Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/wUc5dQVNNY1NZa0kU5Y7Q1ZEyvI.roa
File: wUc5dQVNNY1NZa0kU5Y7Q1ZEyvI.roa (raw, json)
Hash identifier: v6P1qSCtM+aVcvzdQhO3Be1sx2N8PcPAMK1z4RGnilg=
Subject key identifier: C1:47:39:75:05:4D:35:8D:4D:65:AD:24:53:96:3B:43:56:44:CA:F2
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01A0DE59120448D7C3D3E26FA7E5A0036A82
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/wUc5dQVNNY1NZa0kU5Y7Q1ZEyvI.roa
Signing time: Sat 26 Sep 2026 15:32:54 +0000
ROA not before: Sat 26 Sep 2026 15:32:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43298
IP address blocks: 160.79.121.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
2a06:a180:20::/48 maxlen: 48
2a06:a180:21::/48 maxlen: 48
2a06:a180:22::/48 maxlen: 48
2a06:a180:23::/48 maxlen: 48
2a06:a180:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:59:12:04:48:d7:c3:d3:e2:6f:a7:e5:a0:03:6a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Sep 26 15:32:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1473975054d358d4d65ad2453963b435644caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:b5:20:7b:82:12:fe:e7:a3:b6:9a:41:b0:
bc:b8:cb:d9:1c:06:7b:b3:c2:a7:57:b6:a2:8f:6b:
35:d5:b2:0a:33:81:3c:49:29:ad:fd:20:d3:6c:fe:
51:7e:fc:c7:2f:6f:ff:05:3c:aa:c3:25:50:ca:d3:
0a:ce:f2:75:57:c9:a3:16:8e:b1:16:3c:8e:74:d9:
d9:3a:81:b2:88:13:20:9e:3b:b0:cb:2f:ae:0e:de:
6b:70:92:8d:fd:74:dc:8c:22:bc:7c:a1:8b:f1:4d:
20:12:73:49:f6:3b:cb:22:7d:de:5e:b9:95:98:8e:
a8:c6:c6:5b:c4:e2:58:a1:ef:44:df:b7:9b:b6:67:
d6:e9:e3:3d:a1:bb:b0:ad:c6:2a:70:a5:9d:28:e8:
bd:26:c7:78:4c:1d:36:7f:4e:8c:58:a4:5f:fb:1f:
fe:42:05:38:81:fc:08:ad:10:db:23:b3:8a:ae:63:
27:e3:58:ce:c1:a6:0e:a3:50:fa:ba:4a:72:53:64:
cb:8b:28:a3:98:ef:9c:8d:d9:ef:ae:a1:bd:e4:f6:
50:63:b4:07:c2:3c:65:ca:a8:84:62:96:91:87:0d:
3f:cb:3e:15:2b:69:a7:f2:07:9e:f2:11:6b:19:13:
09:af:02:ae:ee:1d:23:20:f9:fe:05:a9:e7:f2:80:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:39:75:05:4D:35:8D:4D:65:AD:24:53:96:3B:43:56:44:CA:F2
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/wUc5dQVNNY1NZa0kU5Y7Q1ZEyvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.79.121.0/24
185.121.243.0/24
IPv6:
2a06:a180:20::/46
2a06:a180:90::/48
Signature Algorithm: sha256WithRSAEncryption
39:bd:a7:2f:f4:4c:9a:e5:ff:22:82:78:3b:de:8e:dd:5e:38:
8c:df:bf:70:93:70:bf:5a:54:a9:cf:4a:ce:d8:26:cb:f4:81:
65:95:69:47:d7:9b:88:8e:e9:89:03:de:82:7c:35:7d:57:ae:
70:30:17:9d:7a:08:7e:9f:08:9b:c5:ab:18:b4:25:20:34:34:
eb:52:11:5a:18:d9:48:97:96:3d:46:4c:c2:e2:91:b8:d7:1d:
eb:6a:62:78:b6:fb:83:4f:bc:27:0b:4d:31:b6:99:24:89:f4:
1d:f7:75:49:4a:4c:68:d2:59:61:c4:f4:4d:86:1e:31:21:f7:
97:a0:26:61:7f:98:27:08:bb:28:59:21:1b:5e:d5:56:48:d7:
70:b2:4e:80:7a:21:c1:1c:27:9c:12:c8:d9:75:31:92:71:d0:
8e:d5:30:cf:bb:0b:7b:7a:37:d9:22:8b:3a:ca:55:56:60:95:
27:15:d7:f6:bb:32:dd:fd:a4:24:ec:81:de:84:1e:26:b7:34:
09:99:6b:c5:7a:7b:61:ff:ae:18:f1:4c:0b:ba:49:6b:de:45:
2a:7e:60:d1:1a:7b:ac:d8:45:45:c3:4c:8e:53:86:62:e7:60:
7e:ff:fe:74:01:a8:b9:2f:fd:e9:a2:88:48:c7:bf:3c:97:58:
4a:b6:47:d9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaDeWRIESNfD0+Jvp+WgA2qCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjYwOTI2MTUzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ3Mzk3NTA1NGQzNThkNGQ2NWFkMjQ1Mzk2M2I0MzU2NDRjYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ci1IHuCEv7no7aaQbC8uMvZHAZ7
s8KnV7aij2s11bIKM4E8SSmt/SDTbP5RfvzHL2//BTyqwyVQytMKzvJ1V8mjFo6x
FjyOdNnZOoGyiBMgnjuwyy+uDt5rcJKN/XTcjCK8fKGL8U0gEnNJ9jvLIn3eXrmV
mI6oxsZbxOJYoe9E37ebtmfW6eM9obuwrcYqcKWdKOi9Jsd4TB02f06MWKRf+x/+
QgU4gfwIrRDbI7OKrmMn41jOwaYOo1D6ukpyU2TLiyijmO+cjdnvrqG95PZQY7QH
wjxlyqiEYpaRhw0/yz4VK2mn8gee8hFrGRMJrwKu7h0jIPn+Bann8oBNIwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFMFHOXUFTTWNTWWtJFOWO0NWRMryMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvd1VjNWRRVk5OWTFOWmEwa1U1WTdRMVpFeXZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAoE95AwQA
uXnzMBgEAgACMBIDBwIqBqGAACADBwAqBqGAAJAwDQYJKoZIhvcNAQELBQADggEB
ADm9py/0TJrl/yKCeDvejt1eOIzfv3CTcL9aVKnPSs7YJsv0gWWVaUfXm4iO6YkD
3oJ8NX1XrnAwF516CH6fCJvFqxi0JSA0NOtSEVoY2UiXlj1GTMLikbjXHetqYni2
+4NPvCcLTTG2mSSJ9B33dUlKTGjSWWHE9E2GHjEh95egJmF/mCcIuyhZIRte1VZI
13CyToB6IcEcJ5wSyNl1MZJx0I7VMM+7C3t6N9kiizrKVVZglScV1/a7Mt39pCTs
gd6EHia3NAmZa8V6e2H/rhjxTAu6SWveRSp+YNEae6zYRUXDTI5ThmLnYH7//nQB
qLkv/emiiEjHvzyXWEq2R9k=
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:46 2026 by rpki-client