Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wHC0Qi8DqBquM58vd7e_Ae0M5co.roa
File: wHC0Qi8DqBquM58vd7e_Ae0M5co.roa (raw, json)
Hash identifier: QrpT+NZvzgWTnm800eEnVik93L0D3AIgin9GaNyAi4k=
Subject key identifier: C0:70:B4:42:2F:03:A8:1A:AE:33:9F:2F:77:B7:BF:01:ED:0C:E5:CA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0A5CF17AD2B211DD3FD3EA93C542EAF0F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wHC0Qi8DqBquM58vd7e_Ae0M5co.roa
Signing time: Tue 15 Sep 2026 16:03:27 +0000
ROA not before: Tue 15 Sep 2026 16:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215242
IP address blocks: 2.56.111.0/24 maxlen: 24
45.94.169.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:cf:17:ad:2b:21:1d:d3:fd:3e:a9:3c:54:2e:af:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 15 16:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c070b4422f03a81aae339f2f77b7bf01ed0ce5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:70:83:50:b9:bb:c0:50:b0:86:71:a8:04:
43:28:8e:3d:7e:60:86:e4:41:f3:f1:79:65:c6:7f:
f2:e9:a7:46:44:08:01:e9:2c:99:a7:3e:e4:82:75:
f2:27:76:43:07:d4:6d:3b:07:7d:d3:d2:26:1f:da:
03:b4:3c:94:5a:3d:9c:0e:e3:95:a0:37:33:bc:bf:
97:28:be:ce:ad:2d:39:14:49:6a:01:db:f0:d2:74:
d1:fa:52:e3:de:55:dd:c7:d1:fd:1a:59:d1:df:b4:
5c:6d:57:f7:fb:f1:ab:d5:0b:a0:80:88:91:ff:6a:
29:3c:c1:03:b9:d6:ff:32:53:1b:67:33:3b:a9:90:
c8:94:a0:b4:de:b3:99:7a:b9:ec:f1:44:dd:0d:0e:
c7:14:57:81:70:be:06:1b:d3:f4:87:59:37:c8:25:
05:90:ca:d5:0b:cd:19:58:14:ed:7b:12:44:da:51:
24:55:c1:c3:77:db:09:ad:9b:bc:77:2e:27:fa:cc:
c4:ce:11:c8:32:2d:70:5c:bc:36:df:fe:43:2a:96:
16:52:e6:89:0e:ae:c0:b8:b6:fc:65:98:5c:99:95:
9b:74:da:03:2a:f0:ed:12:25:48:94:d7:a5:3c:27:
44:3e:c3:1a:36:87:a0:60:29:9b:e7:90:1e:b3:14:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:B4:42:2F:03:A8:1A:AE:33:9F:2F:77:B7:BF:01:ED:0C:E5:CA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/wHC0Qi8DqBquM58vd7e_Ae0M5co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.94.169.0/24
45.132.183.0/24
45.138.180.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
36:61:0e:d0:2d:38:9f:b0:84:96:39:08:6b:f5:e3:2e:be:24:
cf:38:4a:cc:21:91:19:d2:4f:af:4c:87:bd:4b:2b:66:65:b1:
ba:a7:6c:5f:55:0d:7f:4d:74:33:60:f3:32:3c:b1:04:aa:ec:
98:08:77:b4:68:e6:bc:9b:7b:82:c7:ba:ca:be:08:4a:a4:92:
c9:56:15:91:de:38:a2:c5:5a:62:21:02:b7:6a:a0:e5:56:b8:
c5:b0:76:71:45:ee:66:14:9b:e3:ae:1e:89:bf:3e:30:58:4f:
9d:4f:f6:6f:4c:ff:97:bd:a6:d6:31:84:09:3b:d5:95:16:e7:
38:56:f5:b0:fc:37:8b:5a:b7:6c:4a:b6:eb:f6:35:35:9c:7c:
d3:d2:e5:03:e9:b2:b1:2a:35:b4:88:2f:cf:d2:49:42:d8:b3:
ba:dc:bd:05:89:16:75:a5:9c:6c:b8:e1:ce:64:81:ef:7e:53:
e9:70:2a:a7:3d:51:22:68:9a:17:a0:39:c5:b2:12:56:63:0b:
c8:16:e0:d8:70:0f:c4:24:26:a2:11:10:4b:30:a9:89:5e:7f:
bd:a2:da:32:4d:f4:17:e7:57:a1:c7:d1:fe:6c:5b:52:4a:42:
9c:9f:11:a2:84:04:58:62:5a:df:02:42:69:68:c4:e2:08:38:
c4:42:d6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 11:07:35 2026 by rpki-client