Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/waItQMACW4SRNXOkTCQgkxmyUA8.roa
File: waItQMACW4SRNXOkTCQgkxmyUA8.roa (raw, json)
Hash identifier: wmNvDk2VWw5LX1TUO0qdmsCWii+UnxjHnxa149uN1Ns=
Subject key identifier: C1:A2:2D:40:C0:02:5B:84:91:35:73:A4:4C:24:20:93:19:B2:50:0F
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019E27A9729830BB5E49D236F28BEBAA2F9E
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/waItQMACW4SRNXOkTCQgkxmyUA8.roa
Signing time: Thu 14 May 2026 18:04:36 +0000
ROA not before: Thu 14 May 2026 18:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 178.239.112.0/24 maxlen: 24
178.239.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:a9:72:98:30:bb:5e:49:d2:36:f2:8b:eb:aa:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 14 18:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1a22d40c0025b84913573a44c24209319b2500f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f4:c8:20:70:6c:b0:6b:07:2d:47:a6:cf:d2:
59:61:e6:c6:41:43:95:b9:bd:0e:7b:28:38:bd:b9:
d8:ff:34:0a:1d:dc:2a:f5:8c:95:be:e6:f8:68:f8:
ae:a5:f1:02:b2:2c:71:dc:38:ef:d9:6e:74:5b:0f:
db:11:a1:3f:1a:81:f2:1a:3a:3e:9c:f2:c0:d1:d1:
73:d7:3a:9a:44:24:a0:ff:12:83:82:31:36:a6:bf:
38:0a:01:f3:40:bf:2c:3b:1f:6a:05:0b:e9:ab:63:
cf:a7:ad:12:50:a4:53:15:ec:d1:b3:73:56:f5:89:
48:1a:2c:11:a3:32:48:73:9e:6b:2d:98:69:c8:01:
98:05:59:44:37:6d:83:fe:ca:05:82:3e:8d:de:b0:
c3:d1:1b:e0:47:d5:6a:ff:e6:2d:14:06:5d:5b:4a:
c2:6c:cf:69:ab:eb:f8:51:5b:c0:fa:4b:f9:a3:78:
11:a4:f3:c0:db:b0:2e:25:50:fc:d1:e4:66:1a:f4:
05:8b:19:3f:61:9d:2b:62:09:fb:9e:1a:e5:f6:26:
f5:f0:cb:a8:bd:0f:bb:ff:9c:d5:e1:03:84:2e:56:
c7:69:c1:2f:84:b6:32:94:23:2a:4c:cb:43:5c:bc:
3e:2c:80:41:38:94:9c:10:ff:d8:dd:ca:12:5c:23:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A2:2D:40:C0:02:5B:84:91:35:73:A4:4C:24:20:93:19:B2:50:0F
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/waItQMACW4SRNXOkTCQgkxmyUA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.112.0/24
178.239.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3f:fc:1f:ab:73:71:28:6b:dc:69:26:b8:5c:2b:25:67:e5:
6b:cd:63:db:f3:2c:2f:f1:d4:0c:da:b2:4a:b6:f4:5a:68:86:
49:cb:1a:29:05:dc:b2:67:39:58:a7:75:10:08:b0:e9:9a:21:
1c:6d:be:21:d0:80:29:7c:42:d6:31:9d:b9:3f:83:c3:10:35:
f0:f6:8e:08:60:a3:c6:32:2d:1b:89:fb:03:06:ac:30:8d:f0:
9a:fc:ce:9d:3f:63:dd:ea:c5:9e:44:18:cd:55:48:40:f6:56:
2a:3d:53:66:e6:e5:a4:98:96:95:c6:7f:e3:fd:9d:a4:1f:e3:
ba:c6:0d:72:bb:45:ad:ed:de:d4:48:b5:77:49:64:bf:b7:96:
8b:ce:76:f8:5f:9c:cf:fa:f3:2e:7c:a4:b3:84:80:53:02:c4:
7c:e8:16:61:e6:0b:5a:e0:80:e0:3a:27:aa:5f:46:0d:26:ff:
69:40:3f:5a:01:e2:5e:26:67:c1:36:13:f4:41:ed:40:eb:be:
ba:24:d4:dc:b6:5c:6c:de:8a:5b:f5:29:a3:65:b8:d7:50:76:
ab:c7:b7:d2:9e:e2:ce:57:cc:59:5f:9b:2b:4b:85:73:dd:6b:
d5:69:8b:0c:7e:44:bf:81:b1:01:c9:2f:cc:3c:c1:0b:de:3c:
21:91:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:17:44 2026 by rpki-client