Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/wROddSYepcKFBJuKhnhqKktwrhE.roa
File: wROddSYepcKFBJuKhnhqKktwrhE.roa (raw, json)
Hash identifier: ckFxFlRt9odYX8HCvzcnB7HwosCrL/n2CQ7qoo3Y57k=
Subject key identifier: C1:13:9D:75:26:1E:A5:C2:85:04:9B:8A:86:78:6A:2A:4B:70:AE:11
Certificate issuer: /CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Certificate serial: 019F667EAFC38A9206DD61C47D86C33F555F
Authority key identifier: 02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/wROddSYepcKFBJuKhnhqKktwrhE.roa
Signing time: Wed 15 Jul 2026 15:56:46 +0000
ROA not before: Wed 15 Jul 2026 15:56:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204658
IP address blocks: 194.117.66.0/24 maxlen: 24
2a0e:d040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:7e:af:c3:8a:92:06:dd:61:c4:7d:86:c3:3f:55:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Validity
Not Before: Jul 15 15:56:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1139d75261ea5c285049b8a86786a2a4b70ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:f9:e3:c1:69:50:f6:a3:85:72:c4:60:a6:
8c:0d:10:4d:01:2d:bc:72:e8:de:cf:75:6c:36:3c:
cf:f4:f0:cd:9e:a8:f5:ab:3f:ab:b0:40:d3:d5:61:
06:f5:42:f9:a4:4f:f5:df:ef:75:5d:63:18:00:f6:
8d:e7:3d:db:74:82:27:86:5d:e8:96:fb:98:f4:bb:
90:d2:0b:07:cf:88:66:47:ce:91:39:0e:35:d4:a8:
11:99:c4:d4:74:e8:15:05:ab:b6:ce:14:90:a7:78:
b2:b8:da:cd:93:94:61:3c:30:f1:45:14:39:aa:0f:
91:e5:fe:22:a5:d2:88:a1:12:b7:06:20:d1:f3:b6:
9e:00:bb:ed:b6:f6:7e:cc:a0:74:37:59:5a:d9:37:
3a:bf:9b:22:99:17:59:46:d6:db:85:30:db:5e:fe:
30:0f:df:07:ad:e1:ae:d5:04:31:fc:a1:72:2c:26:
88:eb:22:a5:7a:c7:b6:b6:de:2a:ff:c4:67:28:ac:
6f:47:2b:ee:56:e5:6d:38:d5:a8:5f:bf:4a:dc:c7:
09:cb:f3:77:b6:1a:d6:eb:a6:40:4d:25:2a:25:fa:
82:ec:74:03:20:95:b1:8c:7a:dd:65:0d:55:9a:83:
06:bd:56:b6:8b:47:ac:74:2a:95:f0:ff:ab:73:6f:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:9D:75:26:1E:A5:C2:85:04:9B:8A:86:78:6A:2A:4B:70:AE:11
X509v3 Authority Key Identifier:
keyid:02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/wROddSYepcKFBJuKhnhqKktwrhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.66.0/24
IPv6:
2a0e:d040::/32
Signature Algorithm: sha256WithRSAEncryption
10:65:2c:04:dd:ac:7d:90:26:61:2c:47:d4:fe:fc:57:dd:f6:
b9:12:9a:8a:e5:40:fa:47:b3:26:ec:4c:26:74:69:4c:4c:15:
3f:2d:f6:25:bd:c2:ef:e4:fe:98:53:4e:94:ff:fd:a9:b5:e6:
59:ad:b4:3b:31:9c:73:f6:4b:2f:9a:61:0a:0f:c8:34:7f:37:
8c:3b:ae:0a:c9:0c:3f:9e:d5:86:98:05:9d:4c:42:32:78:4f:
30:58:66:eb:1f:18:6c:4a:53:20:50:54:76:d0:48:0b:b4:8f:
31:a7:38:a9:68:9e:cd:58:8f:93:bb:f0:68:d3:2e:94:16:a8:
50:bf:a9:46:33:9a:fc:07:71:dd:74:b9:a0:a3:7d:6f:78:9b:
77:12:ab:a7:82:05:ac:44:56:ca:88:dd:04:65:48:b8:dd:66:
ca:0c:64:ba:03:d8:84:cd:2d:1d:ba:69:72:3d:9a:79:68:06:
f0:62:4d:10:4c:04:35:a9:04:a5:31:94:1f:0c:43:68:45:74:
ca:c8:ae:59:48:f4:af:cb:48:18:4d:5b:c0:de:50:0a:39:fa:
f6:aa:03:91:ad:a0:f6:60:72:ee:0a:65:1e:1d:cb:b8:3b:e9:
2a:34:c9:0d:e8:0a:40:37:6b:45:44:1f:6d:18:f7:85:85:dd:
3f:52:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:36 2026 by rpki-client