Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/wgJ0Arr0ILmoaNFHS-jGVL_SEvU.roa
File: wgJ0Arr0ILmoaNFHS-jGVL_SEvU.roa (raw, json)
Hash identifier: JpOFbg9uvUeynBitUfEZcA9dTTd8uQ9pZ9XVWYs1DMg=
Subject key identifier: C2:02:74:02:BA:F4:20:B9:A8:68:D1:47:4B:E8:C6:54:BF:D2:12:F5
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A0D7C73FF798EB8CB47726A2EA4DE8C71A
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/wgJ0Arr0ILmoaNFHS-jGVL_SEvU.roa
Signing time: Fri 25 Sep 2026 08:55:54 +0000
ROA not before: Fri 25 Sep 2026 08:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214798
IP address blocks: 150.237.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:c7:3f:f7:98:eb:8c:b4:77:26:a2:ea:4d:e8:c7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Sep 25 08:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2027402baf420b9a868d1474be8c654bfd212f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:b1:dc:fe:49:8b:8c:16:4a:9e:a1:98:06:
b2:e7:32:3e:99:5d:a0:36:23:2f:1c:34:2a:53:0f:
7f:3b:26:e8:27:49:d8:39:51:df:78:e6:3f:12:0a:
4b:28:d0:62:41:b4:4f:63:58:38:4a:df:82:17:f6:
9b:99:56:90:8d:f7:d9:29:2e:43:6b:8a:58:49:6c:
8b:28:4d:e6:a1:73:42:9f:95:4a:f2:e8:25:27:3e:
63:76:33:ff:fc:cc:67:5d:a9:c1:9e:71:9c:e0:1a:
00:33:e9:ae:9c:35:25:a7:73:e7:24:f5:fa:bc:03:
a3:e9:56:1b:01:68:25:e5:30:fb:14:da:9a:3a:bc:
a4:96:8a:8c:19:a8:65:32:81:e7:76:1a:0c:fc:c2:
6e:fe:34:a1:ab:32:1d:09:f2:b7:4f:2c:ba:ee:ea:
08:d2:28:c7:f9:ba:a2:c4:c8:65:0c:69:e1:9c:c9:
f4:27:42:49:a2:91:8d:96:e7:15:3f:6c:60:fd:3e:
bd:99:58:9f:7c:2d:ad:3f:7d:88:f8:27:54:1f:86:
65:7c:b9:88:51:9b:e6:87:1b:11:bd:83:93:c9:c3:
99:72:00:88:0e:ff:90:bf:a5:fb:8f:ba:ff:b7:f3:
16:d4:e7:c6:c8:d1:2c:49:38:c4:9a:14:d0:55:ca:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:74:02:BA:F4:20:B9:A8:68:D1:47:4B:E8:C6:54:BF:D2:12:F5
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/wgJ0Arr0ILmoaNFHS-jGVL_SEvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.237.76.0/24
Signature Algorithm: sha256WithRSAEncryption
15:56:86:c6:37:9a:95:f7:6b:6f:40:76:af:42:c5:6e:3d:a3:
cd:41:e8:9c:71:1e:d2:19:16:23:0a:b3:26:b7:c0:cb:79:1a:
b1:22:1c:ab:59:69:9a:55:f4:b2:5e:7f:bf:62:1e:e9:52:79:
ee:4e:82:19:35:c0:7f:09:f5:33:3c:73:14:42:86:16:60:58:
01:27:94:f8:72:dc:61:13:15:4c:d0:1c:f9:db:bc:cb:60:a3:
5c:6c:a7:63:d5:d2:0a:4b:2e:93:7b:3e:5f:1b:ba:e0:89:24:
03:0c:38:09:de:90:bb:64:15:a4:a6:5c:f6:78:0e:99:7c:67:
a7:3b:6a:c4:25:0e:00:ce:f8:a7:53:16:d8:b9:74:5e:a5:f0:
44:38:0b:70:b9:a5:84:e1:22:8f:1f:41:6a:7f:8d:40:c3:dc:
03:64:0e:51:09:88:3c:80:12:d5:da:74:1e:6c:e4:27:4a:fd:
47:58:c6:82:29:89:3f:8d:f6:ec:5e:ac:82:5e:20:a7:56:13:
00:14:9c:cf:50:f2:b5:37:de:e0:8f:52:d5:0d:18:cc:8a:dd:
3a:c4:d3:5c:71:2d:79:d5:22:8b:10:56:29:50:8f:75:e9:79:
e6:1c:4a:44:27:f1:ce:38:00:b4:ae:40:03:d7:0f:9a:4d:eb:
ef:89:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:37 2026 by rpki-client