Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wg9Gn8W5Iya8_ib5d0xOJwWR1qs.roa
File: wg9Gn8W5Iya8_ib5d0xOJwWR1qs.roa (raw, json)
Hash identifier: qLIg84kr+yFqGfleZlOeAuSLQDzYfJaquM072K5xYjQ=
Subject key identifier: C2:0F:46:9F:C5:B9:23:26:BC:FE:26:F9:77:4C:4E:27:05:91:D6:AB
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A066DB4292474380A2ED36450830FDE3E7
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wg9Gn8W5Iya8_ib5d0xOJwWR1qs.roa
Signing time: Thu 03 Sep 2026 10:40:40 +0000
ROA not before: Thu 03 Sep 2026 10:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:db:42:92:47:43:80:a2:ed:36:45:08:30:fd:e3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 3 10:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c20f469fc5b92326bcfe26f9774c4e270591d6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:9c:68:a7:68:8d:09:46:04:d8:db:f4:6b:
c0:a7:b2:da:a4:66:7c:e0:dd:7b:a5:3c:f1:21:d8:
0d:cf:a2:2f:21:83:bc:8d:96:a7:35:25:1d:63:f4:
82:4f:ad:db:22:c1:08:72:b8:6a:5b:5b:ac:8b:df:
27:9e:44:55:51:43:fc:02:41:59:30:89:98:11:5b:
19:cb:9d:58:fa:94:8b:ab:26:68:38:e8:4b:bc:94:
d3:1f:c7:7a:7f:d0:2d:13:0a:37:41:1c:62:fa:ef:
40:71:e4:c8:f7:77:21:05:da:53:64:e4:d4:ae:21:
46:f9:9c:e7:b4:a9:9b:fd:5a:8e:c7:48:3d:43:c2:
8e:82:27:eb:ec:62:46:bc:d1:00:3d:61:77:25:f4:
8b:81:16:24:a3:ec:b9:08:fb:67:d1:21:71:8c:11:
95:27:20:ad:7d:d8:39:7e:ce:7e:36:9f:f1:6b:fd:
ff:dc:ac:37:fa:4e:c7:f0:2f:9a:8e:cb:54:ad:23:
db:f1:ca:7c:67:df:60:e1:f6:67:03:41:0d:e4:08:
0f:d9:65:ea:65:28:74:74:b7:3e:a7:d1:d1:66:dd:
15:5a:5c:b4:e8:fc:6a:a9:e8:37:3b:f6:cb:85:16:
ea:69:a9:8b:c6:5a:bb:c4:88:dd:c9:f6:e9:a5:3e:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:46:9F:C5:B9:23:26:BC:FE:26:F9:77:4C:4E:27:05:91:D6:AB
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wg9Gn8W5Iya8_ib5d0xOJwWR1qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
45:25:ac:db:73:81:6c:77:8b:0e:b0:eb:8c:64:bd:1a:d9:c4:
f9:e1:81:21:b8:cb:84:9d:0b:2d:ca:f7:dc:b7:ef:64:ef:63:
ad:6b:18:c1:94:dd:02:16:ca:61:b0:01:9b:86:67:f2:52:ef:
6c:35:2e:15:ca:0b:86:13:37:8d:a5:28:33:3e:8f:6a:d8:7b:
c0:86:a5:18:eb:ee:8c:7d:5d:a2:55:ec:bc:9c:ce:41:d5:b7:
5b:8e:8c:49:21:23:f7:84:b3:af:2c:d6:46:45:5d:e6:e8:31:
d3:e6:c2:5a:ae:40:83:b5:25:c6:c0:f5:9f:03:d1:84:fe:8c:
c2:00:64:9f:f2:e8:eb:5b:4c:a9:59:72:8a:78:b3:4e:55:98:
d7:d1:7a:16:d6:12:43:53:fc:13:5d:de:08:5c:28:4f:56:f8:
12:ff:42:14:5a:46:41:fd:42:cc:68:4b:cb:eb:50:b7:20:7c:
cc:09:4b:3d:db:f1:8c:2b:f9:56:4f:28:23:c5:c5:39:b9:f2:
94:02:73:67:95:5e:5f:3f:19:84:62:ef:4b:4e:f5:e0:a5:81:
3d:4c:cd:f9:7a:3e:3f:34:08:e0:7f:5f:2c:42:55:a8:02:1a:
a2:b4:0a:4d:c5:26:98:35:5e:aa:48:c9:bd:1b:26:20:49:e3:
40:49:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:24 2026 by rpki-client