Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wvYwCiwINMmZUx--TYMXmAOD2xQ.roa
File: wvYwCiwINMmZUx--TYMXmAOD2xQ.roa (raw, json)
Hash identifier: q7KgiVuY5Jl96ITaEeKJfL7HWZP4ry4NjyLxvM6e9As=
Subject key identifier: C2:F6:30:0A:2C:08:34:C9:99:53:1F:BE:4D:83:17:98:03:83:DB:14
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11174BEF5B05D11FC456B7955BF3C097D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wvYwCiwINMmZUx--TYMXmAOD2xQ.roa
Signing time: Tue 06 Oct 2026 13:43:46 +0000
ROA not before: Tue 06 Oct 2026 13:43:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 77.105.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:74:be:f5:b0:5d:11:fc:45:6b:79:55:bf:3c:09:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 6 13:43:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2f6300a2c0834c999531fbe4d8317980383db14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:40:a0:88:6a:8d:bf:5e:2e:66:1b:89:fe:
9f:d6:a2:13:52:27:1f:be:f6:2e:18:5d:df:6f:41:
99:5b:63:ac:71:a5:75:0f:5d:47:3a:b3:e0:ab:27:
f3:ca:c5:60:8c:28:58:3f:36:00:b7:29:dc:27:4d:
1d:f3:c3:cc:cb:bb:64:99:68:43:17:3c:8c:ab:47:
16:73:09:8d:83:e3:0d:21:f1:5e:c4:e5:9e:4d:62:
0f:da:44:ae:df:12:04:87:5d:59:86:25:63:c0:33:
1c:ae:b3:cb:24:58:0f:06:c5:a4:ea:62:c1:e6:3d:
50:eb:72:49:67:2c:53:09:97:84:6b:2f:0c:d5:8f:
85:17:67:09:1a:e4:d7:60:94:2b:d5:4f:fd:8d:61:
e7:b1:73:c6:8e:c7:99:ce:a1:0e:9e:ef:d4:99:81:
3f:a7:82:94:de:29:40:b0:da:5c:b7:26:4f:44:c7:
a9:50:4f:ff:de:92:af:0c:51:d5:50:21:67:9a:8b:
34:de:42:ec:42:21:77:39:13:b0:b6:ef:57:89:7a:
b6:05:dd:e2:96:ba:fb:a6:84:57:22:73:26:d9:d2:
1c:ba:18:3e:c3:0c:6d:5b:13:18:52:c3:bf:f8:86:
1a:29:b0:ec:de:31:6e:6a:9f:73:73:2b:89:51:81:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:30:0A:2C:08:34:C9:99:53:1F:BE:4D:83:17:98:03:83:DB:14
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wvYwCiwINMmZUx--TYMXmAOD2xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:03:cc:2b:e3:66:7a:fd:4a:b7:b6:e5:87:c3:37:2c:86:54:
58:27:52:95:ae:ef:c0:6f:5c:9a:5e:b1:d1:2a:cb:0a:57:c2:
1f:ab:ed:2f:4a:01:08:fd:6b:e2:d5:4e:bc:09:7a:9b:3e:5d:
ba:6b:66:ae:01:37:7a:90:1d:85:42:9c:37:88:69:9e:30:ab:
f2:6a:70:53:34:ba:59:40:95:3d:c3:c0:80:13:c2:8f:3c:56:
f1:2a:3f:b1:07:9d:71:1a:dc:bf:26:29:ce:36:42:44:9a:e8:
8c:b8:8d:a9:cd:0b:36:a3:6e:01:77:ff:51:e1:7d:8e:5e:14:
f4:2b:e3:27:1e:2f:60:39:f8:77:87:aa:87:f6:8c:fb:dc:fe:
11:77:a7:5e:8f:7a:cd:47:5f:8d:ff:ad:bc:e0:b3:d2:8c:3f:
44:67:6b:c6:9d:61:5b:c2:88:96:f1:3a:d8:ab:01:1d:d8:1e:
39:f9:ac:0a:4a:93:80:bd:44:5d:2d:20:0d:62:19:e9:4d:ff:
f8:61:8c:3a:ed:df:b5:f0:d1:e9:42:63:f5:40:0a:15:ba:59:
12:48:fd:26:aa:1c:24:48:86:87:ca:65:e2:87:be:1f:c8:74:
72:e1:3a:19:4d:f9:4c:19:23:e8:e7:4f:1f:31:81:b5:69:60:
cf:24:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:46:59 2026 by rpki-client