Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/wcntyMnez7nlTAtvjv24DhOdK_Q.roa
File: wcntyMnez7nlTAtvjv24DhOdK_Q.roa (raw, json)
Hash identifier: 6FfBlpmDYKCNFY0GBitPAgQhzWgSPgHRpjHlTxJ1p7Q=
Subject key identifier: C1:C9:ED:C8:C9:DE:CF:B9:E5:4C:0B:6F:8E:FD:B8:0E:13:9D:2B:F4
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A0CD42E04EC8231E01704A04E9FC3085C4
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/wcntyMnez7nlTAtvjv24DhOdK_Q.roa
Signing time: Wed 23 Sep 2026 07:55:07 +0000
ROA not before: Wed 23 Sep 2026 07:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218751
IP address blocks: 87.192.41.0/24 maxlen: 24
87.192.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:42:e0:4e:c8:23:1e:01:70:4a:04:e9:fc:30:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 23 07:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1c9edc8c9decfb9e54c0b6f8efdb80e139d2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:30:6d:fd:5f:a0:25:50:9c:64:ba:33:81:
82:5c:7e:ee:11:c0:02:14:df:47:bf:69:de:08:d6:
ff:b9:f8:b3:5f:cf:2a:18:2e:ee:7d:e4:21:dd:7d:
11:17:3d:c0:31:9d:52:ee:35:41:b7:cf:5a:65:09:
72:4d:6f:c1:c5:6e:a5:fb:53:a2:49:7e:c7:d2:cf:
82:ef:d9:19:02:fe:1a:7b:ba:8d:82:e2:cf:d4:45:
e6:c7:2f:68:a4:93:9b:5e:22:04:bf:ab:48:4e:c5:
c2:44:ee:15:73:f9:cb:db:22:a6:4a:93:5b:c1:47:
07:1f:ab:76:70:46:55:6f:6c:d5:ad:b1:2f:03:e7:
1c:dd:d7:9f:5a:34:c8:8a:bb:16:c0:29:bb:91:fb:
31:b0:b8:4f:3a:00:1c:b7:48:7c:b1:e6:e9:2b:5e:
a9:05:29:74:72:d7:9b:27:9f:2b:71:79:7c:b7:1a:
a1:a0:e5:10:5e:fa:d9:7e:85:06:a7:a1:2f:20:f7:
57:81:a3:09:18:b9:d0:e3:6a:4a:a1:46:2a:16:24:
50:f9:2a:5d:80:cb:39:c2:f3:17:f3:0d:de:03:fd:
1d:68:f1:d5:0c:af:fe:90:ee:5e:02:34:d5:1b:f9:
08:c4:6c:42:01:58:79:c0:8f:c5:95:25:ee:6d:89:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:ED:C8:C9:DE:CF:B9:E5:4C:0B:6F:8E:FD:B8:0E:13:9D:2B:F4
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/wcntyMnez7nlTAtvjv24DhOdK_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.41.0/24
87.192.43.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e0:0d:55:99:2e:3d:21:9d:52:31:f9:f6:d3:c9:8f:4d:2f:
49:c8:36:b3:ad:94:c0:15:e3:77:21:d4:5e:c6:54:e7:de:23:
fd:20:a5:2f:84:6a:c6:69:62:91:d6:11:87:15:c6:ac:07:bf:
8f:ec:40:39:ed:4c:78:85:a3:c5:fb:0e:6a:19:5a:89:2f:92:
85:40:08:6e:19:86:22:1d:21:5f:a3:36:fc:a0:ed:72:5e:8b:
d7:cc:2c:11:70:6d:5c:54:53:0d:3c:31:93:f2:88:5b:36:d1:
61:b2:16:23:5a:81:09:ba:e7:72:d2:f5:ab:e7:f7:c2:79:fc:
e1:fe:16:28:45:43:e0:c6:08:b8:f5:9d:8f:83:fd:9b:3b:48:
bb:da:36:f2:c5:f8:e6:96:d7:5a:b7:27:90:28:2a:5e:70:c6:
9e:aa:b2:6b:00:7a:30:68:42:c0:75:cd:c7:d8:25:81:d4:05:
9d:6e:df:13:7a:6b:f8:32:0e:c1:58:65:9c:58:78:30:2a:60:
b2:81:10:79:a1:16:18:ae:a3:37:fa:7d:2d:26:09:a2:49:ad:
2d:b2:18:39:30:bb:89:40:24:e6:18:4a:5b:de:1c:d1:26:1c:
9b:10:70:6b:07:cf:be:2b:1f:ce:42:54:0e:d1:22:a8:cf:3c:
1d:5b:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:13 2026 by rpki-client