Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wyWO1hH87Tdo_Fp6nnQf27wFJiE.roa
File: wyWO1hH87Tdo_Fp6nnQf27wFJiE.roa (raw, json)
Hash identifier: zDsGnF6FTwmAclkO2W+014yRqsRfwhrQoUSisdzUC/E=
Subject key identifier: C3:25:8E:D6:11:FC:ED:37:68:FC:5A:7A:9E:74:1F:DB:BC:05:26:21
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E07A8687DDA025BBBB442EE59937ABA6F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wyWO1hH87Tdo_Fp6nnQf27wFJiE.roa
Signing time: Fri 08 May 2026 12:55:37 +0000
ROA not before: Fri 08 May 2026 12:55:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400906
IP address blocks: 89.213.44.0/24 maxlen: 24
213.130.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:a8:68:7d:da:02:5b:bb:b4:42:ee:59:93:7a:ba:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 12:55:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3258ed611fced3768fc5a7a9e741fdbbc052621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:88:16:8b:1c:93:80:e4:dc:a6:e7:b7:a4:
85:ff:d1:0e:3c:89:6b:37:65:d2:06:b3:98:65:9f:
09:b8:61:c9:7a:07:3d:51:68:2b:08:1d:4f:29:71:
2f:a8:f0:2f:fd:ff:39:23:62:7d:e9:87:32:74:ae:
2d:09:c1:c6:23:d4:75:5f:9f:78:37:16:83:a7:55:
f7:bb:ed:ab:70:e2:d0:29:67:81:3d:99:48:d8:95:
b6:3b:f5:51:1d:ab:ca:be:cb:a3:c9:7f:1e:b9:63:
ea:89:59:f9:59:29:44:b1:ae:97:b1:50:45:1b:8f:
93:f8:6b:35:8d:2a:5d:fb:50:70:76:4b:27:d3:11:
ad:c1:1e:49:73:20:65:fe:8d:9f:50:b8:3b:cc:49:
0d:db:1d:6c:65:e7:84:14:e4:ab:37:a3:6f:e0:82:
d3:f7:b7:b3:2f:d6:07:dc:74:68:e0:00:31:45:93:
66:0d:95:6f:c3:da:f1:a3:0e:da:57:29:5f:9e:88:
84:92:c8:fc:70:98:20:cc:ae:bb:fb:20:64:18:c8:
5c:68:1e:e0:38:bd:29:93:1a:af:bc:3f:8f:ed:29:
b8:32:6e:e4:8c:a5:6f:50:1d:02:58:6c:ae:f9:e1:
78:7f:52:c3:75:5f:40:78:bb:2c:2b:27:16:5b:2a:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:8E:D6:11:FC:ED:37:68:FC:5A:7A:9E:74:1F:DB:BC:05:26:21
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wyWO1hH87Tdo_Fp6nnQf27wFJiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.44.0/24
213.130.141.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fd:21:24:9e:f7:5a:a4:84:11:7e:a6:49:0d:7c:cb:ab:cb:
e9:7d:2b:87:e7:49:91:53:8f:be:99:e6:08:3b:6a:c1:72:c6:
a1:2c:da:5c:8a:d7:1a:71:c3:1b:d1:5a:cb:0a:d4:45:fe:72:
33:79:7d:3e:28:8a:46:7b:3f:7a:46:bb:24:3d:47:b0:09:2e:
cd:52:a8:e2:84:c3:cc:77:a7:72:cd:d1:b0:52:d4:0f:3b:ea:
b1:d9:47:ee:11:07:d3:73:98:ae:57:63:fc:bd:35:6b:c4:d9:
b2:f7:57:91:a0:dc:4a:2b:8c:ff:6b:24:8f:94:e0:5f:3a:2d:
e8:05:39:bc:ab:64:c2:26:bd:35:e0:e2:85:39:f8:a8:54:b6:
37:b1:95:1b:4c:e3:c4:3d:80:d3:3d:13:d0:75:c3:19:ad:12:
05:db:68:d4:b4:1b:d1:92:a7:f0:ce:79:8d:b5:96:96:5c:14:
23:0e:cb:ee:99:36:bd:d2:fe:d9:b8:0d:9c:a8:90:82:63:f2:
2e:6a:35:65:d1:b9:ea:7f:a9:df:ca:7b:b9:47:8b:94:48:c4:
61:ae:9c:bc:55:97:c7:47:40:5a:6d:82:02:27:8e:15:6c:3b:
08:fb:d5:11:19:9d:b1:b7:a0:00:c5:00:a0:0c:2f:f0:38:fc:
56:fe:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:04 2026 by rpki-client