Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/WaDORPwkiI4vL0-Y2OWdd9LZKfY.roa
File: WaDORPwkiI4vL0-Y2OWdd9LZKfY.roa (raw, json)
Hash identifier: Q1Qbnevo0Eux5e9t/KKuv1hj5VUMbV+v27K/J2UmoQA=
Subject key identifier: 59:A0:CE:44:FC:24:88:8E:2F:2F:4F:98:D8:E5:9D:77:D2:D9:29:F6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A136D59C369429D00ACCFA219FF02AD85B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/WaDORPwkiI4vL0-Y2OWdd9LZKfY.roa
Signing time: Tue 13 Oct 2026 19:55:31 +0000
ROA not before: Tue 13 Oct 2026 19:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49770
IP address blocks: 37.16.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:d5:9c:36:94:29:d0:0a:cc:fa:21:9f:f0:2a:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 19:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59a0ce44fc24888e2f2f4f98d8e59d77d2d929f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:77:be:d6:c0:30:62:08:a8:93:ba:d0:5b:
80:2d:70:4a:4f:44:98:82:a3:c2:4c:2f:27:f2:fc:
50:c4:c1:3c:3f:44:dd:f6:9b:ea:be:4e:26:11:ce:
c7:3a:17:81:e6:91:8e:d9:d8:09:6f:b1:bc:48:30:
04:aa:5b:dd:1a:6c:66:ae:18:d0:c0:e2:76:56:d1:
a1:58:14:38:93:c6:9f:63:f0:be:7a:a8:6f:a0:2c:
49:50:d8:c3:28:91:ea:2a:b6:fe:eb:db:d7:96:09:
e3:87:c9:ac:36:d6:5f:c1:0f:3a:56:7c:88:62:fe:
42:92:e2:e3:43:ac:68:d8:b0:12:0c:94:5f:5e:2c:
df:cf:01:c7:11:41:85:a1:d6:7e:a3:15:d4:f6:3c:
0f:90:a2:d7:1f:4f:75:f3:d4:7d:c3:66:97:67:94:
7d:ac:ca:5b:3e:b5:15:23:61:35:db:de:92:34:a3:
7a:fa:f3:b8:e3:10:42:fc:72:53:cb:7e:5d:78:d2:
72:4a:47:e2:38:4f:1e:36:d5:2e:70:e1:13:86:f6:
97:3d:41:d2:3c:48:ad:60:f4:bb:04:c4:5e:33:83:
0f:c5:18:06:cd:6d:12:13:4e:9b:fd:bd:c3:7d:1f:
ce:7a:b3:4b:49:82:ef:cf:69:79:00:7b:3f:7b:81:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A0:CE:44:FC:24:88:8E:2F:2F:4F:98:D8:E5:9D:77:D2:D9:29:F6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/WaDORPwkiI4vL0-Y2OWdd9LZKfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.88.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b4:fb:5e:65:b7:d2:e6:e3:30:2e:c5:0c:41:c8:77:01:e5:
cd:d8:66:83:d2:7a:aa:45:10:66:8c:cb:d8:90:4d:68:ba:f5:
8d:a7:cd:6c:ac:f3:49:ab:b9:9a:ee:e4:b6:4f:b6:db:90:a0:
4a:7a:07:e5:dd:18:94:40:c2:33:72:1b:0b:6c:06:ea:a5:8e:
10:95:78:b2:81:c6:a2:ea:3e:20:66:53:71:e7:7c:8b:01:d1:
8d:15:ae:a3:30:29:09:81:e2:b0:bc:10:e1:53:d0:36:f2:28:
3c:7d:47:ed:71:29:a1:82:6d:5d:5d:e6:eb:c0:60:2b:df:47:
6e:6d:74:0e:97:b1:98:74:05:8f:c5:1d:a0:ae:1d:a7:a3:41:
a8:e1:e7:e3:3a:d9:7e:25:86:92:41:ac:08:54:f8:b4:6c:6b:
ec:f7:14:94:1b:6d:fa:03:b6:cc:1a:e6:a0:f5:11:f3:ab:65:
85:67:f5:66:99:7f:49:42:9e:c5:54:16:12:aa:44:b9:de:e2:
21:9b:b4:e0:e8:18:47:ed:3e:b1:39:0e:36:ae:a3:b2:3b:6b:
fd:ef:c5:17:3c:dd:b4:70:29:7c:c2:40:24:f9:42:2f:69:45:
f0:0e:44:4a:36:40:6f:c4:b6:6b:ec:93:0e:74:fa:aa:32:ea:
1e:b4:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:15 2026 by rpki-client