Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wRIUyDywQ3L21jVxKnp_PZogDKU.roa
File: wRIUyDywQ3L21jVxKnp_PZogDKU.roa (raw, json)
Hash identifier: MLN6QnZWSSpm7e4w7RYCsxIAn3rL949pXSKMnupLeB0=
Subject key identifier: C1:12:14:C8:3C:B0:43:72:F6:D6:35:71:2A:7A:7F:3D:9A:20:0C:A5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BCFA7FFD465980B78F867C63B23B5DC9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wRIUyDywQ3L21jVxKnp_PZogDKU.roa
Signing time: Sun 20 Sep 2026 04:02:08 +0000
ROA not before: Sun 20 Sep 2026 04:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10648
IP address blocks: 194.242.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:fa:7f:fd:46:59:80:b7:8f:86:7c:63:b2:3b:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 04:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c11214c83cb04372f6d635712a7a7f3d9a200ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:12:58:fa:51:51:38:2e:93:8a:72:87:7b:33:
3e:bb:82:88:b0:64:8e:43:49:a3:b4:a1:c2:a8:94:
68:87:4f:52:76:9f:8e:84:ca:d4:b2:10:33:e7:4f:
f2:a8:db:51:11:16:f8:5f:e0:af:6a:88:85:62:ff:
6c:42:cb:76:ea:88:b4:3b:0e:f7:fd:d3:c8:e1:0b:
cb:41:5e:37:c2:45:9c:52:05:f3:de:30:4e:6b:27:
bf:d3:e7:33:37:65:bd:ae:7b:ed:0b:37:38:ec:a8:
dd:ba:58:52:91:e5:51:01:7d:16:5b:23:3f:17:ff:
b7:6e:06:61:9e:b6:7b:2e:f1:5e:03:1a:34:73:c9:
8e:27:25:af:0d:1d:f4:5c:ef:dd:da:4b:23:64:89:
be:79:c3:5f:a6:dc:ff:e7:aa:af:94:d2:79:7c:3e:
35:96:77:ba:39:e3:cd:cf:a3:86:15:21:09:78:ba:
1a:a5:0f:b7:70:6f:17:79:04:3d:8c:00:eb:df:81:
0f:bc:20:8a:17:3a:8b:1d:a9:43:af:0f:59:af:6c:
62:9d:c2:7b:32:79:b3:bb:14:ac:19:8e:d7:13:9a:
69:bb:22:a0:f9:c3:cf:d5:cf:da:62:05:ce:4b:0b:
15:6a:3d:2f:b1:56:71:a5:52:45:18:1a:7d:b3:08:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:14:C8:3C:B0:43:72:F6:D6:35:71:2A:7A:7F:3D:9A:20:0C:A5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/wRIUyDywQ3L21jVxKnp_PZogDKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d1:98:b3:ca:f1:8a:b8:4a:84:3e:45:17:45:c1:53:43:00:
8a:4c:80:6f:8b:5a:1e:6d:cc:6a:11:cd:96:38:53:e0:f0:79:
8e:ec:06:38:7c:f1:d5:07:6f:c2:80:07:33:71:25:df:4b:fa:
00:18:af:cf:b8:1d:12:05:55:b8:70:55:d1:04:a3:3b:6a:c8:
a6:92:f3:57:5c:fc:83:bf:0a:7c:ef:ed:80:43:15:24:35:9c:
50:f0:b9:84:96:e1:6e:75:8e:9d:e2:be:ba:24:b3:72:79:d8:
e3:7d:4c:27:de:16:b5:5e:65:74:ae:36:92:49:59:24:c6:c8:
7a:25:88:b8:e1:db:b4:e3:ec:65:24:7c:ea:04:b7:c5:06:72:
be:27:69:9e:40:8c:37:49:23:8a:60:1e:f7:03:a2:62:8b:42:
a4:80:d2:14:68:8b:0b:a3:83:e0:d1:dd:28:66:26:d4:16:9a:
98:f0:5d:a8:00:c1:b9:8a:5f:11:46:38:54:40:79:a4:fc:ee:
2d:43:9c:3b:3d:df:16:3b:a9:c5:ce:6b:ec:bf:3e:2e:ea:8c:
15:fe:50:65:22:1b:d8:0a:69:70:93:32:c1:6d:16:e0:97:89:
63:0b:7c:76:20:74:57:15:8c:c6:b5:cd:1b:1b:02:d5:74:72:
fd:4b:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:46 2026 by rpki-client