Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Wema0fZ8Ddt7AXAOBiG5C9cJ8R8.roa
File: Wema0fZ8Ddt7AXAOBiG5C9cJ8R8.roa (raw, json)
Hash identifier: BS+m6QKoa5uzAdSrCNdkgOO4WKhkOy9Vf0VF6LGRzbg=
Subject key identifier: 59:E9:9A:D1:F6:7C:0D:DB:7B:01:70:0E:06:21:B9:0B:D7:09:F1:1F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01A1120BCEAE102413EB270789114EF95C20
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Wema0fZ8Ddt7AXAOBiG5C9cJ8R8.roa
Signing time: Tue 06 Oct 2026 16:28:46 +0000
ROA not before: Tue 06 Oct 2026 16:28:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:0b:ce:ae:10:24:13:eb:27:07:89:11:4e:f9:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 6 16:28:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59e99ad1f67c0ddb7b01700e0621b90bd709f11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:a1:f9:9c:3f:b1:72:bf:9e:68:18:20:08:
25:bc:1e:93:25:1f:be:10:0f:be:82:02:ee:e6:f9:
c9:52:a6:e2:f5:bf:7b:84:ee:dc:51:0c:18:98:c3:
52:6d:ee:f0:7e:50:68:08:9b:db:f5:36:fa:cc:09:
ca:79:95:85:60:94:89:65:3b:6d:c0:eb:57:3e:fa:
eb:19:7a:c5:ba:f5:d7:71:3b:ad:70:3b:60:77:e7:
26:2e:06:a9:04:4b:55:d4:6a:1a:90:ba:d6:a0:05:
bb:38:f1:04:79:eb:f2:d5:91:e6:a3:a9:fb:21:0e:
d4:ba:ca:f4:f1:9f:13:19:00:d9:32:6e:0e:26:a1:
cf:3d:37:dc:aa:f1:ba:4c:b7:34:56:a3:5d:2c:4a:
7d:64:30:d3:d8:76:7a:7b:b4:d3:24:b0:07:1a:9a:
00:4f:db:59:fc:d6:5a:bd:d5:9e:de:70:de:a8:cf:
af:35:20:eb:1c:13:83:cb:41:00:c8:6e:e6:85:f8:
15:18:2a:11:0e:f7:f1:3b:cc:80:1e:0f:c2:cb:1b:
8e:30:89:9e:cc:40:08:ae:5d:52:78:0e:ad:70:13:
31:f4:0a:52:4a:77:1e:21:9d:31:57:bd:44:cd:87:
e2:a8:ff:f3:b5:53:5a:98:6f:b1:2e:fa:6e:14:2a:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E9:9A:D1:F6:7C:0D:DB:7B:01:70:0E:06:21:B9:0B:D7:09:F1:1F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Wema0fZ8Ddt7AXAOBiG5C9cJ8R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.156.0/24
94.74.159.0/24
176.46.136.0/24
176.46.142.0/24
176.46.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:84:a6:47:c4:bc:06:28:b6:14:92:e2:e9:d5:e9:9c:2c:62:
84:cb:3a:37:78:c5:d1:73:fc:34:46:da:08:fa:89:62:ae:c7:
10:36:d6:34:8e:36:98:1e:23:be:7c:48:b6:5d:82:b7:27:04:
f2:75:4f:c4:df:17:cd:5e:a8:d3:45:f1:80:35:4d:87:e9:0c:
a9:1e:a6:e6:df:dc:d8:bf:81:87:72:65:83:d8:42:a9:d0:35:
4c:42:30:b9:08:11:2b:80:ca:30:b5:a0:39:4d:ce:27:23:15:
35:1e:ec:1f:b5:da:fe:1c:1e:39:68:6a:a5:d4:ae:92:1b:af:
6b:16:79:97:37:16:aa:e8:77:c8:41:16:a3:1b:02:e2:04:a3:
e7:05:f7:2b:31:a8:fd:8c:6d:c6:59:71:37:a9:95:df:2c:e2:
2f:43:65:44:cb:2e:c7:bd:45:6a:20:de:30:11:19:c7:51:e2:
bd:c2:8e:0b:88:07:90:83:4d:7a:2e:72:a7:71:d6:9a:6c:36:
15:e6:ea:52:1b:7b:b1:1f:fe:cf:28:6f:24:b3:4b:f8:1e:f1:
88:a0:27:ce:68:2f:18:d5:63:dd:4a:45:65:d0:0d:17:8a:48:
0e:97:88:37:ed:d3:23:e2:6e:03:69:b7:3c:0b:17:d0:0e:a7:
0e:0c:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:25 2026 by rpki-client