Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/wvXGoxKnb2h3Sb09U2atk0ZzWno.roa
File: wvXGoxKnb2h3Sb09U2atk0ZzWno.roa (raw, json)
Hash identifier: UxlPo4YmOET2+BkL1Ltq53UfhUIfI3eZ8RtjCHeCcVo=
Subject key identifier: C2:F5:C6:A3:12:A7:6F:68:77:49:BD:3D:53:66:AD:93:46:73:5A:7A
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 01A0DDFAC580C2BBDA8A18C5F47E5A7F01B2
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/wvXGoxKnb2h3Sb09U2atk0ZzWno.roa
Signing time: Sat 26 Sep 2026 13:49:54 +0000
ROA not before: Sat 26 Sep 2026 13:49:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42655
IP address blocks: 91.199.45.0/24 maxlen: 24
91.235.128.0/24 maxlen: 24
185.237.204.0/23 maxlen: 23
195.54.163.0/24 maxlen: 24
2a06:c6c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:fa:c5:80:c2:bb:da:8a:18:c5:f4:7e:5a:7f:01:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Sep 26 13:49:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2f5c6a312a76f687749bd3d5366ad9346735a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:ba:27:d3:78:c2:d2:f8:26:fd:85:d6:81:
81:44:d8:cd:d9:9a:e8:8c:f0:a9:8b:97:63:89:71:
54:4c:38:9a:6d:86:af:89:fd:33:04:40:8a:b2:4c:
ff:e0:1f:3e:d5:aa:4a:b8:39:a5:96:e9:c1:bc:a9:
a5:e6:d5:50:ff:4f:d9:75:89:3e:14:d1:33:68:12:
62:7d:da:fd:ed:bc:8d:51:b0:60:23:76:77:90:e9:
9d:2c:2e:75:4c:2f:e1:c0:3c:33:2f:49:3e:29:eb:
59:01:1d:f1:c9:2e:d3:24:17:e4:d4:95:6f:e7:4f:
a3:82:3b:40:ce:1b:13:2a:ae:d2:b8:61:dd:1f:1d:
73:97:4c:c2:ce:87:37:b2:e0:58:87:0d:52:b1:4a:
26:ce:ee:ac:02:6a:67:ed:73:9d:09:92:ea:83:c9:
b4:b7:4f:e3:d0:82:5b:b7:e9:de:b1:55:01:e4:ea:
21:e2:2c:21:85:9c:49:19:71:c8:3f:b5:ba:85:d4:
b4:04:cd:a2:bd:9c:f5:ee:76:a9:e3:92:54:85:ca:
f4:ea:97:3f:4d:b9:be:cb:a4:fd:4c:b7:e6:7a:b6:
bd:63:42:92:7f:7e:0b:f9:b1:fa:d0:6e:2e:98:20:
cd:f9:7b:f2:d3:94:e9:61:fe:8b:22:68:10:ef:5a:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:C6:A3:12:A7:6F:68:77:49:BD:3D:53:66:AD:93:46:73:5A:7A
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/wvXGoxKnb2h3Sb09U2atk0ZzWno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.45.0/24
91.235.128.0/24
185.237.204.0/23
195.54.163.0/24
IPv6:
2a06:c6c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
37:17:08:04:ff:81:b1:24:63:aa:42:36:f6:84:ae:98:ad:10:
13:1b:d1:db:08:41:cb:b9:2f:7b:5b:64:78:fa:ae:01:e0:fe:
7e:c1:0b:a5:71:a4:0d:3f:3c:23:99:16:01:38:fd:0d:6b:3a:
af:f8:c0:42:bf:1e:3f:c4:ad:85:6b:ce:32:05:f3:0d:85:a1:
69:ac:1c:7b:f7:bc:24:94:a7:22:e2:69:e3:4b:cb:ea:be:ff:
82:b6:5c:3e:2d:2e:1e:c1:8a:09:c7:f3:96:af:8a:85:17:49:
af:6e:75:a6:64:ea:08:47:d8:98:36:45:b9:85:9d:54:c0:bc:
f6:06:cc:ce:5f:b7:ca:79:d5:16:9e:9f:14:6a:e2:02:52:24:
e3:44:34:a9:84:8f:90:4c:a5:cf:83:7b:90:49:d3:5c:34:f6:
39:5f:13:57:e3:0c:56:7a:49:17:7f:8d:91:29:d2:b9:a8:bd:
0d:d1:32:de:32:8c:ea:31:6f:5c:d7:29:06:aa:62:c0:be:4a:
82:bd:01:9a:1d:e0:11:46:b1:d0:ef:57:85:f1:52:55:21:f5:
39:47:28:d4:3a:3b:ce:d8:0c:27:4d:c7:cd:d6:05:ad:fa:98:
0b:8b:ff:93:18:6e:53:07:d0:f2:fc:7c:17:ef:28:20:07:f6:
65:34:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:12:49 2026 by rpki-client