Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wadeX-F2I99mEGO6d_w9gq9nH5Y.roa
File: wadeX-F2I99mEGO6d_w9gq9nH5Y.roa (raw, json)
Hash identifier: mnokHfbjiiRcITK+v4GEOmbhwoEWMg18u/UjpnQz84k=
Subject key identifier: C1:A7:5E:5F:E1:76:23:DF:66:10:63:BA:77:FC:3D:82:AF:67:1F:96
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019D1645DB7522861E7FE7C8BFA2399F52DA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wadeX-F2I99mEGO6d_w9gq9nH5Y.roa
Signing time: Sun 22 Mar 2026 15:59:30 +0000
ROA not before: Sun 22 Mar 2026 15:59:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:1522::/48 maxlen: 48
2a12:bec4:152c::/48 maxlen: 48
2a12:bec4:152d::/48 maxlen: 48
2a12:bec4:152e::/48 maxlen: 48
2a12:bec4:152f::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
2a12:bec4:1654::/48 maxlen: 48
2a12:bec4:1655::/48 maxlen: 48
2a12:bec4:1656::/48 maxlen: 48
2a12:bec4:1657::/48 maxlen: 48
2a12:bec4:1658::/48 maxlen: 48
2a12:bec4:1659::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:16:45:db:75:22:86:1e:7f:e7:c8:bf:a2:39:9f:52:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 22 15:59:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1a75e5fe17623df661063ba77fc3d82af671f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:ee:37:8a:72:34:3b:b3:bb:9d:b8:e1:66:
99:77:26:de:f0:ed:bf:f0:8a:1d:73:a3:44:56:b3:
75:37:ac:87:04:9b:e7:0b:4d:82:e8:ca:b8:6a:7c:
a6:d6:57:5c:96:70:d1:57:33:61:3f:99:75:d3:30:
0d:94:d2:c3:85:b6:6b:58:31:8b:33:95:bc:0a:73:
fc:5d:20:0f:95:c8:15:fd:6e:cc:5b:5b:4b:33:8b:
7a:c5:df:35:09:43:54:a6:fe:99:eb:38:ea:ff:ff:
8b:ad:9f:6c:63:80:45:88:f2:cf:e4:19:e9:34:bf:
24:5c:7e:97:20:81:2f:0d:0a:d0:3c:70:6d:af:2b:
ee:82:df:d0:41:08:6d:a6:cb:00:9c:dd:8c:84:bd:
72:07:9d:ab:7c:ee:61:57:40:8c:02:16:83:19:4b:
e3:24:6d:7c:94:de:14:56:c5:47:dd:93:7f:6b:20:
7f:2c:2e:6a:13:af:ea:8e:5f:ad:9f:04:0e:f7:8b:
57:5c:19:d0:ef:b1:f3:3c:8f:2e:90:7f:e7:08:6a:
20:06:a1:2f:3d:45:13:b9:17:68:ea:e1:95:0a:ba:
ce:60:db:e3:f3:43:5f:0b:4b:a6:13:c2:ac:74:bf:
e4:a7:e8:55:be:8e:ae:87:07:5c:54:6b:ba:80:a0:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:5E:5F:E1:76:23:DF:66:10:63:BA:77:FC:3D:82:AF:67:1F:96
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wadeX-F2I99mEGO6d_w9gq9nH5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::-2a12:bec4:1522:ffff:ffff:ffff:ffff:ffff
2a12:bec4:152c::/46
2a12:bec4:1651::-2a12:bec4:1659:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:bf:18:e0:de:72:8c:5d:fe:a4:91:6b:e0:72:09:07:47:e5:
d2:16:ba:49:fb:e9:fa:92:0b:52:45:75:44:2e:c7:51:b2:6a:
28:38:2d:1f:33:e9:a5:61:c1:48:7d:43:14:16:96:10:86:81:
ac:24:80:27:d8:53:b2:26:bd:fb:02:31:bb:f6:be:f9:2a:1d:
2e:cc:de:7a:d7:3e:e8:29:35:38:58:3f:ab:41:1f:98:b0:d1:
f5:50:7d:39:70:9c:85:c9:03:cd:9b:87:05:10:d5:49:81:9e:
d1:98:1f:c6:41:96:79:a9:ca:b4:28:a8:21:d1:11:bf:65:47:
57:a6:d1:0c:e0:00:3c:a8:cc:77:95:ec:39:53:76:3a:6b:9b:
d7:18:8c:b3:f3:e2:43:46:c0:55:99:a7:83:2f:ba:6b:94:c8:
36:ed:a9:fc:e9:4d:90:28:82:88:f4:88:76:63:70:31:50:15:
f6:67:47:95:a3:88:67:e4:ea:a0:cb:54:1a:4a:74:33:3a:77:
bd:3e:a6:17:b2:71:99:86:09:02:6f:56:c0:34:00:f4:4d:20:
58:0f:29:72:45:53:3b:a6:ff:8a:c9:01:98:ab:75:39:fb:0a:
77:0d:58:e3:cf:b0:90:ed:f1:14:0d:be:9d:08:cc:03:e5:cf:
d1:9e:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:47 2026 by rpki-client