Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/wsOEUVyk9sIlg5MKRUH0wpTjaw8.roa
File: wsOEUVyk9sIlg5MKRUH0wpTjaw8.roa (raw, json)
Hash identifier: 6f/bUq3GwOXqxVf+jY/soqtnaHNxSvKd1I9oz4aw3R8=
Subject key identifier: C2:C3:84:51:5C:A4:F6:C2:25:83:93:0A:45:41:F4:C2:94:E3:6B:0F
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 01A17D777E76E461F5E2B67A0C708F37E950
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/wsOEUVyk9sIlg5MKRUH0wpTjaw8.roa
Signing time: Tue 27 Oct 2026 13:05:45 +0000
ROA not before: Tue 27 Oct 2026 13:05:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51101
IP address blocks: 91.237.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:77:7e:76:e4:61:f5:e2:b6:7a:0c:70:8f:37:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Oct 27 13:05:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2c384515ca4f6c22583930a4541f4c294e36b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:5a:d5:37:cc:db:95:b2:09:c9:4e:70:a2:
d2:77:6d:4e:4a:bb:00:9f:b3:24:35:c7:b2:75:23:
58:4c:dd:54:e1:ed:68:4c:ea:21:17:5b:4d:7d:fc:
82:75:82:7c:59:ff:b4:10:bb:26:39:a8:87:dd:88:
43:24:2c:3a:5f:75:68:c3:8d:a5:62:9d:7b:f5:2a:
1c:f9:d1:1c:62:7f:6a:4f:f7:7a:90:ee:0f:9d:4c:
df:4f:51:9c:03:b7:8b:36:ab:fd:96:a1:01:b3:e6:
ba:95:21:df:84:25:c3:48:3c:f5:07:80:f6:4d:7e:
e1:9d:25:64:5b:d5:f0:34:6d:fd:b6:03:77:fb:82:
73:d2:0f:52:f3:9a:59:f2:b8:80:9a:c3:75:b5:c5:
83:d3:90:5e:47:15:24:63:8e:61:a0:1b:3d:13:25:
47:a5:cc:c8:37:20:12:a9:1b:27:c0:4f:17:36:81:
1a:2d:de:b8:5d:c5:9c:49:be:76:88:1c:0c:12:44:
18:81:87:cd:cb:23:99:4a:00:22:42:3e:e8:1f:62:
2b:e1:53:72:c2:93:58:86:16:54:9c:82:28:da:31:
e7:76:b7:fe:e9:b0:1b:71:f3:f5:f3:4f:0a:19:7e:
71:d4:2d:2a:f0:7a:b7:0e:07:ba:07:3e:43:1e:fd:
91:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:84:51:5C:A4:F6:C2:25:83:93:0A:45:41:F4:C2:94:E3:6B:0F
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/wsOEUVyk9sIlg5MKRUH0wpTjaw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.72.0/23
Signature Algorithm: sha256WithRSAEncryption
71:f3:9b:c3:1d:a1:62:ee:be:80:0b:f2:fd:56:62:2e:81:d7:
59:fa:e1:ea:11:93:60:a0:8b:f2:b1:da:4d:8c:b3:a2:98:96:
ad:73:a7:c2:03:4e:39:61:c7:d5:ba:1b:2b:b5:52:50:76:01:
4f:c6:10:c5:59:4c:db:6e:aa:fe:31:92:96:be:34:8f:7e:9c:
ef:80:ce:6a:40:87:5d:2d:25:a6:ea:c4:74:e8:f8:2f:3b:38:
7b:7c:a4:d8:e5:37:6f:66:db:fd:7e:59:35:39:fa:a8:69:a0:
81:b8:55:81:8c:20:d9:d1:66:93:58:99:26:c2:70:1d:69:56:
03:18:1c:9d:a2:fb:94:ac:ce:09:fb:cb:eb:eb:f1:d8:c2:35:
07:10:a9:c5:d5:06:9f:29:f9:b6:1f:9d:46:25:e7:55:85:9a:
52:02:20:a3:f1:1c:25:4a:87:25:d4:c8:51:34:25:34:76:4f:
cf:1a:94:1d:6f:8e:a2:ee:63:33:fe:cd:e3:a7:94:ae:21:a0:
4f:37:73:34:bb:3a:4c:2a:40:34:b2:3d:ae:8b:d5:d4:bb:ed:
c2:0a:4e:b5:c9:c0:7c:ee:5d:a8:0c:56:89:37:6e:30:27:85:
6b:7b:b9:23:1b:10:8f:ca:36:7f:7a:d4:47:5f:c0:da:9d:54:
03:0d:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:14 2026 by rpki-client