a5:e6:46:b4:
45:d2:16:00:4c:af:4d:1d:e4:95:b0:09:02:53:14:03:dd:d6:
99:c5:28:13:5f:e6:d7:32:12:5a:bb:f0:ad:c5:15:4f:90:10:
45:93:c5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:20:31 2026 by rpki-client