Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/wcAcMzVDqJZgkCGHi3CC2I0Q3d0.roa
File: wcAcMzVDqJZgkCGHi3CC2I0Q3d0.roa (raw, json)
Hash identifier: 8O+HaIBIsiO6s2mw/PRnvpjQu1jVSZZWhrC2+BlnDJo=
Subject key identifier: C1:C0:1C:33:35:43:A8:96:60:90:21:87:8B:70:82:D8:8D:10:DD:DD
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A13E7D45E2DB95BE95BCEE2B84BA632F01
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/wcAcMzVDqJZgkCGHi3CC2I0Q3d0.roa
Signing time: Thu 15 Oct 2026 07:35:59 +0000
ROA not before: Thu 15 Oct 2026 07:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 212.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:7d:45:e2:db:95:be:95:bc:ee:2b:84:ba:63:2f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Oct 15 07:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1c01c333543a896609021878b7082d88d10dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:72:e6:79:78:f7:86:14:7f:e8:a0:9e:bf:
ce:d9:83:38:6c:92:f5:70:28:88:b9:67:28:d8:6c:
a4:49:d9:2f:be:97:54:85:ee:9a:68:ea:a5:f5:6b:
77:e1:28:44:16:c0:00:37:7f:0e:87:4e:70:c0:50:
a0:0c:56:15:0b:60:84:56:96:65:a3:3a:3d:21:a3:
2e:9a:70:8e:5d:f8:98:37:7b:64:74:29:8d:fe:0e:
1b:0f:3d:cd:21:b7:20:a5:3c:9c:5b:06:ac:85:36:
88:3a:7c:a0:52:54:78:e2:58:43:6c:e9:f4:96:74:
81:33:a4:88:ff:32:8c:2e:bf:ba:72:45:3f:b1:23:
24:c8:05:3b:5e:2a:41:a8:81:f5:ba:d8:ea:77:08:
f6:3f:32:d6:d0:37:31:13:70:5b:32:eb:cc:6c:bf:
48:ce:87:7c:00:2b:57:d2:c4:8e:b0:54:c0:42:3d:
64:0d:d4:e7:43:33:92:08:38:06:5b:2f:29:a3:c6:
6d:70:f2:ad:72:b0:22:d9:62:ac:a5:8c:8c:74:94:
73:34:56:ec:f5:c5:3a:1b:30:03:84:b6:b0:57:19:
44:3a:8e:e9:3a:c1:da:58:f2:2e:31:a1:a9:48:1c:
a5:69:83:0b:81:fc:90:cf:29:75:47:6e:a2:e6:b7:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:1C:33:35:43:A8:96:60:90:21:87:8B:70:82:D8:8D:10:DD:DD
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/wcAcMzVDqJZgkCGHi3CC2I0Q3d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0c:38:7e:be:df:dc:3e:48:0e:9b:1a:51:a6:15:45:e9:d9:
7f:97:5b:70:e5:65:8d:33:66:36:ce:61:be:c1:ef:1b:19:83:
bf:35:77:89:09:3e:47:8d:d5:87:8c:8b:3f:18:8f:09:2f:2a:
12:b6:15:ad:15:00:63:b9:6d:df:02:bb:f5:9c:91:ed:bb:06:
a0:ce:47:34:97:73:5e:1c:e3:5e:71:e9:f8:62:07:4c:70:f4:
16:6a:95:b6:08:63:1a:ea:0a:96:31:bd:18:ce:d6:65:9c:d2:
e3:9c:7c:40:af:95:fe:b0:fa:1e:22:02:2a:45:7e:80:4b:7b:
b5:4a:81:51:b0:54:c7:75:06:1e:70:b5:b2:1a:3f:1e:c4:5e:
33:4f:02:52:16:a5:6c:94:43:58:1b:ec:52:43:3e:ca:d4:a8:
c4:ed:ec:48:17:f4:b4:13:48:d9:92:67:e2:dd:bd:c2:1c:a1:
be:8b:38:06:49:fc:b1:c9:e6:0a:2a:b8:61:58:c5:a0:39:21:
b6:37:e6:ca:22:19:f4:ce:45:06:18:fa:0e:67:b7:88:2d:61:
24:2b:25:9c:99:57:be:57:8c:c9:6d:92:d4:d4:0b:15:9d:17:
b7:13:e8:22:a2:41:6c:c0:15:60:f0:7f:b7:ad:e8:07:98:7b:
fa:6c:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:34:28 2026 by rpki-client