Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/RPldKq2pOTpJyhFVE1PkY5_moWs.roa
File: RPldKq2pOTpJyhFVE1PkY5_moWs.roa (raw, json)
Hash identifier: M9t0SytZuSFtb0hf87QxWcjy93fBYPYLLBA5rGvBABs=
Subject key identifier: 44:F9:5D:2A:AD:A9:39:3A:49:CA:11:55:13:53:E4:63:9F:E6:A1:6B
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01A1D5B126379F40190BE80D7E35E7391D7A
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/RPldKq2pOTpJyhFVE1PkY5_moWs.roa
Signing time: Fri 13 Nov 2026 16:15:18 +0000
ROA not before: Fri 13 Nov 2026 16:15:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 78.40.200.0/21 maxlen: 21
82.119.192.0/19 maxlen: 19
88.81.160.0/19 maxlen: 19
217.22.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:b1:26:37:9f:40:19:0b:e8:0d:7e:35:e7:39:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Nov 13 16:15:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44f95d2aada9393a49ca11551353e4639fe6a16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:ed:e4:e2:44:c2:28:04:71:9c:29:5c:8b:
cb:7d:6b:bd:49:85:b4:a0:6d:61:aa:b0:16:ca:3e:
93:0e:af:90:9f:e5:46:3a:42:ce:e7:01:2d:17:c1:
ed:85:87:53:cc:83:5d:40:20:6e:a4:74:7e:c7:9a:
95:39:a6:3c:57:b2:56:39:e9:93:3c:eb:12:2a:1f:
9a:d9:08:73:fa:88:1f:e6:74:af:6f:4b:94:5c:00:
9c:42:88:ee:7f:1e:41:be:ee:22:6f:45:f8:ee:61:
cc:46:33:87:aa:6b:60:1b:4d:41:a5:14:7f:78:07:
dd:d0:21:66:80:27:50:c8:22:e8:18:d2:c8:56:aa:
8a:e9:44:ff:2a:e7:5a:db:bc:da:b3:3c:7d:43:5a:
10:1c:d9:06:27:cd:e2:21:a1:7e:a3:5e:a8:de:18:
be:47:a9:8e:06:8b:27:30:cc:94:a9:6e:38:78:df:
dc:e2:e0:69:c5:75:75:af:35:2f:a5:2d:65:c5:e0:
08:37:5c:d7:90:09:6f:42:4d:fb:85:8c:5b:3e:d9:
21:82:23:d4:bb:dc:13:68:71:ee:18:15:8b:3c:7e:
a8:b6:4f:61:bd:9d:43:e4:7b:94:6f:bb:0b:95:ec:
06:2c:c9:6a:ef:d6:90:52:7b:bc:62:e4:0d:fa:30:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F9:5D:2A:AD:A9:39:3A:49:CA:11:55:13:53:E4:63:9F:E6:A1:6B
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/RPldKq2pOTpJyhFVE1PkY5_moWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.200.0/21
82.119.192.0/19
88.81.160.0/19
217.22.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:a1:35:f8:be:73:af:2f:34:d1:cc:47:81:c4:80:36:35:4d:
58:5a:25:d4:c5:16:f6:cd:b7:63:e5:43:3d:c1:86:99:6a:ca:
56:b9:a2:4f:81:4e:8a:22:b1:26:5d:f6:60:86:0b:ed:75:c5:
20:8e:96:1e:63:ac:43:ea:1e:cb:86:d3:e1:e7:47:59:12:cc:
83:a7:20:a7:98:87:de:3e:cf:b7:92:5b:a8:6e:22:0d:b7:50:
55:e2:e0:66:69:8c:c2:72:3f:e2:36:9a:93:6d:e8:35:df:bb:
fd:75:25:92:b6:20:b7:f1:8d:80:74:42:56:76:e5:8b:80:89:
2e:15:6b:e8:6d:6c:27:e7:b9:cb:d3:fd:bf:eb:e2:98:d4:0d:
c5:41:a4:8d:b5:90:29:df:19:c8:42:06:e2:09:ef:e7:9d:e9:
47:b6:e3:6c:47:1e:11:41:72:2f:76:c3:e5:9f:71:a5:99:a8:
5b:54:53:3c:f7:2c:90:1d:fe:7d:74:aa:21:60:a1:89:30:bf:
7b:ca:33:f4:cd:37:20:a6:ab:2c:b0:8e:0d:d4:32:a6:53:04:
95:a4:5f:d2:bc:61:75:50:8a:90:d0:77:03:4b:fa:eb:1a:3d:
95:6d:69:a1:0d:85:85:0e:44:1b:48:46:2d:2b:2a:eb:86:61:
2f:e0:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:13:01 2026 by rpki-client