Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/WkSCT5ydAQBxGQge-6FM48sBi5s.roa
File: WkSCT5ydAQBxGQge-6FM48sBi5s.roa (raw, json)
Hash identifier: z37cAOZKTjClde110cq1xpRd8lheroW1L4vQKnIeWQU=
Subject key identifier: 5A:44:82:4F:9C:9D:01:00:71:19:08:1E:FB:A1:4C:E3:CB:01:8B:9B
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01A0E6D28BBEDDA5960CDBF0EE21CAFCAD0C
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/WkSCT5ydAQBxGQge-6FM48sBi5s.roa
Signing time: Mon 28 Sep 2026 07:02:32 +0000
ROA not before: Mon 28 Sep 2026 07:02:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 89.249.197.0/24 maxlen: 24
89.249.198.0/24 maxlen: 24
212.42.201.0/24 maxlen: 24
212.42.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:8b:be:dd:a5:96:0c:db:f0:ee:21:ca:fc:ad:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Sep 28 07:02:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a44824f9c9d01007119081efba14ce3cb018b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:8e:94:19:53:dc:02:b1:bf:88:9b:9e:df:
5e:af:00:cb:8b:e4:c5:1d:73:c0:ee:26:cd:ab:49:
7c:6d:6b:30:00:72:38:6f:f0:63:77:48:1b:ac:31:
8c:7f:e4:c4:23:b0:7d:93:52:58:1c:50:8e:9c:0d:
e9:f4:f8:2c:0c:ba:73:87:8e:82:f3:10:38:8e:ba:
a7:68:48:e8:42:34:ee:5b:67:8a:bc:72:1f:20:2f:
e0:13:29:aa:1a:f4:e9:b1:09:99:04:a2:6c:9c:9b:
71:c7:b1:2c:32:7b:0e:c3:42:00:38:ed:e1:7c:b2:
0e:4a:1f:34:d0:96:12:b1:07:b2:53:1b:c7:6c:aa:
04:3b:c4:bf:f6:23:77:73:0a:20:7d:fc:29:1a:10:
e0:2a:64:a9:f7:9e:b7:64:a9:f5:82:3a:ad:2a:e0:
2f:aa:29:d0:9a:1e:2e:b6:7d:3d:ce:47:47:c8:a3:
eb:67:7b:7c:40:6b:59:7e:66:f2:05:b4:27:c8:89:
77:d9:ca:8f:71:13:88:cf:9e:6b:99:a8:fb:43:87:
88:9e:e5:e3:f5:b2:68:30:44:59:87:30:32:4b:fc:
b2:a5:08:03:93:52:5d:4c:97:10:aa:a7:80:a9:3a:
7c:04:8f:d1:ef:4e:2f:e0:12:4c:4e:51:c1:e6:1b:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:82:4F:9C:9D:01:00:71:19:08:1E:FB:A1:4C:E3:CB:01:8B:9B
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/WkSCT5ydAQBxGQge-6FM48sBi5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.197.0-89.249.198.255
212.42.201.0/24
212.42.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0b:80:df:7d:d6:39:50:7d:59:67:8a:52:b4:36:39:ec:2e:
ba:8d:8f:09:d3:bd:3a:6c:00:d1:d1:bc:69:2b:79:ce:e0:76:
19:0b:1d:60:ea:49:2f:bd:55:03:98:31:2b:ef:d1:d2:17:e6:
2f:6b:10:3b:b9:24:85:fc:4f:8f:fe:31:6b:ca:80:6a:97:66:
39:82:0a:56:9b:67:fe:3b:83:e1:01:37:69:5e:3f:34:7d:7a:
36:00:73:f0:00:74:4c:75:65:3b:eb:b8:dd:fa:6d:9d:4d:67:
96:0e:87:d2:62:cf:12:28:66:36:2a:ef:a2:d7:a3:ff:16:b2:
27:bd:73:4c:f3:4d:90:67:53:82:9d:10:e4:bb:ab:73:bf:63:
13:5b:31:59:7c:b0:fd:65:2e:c5:fe:a7:e5:58:fe:67:52:dd:
8c:26:f1:fc:cd:fc:3b:5e:d6:08:2f:69:71:1c:61:fd:5a:b9:
9a:87:d3:e8:09:34:fc:69:cc:ae:96:4f:c0:9b:6d:65:3a:e9:
fc:7c:eb:60:b0:b1:ca:39:3c:9a:a6:95:35:7f:54:be:ee:04:
65:d2:71:76:4b:b2:32:50:3c:8c:75:66:58:fa:e2:51:92:f7:
a4:88:46:78:43:8d:0c:21:83:7b:16:3c:68:83:c9:49:f2:99:
e6:ec:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:51:45 2026 by rpki-client