Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/wmIDjaUqAzOkUtPGRhTrdvK1B2k.roa
File: wmIDjaUqAzOkUtPGRhTrdvK1B2k.roa (raw, json)
Hash identifier: GSUxNL88jY/5aT9eTR0bP0aDxENw2VkPtEVUwkktU5A=
Subject key identifier: C2:62:03:8D:A5:2A:03:33:A4:52:D3:C6:46:14:EB:76:F2:B5:07:69
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019C5690C0DE9AF03EBAB9F18F10685D3305
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/wmIDjaUqAzOkUtPGRhTrdvK1B2k.roa
Signing time: Fri 13 Feb 2026 10:34:13 +0000
ROA not before: Fri 13 Feb 2026 10:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212319
IP address blocks: 88.218.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:90:c0:de:9a:f0:3e:ba:b9:f1:8f:10:68:5d:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Feb 13 10:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c262038da52a0333a452d3c64614eb76f2b50769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:8b:d2:26:11:09:b0:52:fc:da:b6:5c:d0:
4b:f6:7d:44:80:3c:b7:c9:f3:7f:4e:ab:4f:0c:39:
cb:96:77:38:f9:68:8c:9f:d3:39:9c:01:fc:65:70:
93:6e:1b:ab:57:3c:1a:f0:6a:fb:f6:d8:8e:eb:bd:
79:71:d3:b4:2c:11:e0:65:6e:3c:58:13:55:a2:74:
a1:d5:2c:02:db:17:d9:ca:fa:04:99:2b:db:6b:21:
8d:b3:7a:96:c9:f7:95:de:b5:3f:b4:54:66:51:c1:
ef:26:a1:83:64:32:bb:6d:63:e8:4d:8c:27:a2:6b:
7c:7b:23:2d:a2:ed:2b:50:2b:62:34:bd:e2:35:c0:
88:22:4c:8d:2b:7c:86:5b:49:89:d9:b3:0d:ed:2c:
e3:7b:a8:cf:ee:74:71:ed:10:f9:c2:6d:64:34:a9:
8b:95:aa:20:05:79:ae:fc:a3:b6:d6:21:24:d6:10:
f5:ea:fc:e6:4f:6f:13:7e:e4:a8:14:3b:4c:6a:fd:
02:97:da:1f:be:51:7b:c1:47:07:3d:ef:26:23:7e:
5b:6b:10:18:21:a5:b8:77:68:d7:ec:35:40:6b:e3:
10:2a:63:d3:97:39:3e:92:8c:54:d8:57:7d:d0:a5:
59:f0:70:8a:a1:4b:0c:94:c9:01:70:d1:7b:dd:e7:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:03:8D:A5:2A:03:33:A4:52:D3:C6:46:14:EB:76:F2:B5:07:69
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/wmIDjaUqAzOkUtPGRhTrdvK1B2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:96:cf:80:83:71:93:5a:d3:55:32:71:65:54:ba:b2:71:7f:
12:da:76:48:f9:86:68:a0:89:79:a4:18:21:0d:8f:dd:21:5a:
75:f9:a8:b5:4a:54:ce:f8:45:68:17:9e:63:9a:dd:4d:1b:39:
56:0c:59:12:7a:3b:40:99:c2:d0:66:10:d3:c7:1a:f2:11:e8:
69:cf:dd:3d:21:18:02:78:82:40:b3:cf:f3:07:53:c2:07:10:
1b:43:d4:74:be:f5:0a:de:4d:f2:45:51:cc:1b:7a:3a:a7:94:
25:00:61:83:2a:6e:a0:da:a6:92:53:06:15:ad:50:74:c5:bd:
20:73:b6:72:b2:02:cd:9f:46:7b:cc:0b:bf:f6:68:f7:76:b6:
04:f5:cd:1f:d7:99:e9:98:8c:f5:84:fc:38:42:c7:53:48:46:
a0:59:21:ec:6e:87:5d:78:cf:53:9b:a1:a1:36:7c:50:9c:e2:
46:40:cd:cf:f0:64:05:0f:18:a2:3e:3b:45:fd:d7:61:25:dd:
e6:be:8b:5d:06:54:9b:75:56:79:58:b1:76:cf:1b:4d:1d:d5:
c8:be:2f:af:dd:74:5f:bd:3f:cd:23:b7:43:da:35:cb:90:0e:
60:c8:c7:11:80:b6:c7:73:28:3d:64:da:dd:46:a6:c9:3e:aa:
49:7b:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:00 2026 by rpki-client