Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/_LQzxlrRmDEN-d0nxm5QHB_MNXY.roa
File: _LQzxlrRmDEN-d0nxm5QHB_MNXY.roa (raw, json)
Hash identifier: WctZkpQwj45WPknmIlqorLN6ZwJ3NQRmnHufqVoXY/c=
Subject key identifier: FC:B4:33:C6:5A:D1:98:31:0D:F9:DD:27:C6:6E:50:1C:1F:CC:35:76
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01A162AA8EB6D24A1D0F47790B77EC96AB07
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/_LQzxlrRmDEN-d0nxm5QHB_MNXY.roa
Signing time: Thu 22 Oct 2026 08:11:47 +0000
ROA not before: Thu 22 Oct 2026 08:11:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.119.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:aa:8e:b6:d2:4a:1d:0f:47:79:0b:77:ec:96:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Oct 22 08:11:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcb433c65ad198310df9dd27c66e501c1fcc3576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:d8:86:51:da:d0:ff:20:3a:df:64:6e:5e:
f8:71:a9:cc:87:e9:00:f3:d5:45:08:99:cb:e3:de:
ea:e7:94:73:b8:b5:eb:8e:05:af:e6:ca:75:72:1f:
9b:bb:57:aa:e9:0f:00:a3:02:99:1d:fc:6b:43:fb:
74:39:4d:f7:49:ab:c6:2a:9d:23:ee:7e:17:c0:48:
88:0d:b8:56:64:9a:06:41:6f:58:a5:21:b7:b2:59:
78:24:96:87:0f:1b:bc:cd:ed:c9:03:0a:e3:8f:a7:
ea:42:5e:5f:91:89:bd:66:8f:1a:96:89:11:a4:06:
dc:43:3f:fe:23:2e:35:5a:0d:4a:ab:3a:f8:58:45:
50:7d:04:fa:97:c1:31:c4:1d:89:eb:a8:cc:49:0f:
7f:10:9a:3d:9d:49:f3:e9:85:29:a6:53:93:52:5b:
ec:ce:3c:88:00:1c:f0:de:f0:9d:15:ff:05:2b:30:
18:4c:22:6c:5a:7a:52:b3:f2:ff:5a:fa:b1:0c:92:
b3:d1:9f:9d:db:b5:66:e4:4c:28:50:aa:cd:26:d8:
7c:56:1d:a4:1a:94:87:c5:d3:23:f5:16:20:ce:16:
e5:6c:48:6a:ce:19:09:d2:da:71:6c:ce:f5:6d:56:
b6:eb:ef:d1:48:ca:98:d6:91:c1:0c:72:c3:42:bb:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:33:C6:5A:D1:98:31:0D:F9:DD:27:C6:6E:50:1C:1F:CC:35:76
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/_LQzxlrRmDEN-d0nxm5QHB_MNXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.204.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4b:62:24:71:82:92:3b:a8:df:c5:a3:9a:10:2c:b9:db:25:
eb:32:9d:df:ac:49:5e:40:05:d3:dc:fd:24:97:84:b6:8b:17:
81:8c:ad:c6:86:e2:63:f4:3e:da:4d:3b:b4:29:e5:47:0d:f5:
89:b6:3e:29:79:5b:fa:39:55:25:cd:09:5c:dc:5f:e2:e1:66:
ae:a5:66:6a:2c:e1:a4:73:91:27:93:c7:41:ad:63:d5:1d:57:
48:5c:c3:c7:22:89:23:75:3e:b0:91:56:6e:db:ac:2a:d6:1c:
21:59:a4:5a:ba:38:73:1f:bd:2d:34:d7:ef:fc:74:e7:fd:47:
6c:30:72:1a:f1:f2:19:a8:08:0e:ec:57:ad:79:8c:de:0a:5a:
ef:1d:34:5c:ac:51:07:54:aa:9a:dc:8f:e0:61:46:83:ff:f4:
4f:eb:de:b2:0e:b3:03:5e:e6:c8:01:6a:76:16:fb:dd:bb:6b:
45:4c:b0:56:e4:90:4d:86:e2:fc:16:6a:b8:cb:a2:2f:e4:d5:
b3:72:dc:4b:57:eb:0e:e4:ca:ad:74:9c:ba:20:33:0a:65:10:
c6:87:e9:be:2a:71:d6:3d:8e:33:1c:0c:97:33:16:3e:29:a4:
9a:61:8c:c7:db:38:05:74:53:8d:f5:44:db:e2:a9:f9:5f:91:
05:99:28:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFiqo620kodD0d5C3fslqsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjYxMDIyMDgxMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2I0MzNjNjVhZDE5ODMxMGRmOWRkMjdjNjZlNTAxYzFmY2MzNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvjYhlHa0P8gOt9kbl74canMh+kA
89VFCJnL497q55RzuLXrjgWv5sp1ch+bu1eq6Q8AowKZHfxrQ/t0OU33SavGKp0j
7n4XwEiIDbhWZJoGQW9YpSG3sll4JJaHDxu8ze3JAwrjj6fqQl5fkYm9Zo8alokR
pAbcQz/+Iy41Wg1Kqzr4WEVQfQT6l8ExxB2J66jMSQ9/EJo9nUnz6YUpplOTUlvs
zjyIABzw3vCdFf8FKzAYTCJsWnpSs/L/WvqxDJKz0Z+d27Vm5EwoUKrNJth8Vh2k
GpSHxdMj9RYgzhblbEhqzhkJ0tpxbM71bVa26+/RSMqY1pHBDHLDQrt3bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPy0M8Za0ZgxDfndJ8ZuUBwfzDV2MB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvX0xRenhsclJtREVOLWQwbnhtNVFIQl9NTlhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnfMMA0G
CSqGSIb3DQEBCwUAA4IBAQCDS2IkcYKSO6jfxaOaECy52yXrMp3frEleQAXT3P0k
l4S2ixeBjK3GhuJj9D7aTTu0KeVHDfWJtj4peVv6OVUlzQlc3F/i4WaupWZqLOGk
c5Enk8dBrWPVHVdIXMPHIokjdT6wkVZu26wq1hwhWaRaujhzH70tNNfv/HTn/Uds
MHIa8fIZqAgO7FeteYzeClrvHTRcrFEHVKqa3I/gYUaD//RP696yDrMDXubIAWp2
Fvvdu2tFTLBW5JBNhuL8Fmq4y6Iv5NWzctxLV+sO5MqtdJy6IDMKZRDGh+m+KnHW
PY4zHAyXMxY+KaSaYYzH2zgFdFON9UTb4qn5X5EFmSj2
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:30:09 2026 by rpki-client