Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/IeGuQWgM9-UFNSsI-FTXFSkCFR4.roa
File: IeGuQWgM9-UFNSsI-FTXFSkCFR4.roa (raw, json)
Hash identifier: 1318rDtRXAueyiYmO6wR667D2mL7c3rcW6YCub7VKSQ=
Subject key identifier: 21:E1:AE:41:68:0C:F7:E5:05:35:2B:08:F8:54:D7:15:29:02:15:1E
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 01A0FC58755167A6B5174145CAAD2956E241
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/IeGuQWgM9-UFNSsI-FTXFSkCFR4.roa
Signing time: Fri 02 Oct 2026 11:20:50 +0000
ROA not before: Fri 02 Oct 2026 11:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 94.158.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:58:75:51:67:a6:b5:17:41:45:ca:ad:29:56:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Oct 2 11:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e1ae41680cf7e505352b08f854d7152902151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:b7:d0:08:eb:60:f0:e1:52:54:29:7a:3f:
97:70:57:4d:a3:ee:82:09:8a:8c:ef:10:ea:bf:ee:
3b:b2:e3:1c:3a:eb:73:ff:c5:5a:95:3d:68:41:c4:
4a:00:cb:3d:d0:72:f2:2e:e6:b2:e9:e0:da:03:2c:
31:63:cf:f3:c2:85:a1:45:d8:41:a3:0b:49:d9:bd:
f2:4b:d9:8f:96:cd:d6:2e:58:b0:c2:3f:b4:3d:e8:
59:b6:06:48:59:8f:44:dd:14:6c:9a:7d:58:a7:46:
2d:05:fe:47:2a:2c:c2:86:38:a0:aa:43:a5:33:9f:
35:18:86:77:e6:11:7d:7a:83:0c:4f:cc:6d:e8:00:
a9:0a:e5:62:f9:da:94:da:ce:78:93:61:a1:91:17:
a7:be:79:f0:34:ff:cb:a9:5a:b3:62:5b:51:89:38:
fd:7d:a4:49:37:73:c8:10:d1:3e:b1:f0:4e:ba:eb:
c6:a3:1d:09:a5:91:d6:05:28:90:20:af:c2:6e:65:
a8:28:20:de:af:ea:bf:95:89:6f:3d:a9:13:3a:8f:
5f:d7:56:78:dd:73:bc:a3:e3:03:5f:bd:52:66:c2:
b6:bf:db:cc:b2:60:f6:de:b4:c5:01:82:25:41:df:
4e:f9:58:e8:3a:d0:ab:65:f7:84:15:69:0b:71:e9:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:AE:41:68:0C:F7:E5:05:35:2B:08:F8:54:D7:15:29:02:15:1E
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/IeGuQWgM9-UFNSsI-FTXFSkCFR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.187.0/24
Signature Algorithm: sha256WithRSAEncryption
08:06:f3:c2:7f:af:2b:c8:87:7e:87:22:77:55:00:ac:ce:01:
d5:b1:8b:22:3e:98:c7:c7:5d:91:ea:15:1d:4b:48:00:23:6e:
02:ac:57:86:ca:8e:f2:91:10:1b:8b:fc:51:3a:3f:8d:4e:35:
b6:08:66:43:37:da:d4:92:79:61:e1:39:83:03:e4:81:31:1b:
b8:88:6a:b3:27:11:32:91:eb:78:1f:47:ff:5d:50:b9:38:15:
83:5f:9c:8f:b0:60:5a:91:c4:d5:32:84:c4:62:4d:51:1f:9e:
ba:9b:57:24:cb:07:1d:51:9e:21:b4:0a:68:d0:29:a4:16:65:
ed:f9:49:9c:f3:4d:a1:1a:a3:b0:dc:db:ea:11:a3:9d:bd:4e:
fd:c6:e4:70:b5:d0:91:30:8a:da:84:fb:59:a5:8d:cb:96:27:
59:12:56:4a:df:31:70:29:70:65:de:36:01:19:3a:fa:73:92:
da:b9:d9:29:e3:7e:d5:af:61:6a:62:59:fe:98:5c:ab:5c:af:
e3:57:34:98:22:e5:bb:11:df:c4:de:f9:7c:ce:1c:3b:2f:76:
1f:bd:bf:96:d6:bb:d5:14:36:fc:b0:5f:a8:95:23:5f:53:65:
d4:75:8e:97:7e:ca:72:c0:6a:64:28:a0:e2:91:25:ff:67:ed:
e3:56:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:19:53 2026 by rpki-client