Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wMuDBnRHQJ7TG24mWdE1ozm_aDg.roa
File: wMuDBnRHQJ7TG24mWdE1ozm_aDg.roa (raw, json)
Hash identifier: Vg0WsWOXszgx3WWu9jRz9hJ87AWgr/i6ZfLyHBPF0bo=
Subject key identifier: C0:CB:83:06:74:47:40:9E:D3:1B:6E:26:59:D1:35:A3:39:BF:68:38
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A056B0A80B5093B154983646807485598B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wMuDBnRHQJ7TG24mWdE1ozm_aDg.roa
Signing time: Mon 31 Aug 2026 07:20:12 +0000
ROA not before: Mon 31 Aug 2026 07:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 195.133.58.0/24 maxlen: 24
212.193.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:b0:a8:0b:50:93:b1:54:98:36:46:80:74:85:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 31 07:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0cb83067447409ed31b6e2659d135a339bf6838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:6a:d6:bc:81:ea:8c:ca:3c:82:23:54:af:
30:35:d7:fd:ff:c8:b4:2f:aa:4c:67:de:c8:2d:1f:
d7:a9:43:9d:f7:4a:20:d6:fb:db:c8:dc:3f:1c:81:
80:4a:91:06:92:b5:67:1c:d3:e3:a9:60:12:11:bf:
98:8d:cb:78:db:5c:7c:52:b0:80:0b:06:73:87:6f:
a4:ba:24:1a:17:11:02:e7:f5:27:69:c0:5d:9d:d0:
51:5f:ef:3c:a3:74:90:6d:c8:3c:e8:e6:ce:b1:99:
4f:a6:78:a4:99:ec:f0:ed:69:4c:2f:f9:97:26:88:
de:9e:81:b5:71:e8:f6:11:42:17:49:bc:d0:d0:68:
db:45:2c:5c:c5:f9:af:14:5f:9f:8d:f8:a9:06:08:
d5:f6:c5:28:5f:96:c5:10:20:53:0f:8c:7d:4e:0f:
de:d3:6e:f5:26:16:c3:8b:c6:f0:aa:18:1a:f0:58:
68:70:1f:a3:72:89:18:7a:4d:53:55:11:c6:ee:9f:
12:f3:a8:0a:60:d8:8b:bc:85:9f:e7:60:f2:a5:c9:
16:99:01:72:5c:71:3f:0e:6e:13:a3:1e:19:bc:ce:
e8:22:46:87:f6:bc:e6:75:cc:94:0e:1e:8b:ca:e0:
80:51:4d:85:22:01:e8:f0:96:0b:2f:b0:d8:76:ba:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:83:06:74:47:40:9E:D3:1B:6E:26:59:D1:35:A3:39:BF:68:38
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wMuDBnRHQJ7TG24mWdE1ozm_aDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.58.0/24
212.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7b:dc:2e:eb:72:b3:9b:21:bf:4e:f0:20:de:8c:44:2e:81:
fe:09:dc:7b:87:6b:84:82:33:50:29:56:b4:cb:36:51:5f:e9:
b7:cd:88:ab:d0:d7:c8:ad:f4:32:23:0a:5c:65:f2:c2:7c:4e:
c7:11:b8:54:c5:17:4a:d9:f3:2e:34:f0:01:d3:09:82:cb:17:
a7:98:c6:89:05:ec:ab:73:4b:e2:c3:89:4e:0b:cc:5a:82:c2:
84:82:9d:21:8d:56:5f:db:c1:6c:77:ef:53:01:d5:63:03:5f:
3d:d8:d0:a5:09:48:f3:c6:67:58:7f:91:4d:b0:b1:c9:d2:85:
84:a5:78:6a:fb:4e:3d:d3:5c:4b:66:5c:a8:0e:38:ca:83:44:
3c:65:10:a6:f1:ef:1f:8a:e0:ed:fa:d0:40:63:65:0f:26:cb:
0c:ea:40:be:b0:78:8e:11:ba:4e:77:87:da:41:29:d2:c0:cc:
1d:91:93:62:6c:c2:74:bb:a9:dc:4b:d7:19:d4:f8:ed:0b:16:
5f:c4:39:35:f2:78:85:cc:18:c7:86:bb:f1:e8:a2:37:72:9b:
b3:66:98:88:69:11:b8:b2:6d:e2:2f:24:2b:ec:2e:6d:1b:5f:
41:fd:c6:c4:f5:2d:42:92:44:19:f4:cc:3d:41:a9:50:32:34:
8a:a3:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:24 2026 by rpki-client