Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/wDORFv0RcHWyy9NFnwduomTFBUU.roa
File: wDORFv0RcHWyy9NFnwduomTFBUU.roa (raw, json)
Hash identifier: z241EEzHvFqPE7UrD74ADPqD5mF1xh2gDKHnk7XYF2w=
Subject key identifier: C0:33:91:16:FD:11:70:75:B2:CB:D3:45:9F:07:6E:A2:64:C5:05:45
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01A120BACC659C6EA6E1176BB7B931ABEDFE
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/wDORFv0RcHWyy9NFnwduomTFBUU.roa
Signing time: Fri 09 Oct 2026 12:54:35 +0000
ROA not before: Fri 09 Oct 2026 12:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59956
IP address blocks: 185.235.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:ba:cc:65:9c:6e:a6:e1:17:6b:b7:b9:31:ab:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Oct 9 12:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0339116fd117075b2cbd3459f076ea264c50545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:37:28:0f:d9:a5:a8:26:d7:6f:26:e5:b1:
51:f2:23:34:27:61:f3:42:b6:db:0b:85:88:8c:50:
68:04:70:24:63:a3:f8:04:dd:13:05:ce:f8:bc:e7:
d5:b4:18:ed:a5:49:9b:94:e4:57:bb:cb:25:04:e5:
7c:2e:48:f9:1e:15:ab:74:01:56:6f:08:61:4d:43:
33:3c:09:8b:70:48:24:0e:42:6e:38:f8:e6:31:e2:
5f:3e:39:11:fb:63:89:97:e1:23:e1:8d:b2:51:04:
22:2e:f9:49:29:e4:8d:3d:1a:13:40:12:70:68:db:
53:7d:47:a8:1e:ec:25:6b:3e:2d:2c:61:c2:cd:52:
32:f9:b0:a2:92:df:24:39:2d:9e:00:52:dc:c3:0b:
f3:d0:26:58:38:43:d1:aa:16:75:d6:0e:14:b2:6e:
75:7c:a8:84:2a:52:73:f1:7c:ed:04:d0:f9:b6:99:
a4:dc:e0:8e:30:ba:89:8a:29:1f:a4:68:4a:c3:2c:
c9:24:6a:2c:de:b9:13:a8:05:aa:d2:7a:1b:83:cd:
6a:71:b9:fc:1e:2d:56:9b:1c:9a:45:85:bd:a7:4c:
93:c7:31:55:da:3b:c6:f0:02:6a:14:bb:0c:eb:89:
eb:9d:dc:9c:9f:06:54:fe:72:13:7b:19:18:ef:a5:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:33:91:16:FD:11:70:75:B2:CB:D3:45:9F:07:6E:A2:64:C5:05:45
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/wDORFv0RcHWyy9NFnwduomTFBUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:65:b9:18:e7:c9:fa:b2:37:9c:57:be:18:4a:ed:a0:c1:45:
3a:b1:17:a8:bc:4f:99:22:7b:81:d3:d6:de:a5:d2:83:de:24:
c2:c2:18:09:1d:8d:18:6b:d6:11:e5:d8:ac:e7:15:86:31:95:
f7:e7:b7:59:dc:18:43:cc:7c:9d:2a:3a:c8:56:ce:c5:af:9e:
53:da:e7:0f:45:e6:ca:8e:0c:af:a3:04:89:01:17:e5:7f:7f:
1e:7d:d5:da:7d:27:39:42:d5:c9:a1:be:aa:94:9b:46:e8:d9:
f5:cd:4f:ed:57:85:d3:d8:1c:3e:e8:e7:65:d3:ef:8b:63:a3:
20:c5:04:e0:5e:1b:44:e3:89:ea:8e:f8:b3:31:93:c3:ef:f6:
10:e7:6f:8c:d4:e3:70:b2:3d:af:59:ea:c2:3c:f4:b8:30:ed:
98:3a:d7:ec:5e:12:b5:51:57:31:07:88:d7:76:4f:86:5f:20:
9f:8c:66:22:b3:57:53:ff:09:41:f1:24:26:64:e1:52:3e:58:
fe:aa:4f:5d:b1:a2:9f:ae:48:da:71:05:c9:9e:f8:f8:63:5e:
20:17:32:34:b8:e1:c3:d8:e8:b6:89:75:74:63:fc:19:b1:c2:
e9:2e:04:1c:3f:e2:9f:89:de:06:5d:df:7f:55:8e:43:b4:91:
a6:8e:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:09:41 2026 by rpki-client