Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wu03jRw-4d3nWyMULkQ6WCe9FHw.roa
File: wu03jRw-4d3nWyMULkQ6WCe9FHw.roa (raw, json)
Hash identifier: P4OCNjSwAvnYW+b262xZzSPjUNUABhQ3spYzSnfJ2wE=
Subject key identifier: C2:ED:37:8D:1C:3E:E1:DD:E7:5B:23:14:2E:44:3A:58:27:BD:14:7C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A1738C7103CB8A5BC9FB2324E635FEA98D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wu03jRw-4d3nWyMULkQ6WCe9FHw.roa
Signing time: Sun 25 Oct 2026 14:52:26 +0000
ROA not before: Sun 25 Oct 2026 14:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 77.76.4.0/22 maxlen: 22
78.128.41.0/24 maxlen: 24
78.128.86.0/23 maxlen: 23
78.128.88.0/22 maxlen: 22
78.128.97.0/24 maxlen: 24
78.128.100.0/22 maxlen: 22
78.128.116.0/23 maxlen: 23
78.142.31.0/24 maxlen: 24
84.201.224.0/20 maxlen: 20
91.148.162.0/23 maxlen: 23
91.148.164.0/23 maxlen: 23
91.148.169.0/24 maxlen: 24
91.148.170.0/23 maxlen: 23
91.148.172.0/22 maxlen: 22
130.185.227.0/24 maxlen: 24
130.185.234.0/24 maxlen: 24
185.81.120.0/24 maxlen: 24
193.24.240.0/22 maxlen: 22
193.200.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:8c:71:03:cb:8a:5b:c9:fb:23:24:e6:35:fe:a9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 25 14:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2ed378d1c3ee1dde75b23142e443a5827bd147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:77:58:15:34:30:c5:b4:e8:1a:18:2a:bb:
88:f1:13:cc:e6:fd:2e:40:0b:ff:6b:14:23:99:c0:
95:0e:50:33:f3:90:dc:0c:ef:15:69:df:b0:3d:c0:
b0:ba:cd:de:bb:cb:02:d5:7b:2d:4e:ed:c7:ec:21:
c9:fc:69:0b:97:4f:90:0c:ea:ab:6e:34:aa:4a:40:
42:ed:38:93:af:93:03:7e:22:cc:03:4a:a6:55:57:
c4:31:3b:a2:e6:59:0d:36:8e:24:8d:fd:69:1b:da:
11:a9:13:1a:9f:02:6a:8c:30:0f:37:68:7f:68:ad:
05:b3:1b:40:7c:69:5d:fd:b3:49:19:c3:02:34:98:
05:7b:24:f1:62:b3:45:9f:25:5d:97:62:cc:41:19:
f5:0a:c8:b7:e2:38:25:7b:68:ab:b1:36:04:4e:0e:
0f:d6:66:f7:e5:72:84:8e:27:97:e7:2a:28:ac:2a:
58:d8:8f:e9:9e:6c:f3:95:7c:0a:d8:8c:fc:b9:c7:
6d:4b:72:9f:74:69:ae:a5:2f:60:55:b3:1b:9c:d0:
31:72:d8:d3:31:4e:15:16:33:fa:2d:de:d6:75:c7:
73:16:05:5b:88:2c:c4:d7:09:08:7b:14:db:ba:d5:
85:76:52:1d:f1:ae:df:46:cf:07:89:71:37:9d:e8:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:ED:37:8D:1C:3E:E1:DD:E7:5B:23:14:2E:44:3A:58:27:BD:14:7C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wu03jRw-4d3nWyMULkQ6WCe9FHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.4.0/22
78.128.41.0/24
78.128.86.0-78.128.91.255
78.128.97.0/24
78.128.100.0/22
78.128.116.0/23
78.142.31.0/24
84.201.224.0/20
91.148.162.0-91.148.165.255
91.148.169.0-91.148.175.255
130.185.227.0/24
130.185.234.0/24
185.81.120.0/24
193.24.240.0/22
193.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
02:ce:98:93:61:45:98:08:b0:42:03:29:16:09:ad:e7:19:62:
77:e0:7a:83:7e:80:69:53:5e:f5:f1:99:01:ed:98:e3:49:a7:
a3:48:8b:fa:2f:a8:b7:89:5e:64:87:a0:44:92:4c:01:d4:d5:
59:f4:7d:62:db:d8:c3:d9:56:a5:49:71:24:38:89:63:2f:17:
20:d3:fc:fa:75:cf:fa:47:f8:28:95:aa:5c:f6:c2:ff:18:41:
d1:59:3d:87:54:7e:16:01:53:92:96:07:f1:e3:3c:d9:77:22:
07:80:42:2f:c0:d3:1c:de:18:5f:36:d8:68:ef:f1:4a:05:28:
61:53:d7:c1:97:ad:f6:bd:f8:12:44:15:0d:f3:68:3b:cc:1c:
0b:cb:a0:c2:cb:e4:c6:d5:71:99:09:6f:7f:4e:86:c7:a3:c4:
0a:47:79:3e:a5:35:35:5e:c4:c9:d0:b7:cf:9f:1f:53:9a:b2:
0c:8d:63:a1:61:5c:e5:59:43:93:8b:02:7b:78:86:e5:76:07:
fc:2d:be:f6:21:ba:b6:c6:1b:dc:be:fe:65:3a:55:9d:58:9f:
bc:f1:0a:5a:74:e5:24:b3:d5:fc:8e:43:92:9b:3b:04:98:7a:
d7:80:1f:fe:85:b1:d6:ff:f8:5c:8c:1e:69:d4:52:0c:ba:2d:
91:18:d8:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:13:55 2026 by rpki-client