Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wCMm-aenH_zuMJOSQuJWeb71NJ0.roa
File: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (raw, json)
Hash identifier: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=
Subject key identifier: C0:23:26:F9:A7:A7:1F:FC:EE:30:93:92:42:E2:56:79:BE:F5:34:9D
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019FD376EEDDCB5FAA140058C9EF61844056
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wCMm-aenH_zuMJOSQuJWeb71NJ0.roa
Signing time: Wed 05 Aug 2026 19:46:54 +0000
ROA not before: Wed 05 Aug 2026 19:46:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 176.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:76:ee:dd:cb:5f:aa:14:00:58:c9:ef:61:84:40:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 5 19:46:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c02326f9a7a71ffcee30939242e25679bef5349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:9a:14:64:93:c7:75:1b:e7:ed:99:17:ff:
ff:7e:d7:9d:0b:eb:1b:d3:3d:c4:de:e7:85:88:25:
89:fb:56:ce:18:3e:28:9a:4c:10:62:dc:96:dd:c5:
d8:f2:9d:da:fe:9f:6f:61:2c:2f:ed:de:11:85:7d:
94:65:49:9e:6c:2e:ca:af:c8:89:06:74:97:97:73:
21:d5:3d:d2:31:80:90:ab:6c:4f:38:c6:db:23:f2:
5e:6f:c1:59:d7:72:92:0b:d6:63:64:b5:83:7c:74:
0c:d5:45:25:9e:73:b1:d2:0f:9c:59:0a:dd:0b:14:
79:2e:7c:60:39:29:0a:b4:ae:2b:73:99:c3:92:77:
6c:14:c7:84:93:6a:74:00:3d:6b:9a:2e:ea:ae:10:
50:47:03:01:77:3c:12:77:00:43:25:61:da:b1:3e:
3f:8c:45:60:24:00:37:43:c1:b9:59:0e:95:5e:d6:
27:40:87:13:09:e2:a8:a6:f8:14:10:f6:0e:9a:fa:
1e:cc:fa:78:c6:da:b6:c5:5b:32:7b:01:55:03:96:
f2:f4:25:67:c7:20:dc:51:9c:10:8a:0a:32:c5:c4:
a9:a7:39:5b:fe:e6:8b:a7:5c:a2:fb:4f:b7:64:3a:
bc:5c:cd:b6:e7:5e:f7:b2:9e:3d:a3:4a:1b:b1:9a:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:23:26:F9:A7:A7:1F:FC:EE:30:93:92:42:E2:56:79:BE:F5:34:9D
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wCMm-aenH_zuMJOSQuJWeb71NJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2a:c8:69:7d:10:43:40:0c:7a:0a:2f:46:bd:07:40:79:50:
58:f5:5e:af:c7:a7:1e:4c:af:0e:27:9c:02:c2:b1:9a:1d:e7:
70:4f:bc:f4:9f:b5:ad:96:4b:bf:8e:15:5d:75:f1:55:5e:3a:
c4:09:a7:a9:a1:b5:1e:a9:9a:bc:39:6c:4f:57:3b:e0:6c:bb:
3f:43:11:b4:e1:56:07:60:20:d3:9e:40:da:54:4d:b1:1e:6e:
14:56:82:83:c6:b3:f2:96:6f:98:a6:46:c3:0c:cd:b6:9d:ea:
16:35:17:0d:90:d9:da:ef:55:10:40:d2:78:53:0e:68:89:53:
cc:18:be:61:cc:f8:9c:c5:2a:b5:df:21:d1:57:8d:8f:34:d4:
9b:d1:a8:39:41:c0:44:c5:7a:77:e8:14:b3:96:20:eb:65:73:
f4:a7:c1:47:b5:14:5f:66:f0:ab:00:54:b9:9e:0c:af:54:cc:
c4:8e:fa:95:d8:9a:18:85:b4:82:8f:f7:98:3d:c9:0a:c1:40:
fc:ae:96:2f:75:00:66:ba:04:2a:1b:db:85:2f:e0:db:0f:78:
e3:18:4c:d7:fb:9a:e0:55:32:14:19:1a:7f:8f:00:ac:c1:af:
f0:44:2a:d6:91:26:49:01:98:46:64:f6:e5:b1:19:5b:c4:f5:
96:7f:28:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 08:22:21 2026 by rpki-client