Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wg6p8TOWR8LYJXNhIaGQ6vOzeP8.roa
File: wg6p8TOWR8LYJXNhIaGQ6vOzeP8.roa (raw, json)
Hash identifier: UJF/fF7VlHRHvmo3tOMbVZgHglV2xH3AwvvkAJaMgV0=
Subject key identifier: C2:0E:A9:F1:33:96:47:C2:D8:25:73:61:21:A1:90:EA:F3:B3:78:FF
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A1154C5601819D66BF580A6267531063FE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wg6p8TOWR8LYJXNhIaGQ6vOzeP8.roa
Signing time: Wed 07 Oct 2026 07:38:06 +0000
ROA not before: Wed 07 Oct 2026 07:38:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 188.255.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:4c:56:01:81:9d:66:bf:58:0a:62:67:53:10:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 7 07:38:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c20ea9f1339647c2d825736121a190eaf3b378ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:ff:26:c1:40:67:b5:b7:f0:c7:8e:ed:ac:
9f:f8:a0:e7:ee:73:7a:a2:5c:00:6d:80:42:23:d5:
23:5c:82:0c:dc:a1:fd:7f:bc:94:e5:9e:bf:45:c7:
b2:7d:c8:bb:6a:f1:de:dd:68:26:5b:e8:2b:c4:d2:
11:70:a4:2e:4e:e3:54:9d:e9:4f:ae:53:a6:0e:79:
b0:f4:91:13:1c:2d:ad:98:6a:d8:7b:90:3e:7d:f3:
bc:d5:12:e0:6c:83:07:7c:da:b4:24:93:7d:12:dc:
74:a5:c5:c9:3c:e8:27:1f:6f:a0:74:ec:7b:2d:ec:
c1:a8:55:35:89:0a:4a:bd:3c:aa:aa:8b:20:0e:a8:
79:cd:11:bb:46:9b:2e:68:c4:e3:e6:2a:83:f2:79:
27:75:37:2c:87:9a:eb:1a:12:49:3b:e6:1b:3e:4a:
af:b0:fd:89:52:56:0e:3d:2e:15:11:1e:0f:37:a1:
6a:e2:43:7c:12:01:d3:4c:48:c1:b8:ce:d8:2c:2b:
0c:9f:b6:2c:f6:5f:35:f6:91:51:a6:67:fe:10:2c:
9c:48:34:4c:45:a5:fd:e5:d3:65:74:84:f6:dc:a4:
52:9b:c3:70:c7:eb:48:87:a8:19:d3:9c:20:c0:e0:
6b:42:af:c1:fe:85:12:1f:64:2d:ce:5f:5b:7f:d6:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:A9:F1:33:96:47:C2:D8:25:73:61:21:A1:90:EA:F3:B3:78:FF
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wg6p8TOWR8LYJXNhIaGQ6vOzeP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:f0:6e:bc:44:5f:0e:16:7d:d2:29:2e:e7:07:8f:cf:dd:
0c:45:9b:88:9e:8a:a4:a1:8e:3c:b8:be:ed:aa:a8:c1:fc:2f:
db:c4:53:d7:d9:94:3d:8b:3b:20:e1:64:8c:14:f5:86:87:fb:
f8:a4:97:ed:59:f6:9d:c7:96:ee:ae:2e:c5:07:a5:cd:42:da:
43:e0:82:9c:7b:ee:47:ff:dd:08:83:b3:a7:6f:01:90:8b:4e:
f1:ff:a1:67:8c:27:33:76:d6:f5:e5:55:03:8c:f8:9b:e1:63:
5b:51:cd:97:b5:55:36:3f:54:02:34:e9:42:29:a6:89:f5:4a:
be:76:2b:93:09:26:78:43:bc:f4:81:b3:36:73:7b:1d:ab:56:
d8:36:52:99:2f:5c:48:fd:fe:56:6f:2c:bb:e4:f5:83:2e:fc:
16:e5:78:55:31:2f:7e:3e:a2:09:b5:c7:58:e2:0f:be:da:1e:
f1:c6:19:a5:5a:62:5c:17:53:5f:a5:0e:bb:8b:c9:f6:26:1d:
eb:e3:22:99:15:93:46:b5:64:04:cf:1c:00:b4:75:3b:f8:10:
da:4f:08:4f:17:e8:7f:13:26:63:2c:d2:d8:5a:55:33:9c:5a:
09:79:c4:41:61:75:c8:b5:b3:a6:2a:5e:ab:4a:69:7c:10:9c:
3c:8f:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:01:14 2026 by rpki-client