Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wrBGaR3wqBjnHYdozqy6qUl5SXs.roa
File: wrBGaR3wqBjnHYdozqy6qUl5SXs.roa (raw, json)
Hash identifier: uXqjO8ltW+57Tb3jrq5+2pNyIgDacOd00iAtYp/TI7M=
Subject key identifier: C2:B0:46:69:1D:F0:A8:18:E7:1D:87:68:CE:AC:BA:A9:49:79:49:7B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CA09A269220080E8E823F62AFF61351D8
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wrBGaR3wqBjnHYdozqy6qUl5SXs.roa
Signing time: Fri 27 Feb 2026 19:36:22 +0000
ROA not before: Fri 27 Feb 2026 19:36:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 77.111.100.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:9a:26:92:20:08:0e:8e:82:3f:62:af:f6:13:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 27 19:36:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2b046691df0a818e71d8768ceacbaa94979497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:ce:09:b0:83:a1:38:1e:51:bd:b7:ea:66:
97:83:f9:c0:1c:47:ec:a4:74:66:af:46:59:e3:c6:
8d:5b:54:9c:7f:52:8d:42:5f:f5:46:6c:90:a4:fb:
c9:ff:0b:69:77:8b:fd:53:7f:29:9d:30:25:3c:98:
d3:54:68:bb:dc:dd:4a:d0:54:d0:46:30:ab:1c:0a:
53:9a:a1:47:10:b3:39:f2:41:98:ba:f2:c7:f8:5b:
74:32:3a:d2:61:e7:8a:19:0e:a4:c6:18:51:58:06:
a1:66:57:d0:36:22:d5:02:f1:4c:3a:ab:32:60:4e:
5f:3b:ed:30:67:92:61:6c:48:36:52:4c:ad:02:bc:
af:aa:aa:fd:81:96:a8:5a:77:03:6f:37:4f:00:e8:
43:a4:6e:60:cf:e8:7a:9c:26:f8:8c:f9:77:b5:dd:
60:a0:1e:69:35:41:f7:3a:f5:50:08:16:1b:6f:ab:
5a:53:ac:a3:91:a9:1c:19:5c:4b:37:eb:19:5e:01:
cc:67:31:f4:cc:5d:a1:7c:98:7b:2e:a3:76:5d:ca:
28:71:c0:06:36:84:2a:c8:47:55:3f:2c:18:37:0b:
62:79:6b:51:dc:5f:58:b0:14:90:c2:80:07:00:8a:
1e:d0:46:22:a3:5c:6a:35:05:a7:cc:11:17:a7:4d:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B0:46:69:1D:F0:A8:18:E7:1D:87:68:CE:AC:BA:A9:49:79:49:7B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wrBGaR3wqBjnHYdozqy6qUl5SXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.100.0/24
94.229.209.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:bd:24:50:f9:ed:b2:53:ca:2e:fc:32:9c:77:a8:2f:43:6a:
84:9c:21:1a:40:7d:49:ba:f0:fa:44:8d:6f:1b:08:00:d1:6a:
f1:3a:f7:8f:bb:89:b3:7a:eb:98:6d:ad:f8:05:a8:f7:35:19:
6f:c0:25:1c:e1:22:3c:8c:b3:ec:8e:4f:08:3e:61:12:1e:6d:
f7:a2:fc:24:9a:3f:4f:78:a6:65:43:5d:63:01:0a:eb:10:d5:
00:46:d4:b4:3f:d6:3f:96:ae:3d:87:5c:17:62:bf:11:d1:61:
b6:9f:76:85:42:a5:5a:d4:c6:33:31:72:bf:02:67:82:5b:7a:
eb:25:29:17:3c:3c:66:29:36:fd:04:2c:7b:08:85:19:16:cf:
88:ff:4c:c9:b2:a8:4f:46:ef:1d:bb:6e:df:2a:14:37:f8:f0:
d4:e5:47:57:4f:74:df:d0:18:d1:77:d3:09:72:74:5b:74:83:
85:0c:56:3d:d9:ee:93:e7:fb:39:af:40:0e:91:ab:8b:3f:95:
04:13:e2:90:7a:a8:ae:48:aa:b3:ef:9e:d9:3e:1c:0e:1b:43:
65:4c:03:b2:87:66:f5:42:bb:1a:dd:c1:1a:30:7b:c6:e8:95:
a3:c9:fe:b9:6d:a9:e8:65:73:59:94:a3:b7:84:dd:09:29:3f:
7b:f7:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:07:02 2026 by rpki-client