Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/w4nwfZuPzRpBrWSfXx85ZnaS1lw.roa
File: w4nwfZuPzRpBrWSfXx85ZnaS1lw.roa (raw, json)
Hash identifier: 8ZdK041x21GAKXZ5iak9HrMYm8PyqT6pA7mZcTbvXYY=
Subject key identifier: C3:89:F0:7D:9B:8F:CD:1A:41:AD:64:9F:5F:1F:39:66:76:92:D6:5C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019EDB28DC5733E7BFEEB8E3A9319D4B2DD5
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/w4nwfZuPzRpBrWSfXx85ZnaS1lw.roa
Signing time: Thu 18 Jun 2026 14:35:48 +0000
ROA not before: Thu 18 Jun 2026 14:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201002
IP address blocks: 94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:28:dc:57:33:e7:bf:ee:b8:e3:a9:31:9d:4b:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jun 18 14:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c389f07d9b8fcd1a41ad649f5f1f39667692d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:98:b1:aa:98:87:46:b0:71:d1:36:7f:d8:
e2:3e:c5:5a:82:5e:ec:64:ff:4c:fd:c5:da:30:d5:
14:54:39:fb:d4:07:d6:14:d8:29:90:1f:30:03:70:
01:3c:90:d3:d4:ea:1e:c6:0a:5a:c4:3d:12:80:85:
3b:47:73:da:1d:a9:0b:a2:4d:9f:1b:9a:52:83:b4:
9f:d5:3b:a1:07:01:42:de:0e:f4:9a:21:b5:9e:f0:
6c:eb:01:53:9c:b7:f2:11:0e:5f:bb:d5:ee:d8:f2:
89:54:68:d9:0e:21:8b:e2:6a:58:f4:4a:16:92:85:
26:6a:7e:b8:f9:e6:5f:90:78:eb:41:af:4c:0f:28:
60:21:c7:95:26:88:d7:82:2e:83:f7:cc:2a:68:74:
a5:78:9f:f4:dc:b3:04:c8:71:68:66:80:6e:1e:98:
1d:d6:09:71:19:41:90:1a:95:92:87:2c:f7:54:b7:
ba:7e:32:bb:fc:af:5a:da:76:17:40:a0:3b:00:ab:
97:ce:3e:08:15:b3:f8:dc:ee:b7:82:8c:91:d8:98:
f7:69:ec:4e:bb:bd:e6:42:98:e0:6d:2a:ac:dd:9e:
2a:b1:c6:07:e8:38:de:64:97:52:eb:a6:85:31:5c:
b3:cb:f9:fe:5f:af:64:a4:f0:86:aa:d0:06:d4:44:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:F0:7D:9B:8F:CD:1A:41:AD:64:9F:5F:1F:39:66:76:92:D6:5C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/w4nwfZuPzRpBrWSfXx85ZnaS1lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
94.103.191.0/24
185.218.1.0/24
Signature Algorithm: sha256WithRSAEncryption
82:01:8f:cc:a2:95:06:d3:2a:e4:34:3f:17:4c:79:ac:cb:d8:
1c:4c:bc:28:53:3b:9b:1f:73:49:33:e1:e1:1f:eb:ff:c9:aa:
ec:54:ab:1e:aa:b7:43:74:a2:c7:97:1d:5d:8c:dc:24:54:22:
9c:c3:b0:8f:77:3a:6e:a6:36:10:cd:27:f1:04:22:98:2b:6d:
ad:d2:da:dd:35:76:89:18:e6:0a:d8:4a:fe:dd:40:8c:6d:cf:
45:d3:52:e4:96:9e:55:04:6e:d5:5a:a6:62:7f:84:9b:5a:75:
84:53:ab:be:ea:73:20:e8:9b:4b:0c:2d:59:91:65:91:95:00:
a9:37:f6:95:4d:7f:82:51:b7:6e:b3:d6:88:6b:4a:b9:b8:2d:
76:16:ce:34:01:7d:39:8b:0b:e0:dc:90:d9:93:68:92:1f:18:
62:75:20:e4:a1:6a:c2:a3:b1:f8:81:97:f1:3a:4e:6f:9b:cf:
e6:38:b4:e1:fe:8c:1c:ec:5f:4d:65:65:ff:77:8a:6f:c2:e0:
0b:99:f7:4c:50:5e:0c:36:7d:31:b0:33:8f:a9:08:b6:3e:c8:
20:13:82:19:03:14:de:2e:ea:3c:b0:a1:b0:e6:14:ee:80:bf:
2e:22:24:89:51:2c:f9:c0:f9:b7:fc:1d:77:f6:7c:81:2f:dd:
12:58:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:24:40 2026 by rpki-client