Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/z4IC9zFzItTHUWX8Q8AIR_uv-R0.roa
File: z4IC9zFzItTHUWX8Q8AIR_uv-R0.roa (raw, json)
Hash identifier: Kq4BKjse/0CrXcsA5ocS3SlmfWwHOohQPTWoZ8uVAH0=
Subject key identifier: CF:82:02:F7:31:73:22:D4:C7:51:65:FC:43:C0:08:47:FB:AF:F9:1D
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 019FA520C0D6E896C7E02D06EF30470011C4
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/z4IC9zFzItTHUWX8Q8AIR_uv-R0.roa
Signing time: Mon 27 Jul 2026 19:50:14 +0000
ROA not before: Mon 27 Jul 2026 19:50:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 94.158.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:20:c0:d6:e8:96:c7:e0:2d:06:ef:30:47:00:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jul 27 19:50:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf8202f7317322d4c75165fc43c00847fbaff91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:4c:03:01:6b:a6:7e:70:b3:5c:c5:6c:ac:
f1:5c:35:2c:db:ec:49:91:f6:18:c2:ad:d9:86:23:
a6:e5:93:79:fd:40:e9:1d:75:db:9f:8b:56:24:98:
30:47:fb:ff:94:e1:6e:ed:a8:9a:d9:f5:b6:56:de:
fe:81:13:ff:77:34:4e:8f:76:ec:dd:80:1b:b2:f8:
1e:51:67:36:87:ae:aa:28:93:ec:2d:eb:05:20:78:
1f:49:58:1e:f9:85:c1:93:e7:a5:ea:d6:47:dd:5d:
79:73:52:43:bd:2d:7e:51:e1:17:5b:55:94:68:49:
08:b0:00:e8:e5:80:40:cc:40:9b:86:62:e2:c1:20:
27:d7:97:a8:88:af:85:67:20:cd:40:34:5a:40:8c:
97:1a:53:50:e7:cf:7f:0c:7f:f5:18:39:c1:f3:cb:
7c:c0:36:3e:d7:d7:bd:1a:54:bf:cd:4f:ee:24:46:
b3:3f:68:21:24:62:23:06:ba:39:8f:18:54:97:8e:
26:39:d8:09:a7:27:49:cb:b8:d4:ed:89:f5:1c:ff:
e0:94:8e:c4:51:33:90:1d:aa:1b:7f:e7:a6:35:be:
66:38:32:18:2b:dd:4c:38:ff:b6:fb:e2:38:b0:24:
7d:0c:de:0c:f8:e3:54:9f:e9:6c:ec:29:ff:3d:4f:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:02:F7:31:73:22:D4:C7:51:65:FC:43:C0:08:47:FB:AF:F9:1D
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/z4IC9zFzItTHUWX8Q8AIR_uv-R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.184.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:92:18:d6:e3:41:16:d9:ad:f3:33:e9:1c:fb:b3:1d:63:f9:
b8:20:0d:a5:0e:82:61:ae:32:30:ee:22:ff:77:6a:3b:31:bb:
c1:94:e3:6b:e7:99:fa:50:bd:f6:28:d7:c0:73:0c:f9:b3:d9:
42:58:ab:d7:2e:d5:48:38:13:55:65:34:a9:5c:5a:80:be:e2:
3b:d7:00:c7:c5:15:5e:d5:27:0c:02:cd:d6:65:e7:7a:28:59:
98:c5:81:e3:9a:51:4b:5f:a2:34:c5:98:78:19:ab:05:ac:b5:
4d:b2:0b:16:e3:5b:22:b2:cd:38:03:da:31:74:0a:7a:ae:f4:
6f:c7:26:9d:05:50:33:11:0d:52:c3:1a:1f:ef:31:10:4d:d0:
80:2a:5c:b2:89:9e:71:0f:07:39:6f:f0:fa:b6:ee:8e:6d:f3:
80:7d:11:9e:df:95:41:06:45:55:b1:36:01:b2:e3:58:cc:69:
54:09:43:f6:bf:ec:25:13:4f:0a:82:e6:26:24:c8:9e:5c:8b:
7b:e0:0d:a5:b0:37:19:d0:72:28:d9:ad:b6:ff:d5:19:ed:cb:
22:aa:16:4d:7d:87:cf:fa:33:60:d0:26:2b:d6:f9:8e:2d:b2:
87:64:8e:e0:a0:2d:9d:23:ae:71:14:f4:cf:64:51:65:fd:cd:
c9:8d:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 09:30:52 2026 by rpki-client