Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/7Y44MOwzJmz5iRw5y_JduCcKKUk.roa
File: 7Y44MOwzJmz5iRw5y_JduCcKKUk.roa (raw, json)
Hash identifier: 2vcmpHN+5kJCm/08etkIw8U2CdDO3ehswhHinxrPXXA=
Subject key identifier: ED:8E:38:30:EC:33:26:6C:F9:89:1C:39:CB:F2:5D:B8:27:0A:29:49
Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial: 019CE2CC611A2A4EC65BD5604D5FEC1B94E8
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/7Y44MOwzJmz5iRw5y_JduCcKKUk.roa
Signing time: Thu 12 Mar 2026 16:06:10 +0000
ROA not before: Thu 12 Mar 2026 16:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49178
IP address blocks: 185.192.180.0/24 maxlen: 24
185.237.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:cc:61:1a:2a:4e:c6:5b:d5:60:4d:5f:ec:1b:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Validity
Not Before: Mar 12 16:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed8e3830ec33266cf9891c39cbf25db8270a2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:69:7b:35:4b:fe:3a:73:e3:13:32:49:8d:
d4:ae:ca:3c:9b:d1:00:bd:55:b8:67:48:a2:b1:6d:
fe:ec:ed:5f:19:0a:f7:b8:ce:8d:86:e7:1a:31:3a:
c7:c0:47:cf:55:a0:1d:d8:cc:4d:c6:2f:2a:a8:d6:
5c:b5:5f:73:e9:42:f2:99:ad:74:a4:01:f8:e7:fc:
4d:79:e0:b1:08:ac:d9:c0:a1:85:a3:99:3a:40:7d:
ec:44:b2:20:b8:f5:bc:20:9f:9d:20:d1:3b:1e:5b:
36:18:0e:d0:fa:ba:32:9f:0a:79:c5:88:a8:8f:c6:
c3:fd:5e:30:51:d9:31:9c:1c:d1:85:4a:f6:92:4b:
f7:6d:bc:c6:73:d7:a3:83:3c:d4:2c:47:df:65:60:
bd:a7:19:d0:f1:3a:fc:c4:7a:42:6b:e9:74:c9:bb:
8e:b4:cb:49:67:a9:2e:d5:cf:c3:0d:2a:3c:34:49:
30:7d:dd:9f:67:a8:d6:3a:44:e1:f4:f7:6e:40:9b:
59:50:9d:61:9d:ce:12:22:70:79:8e:b0:11:e0:ff:
5f:b3:4d:17:ac:f3:10:31:f0:8d:04:1e:db:94:27:
29:cd:05:8a:99:b7:1e:27:13:f3:5b:20:de:03:50:
3c:47:c6:dc:03:df:70:37:cf:50:18:86:87:c1:cf:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:38:30:EC:33:26:6C:F9:89:1C:39:CB:F2:5D:B8:27:0A:29:49
X509v3 Authority Key Identifier:
keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/7Y44MOwzJmz5iRw5y_JduCcKKUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.180.0/24
185.237.180.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c4:68:a4:81:15:fb:55:79:67:92:37:9e:1a:5f:6a:d1:4c:
8f:4d:b5:52:67:46:91:d6:d6:e7:9a:4c:66:41:54:1d:10:ad:
cd:a1:5b:29:7c:2c:85:62:15:4e:8b:38:f6:1c:b1:ec:f9:44:
e1:ff:de:27:e4:9f:be:d5:9a:7f:95:54:34:4b:59:7d:c5:49:
26:52:56:c9:a0:d9:00:05:97:34:9f:1a:27:26:aa:95:f2:8e:
7f:14:15:a9:1d:64:64:57:83:d4:de:84:ec:9a:f9:11:a9:64:
bb:0e:18:1d:a4:28:94:d0:f2:20:0d:22:34:3c:1e:88:4e:64:
17:9e:11:2a:a2:2d:3d:e9:05:59:ef:d8:32:2e:8d:ab:bf:d9:
0e:08:f0:03:23:c1:57:2c:e9:48:35:09:96:7e:bd:cd:74:6b:
41:0e:82:16:c3:f1:53:fd:ca:86:c5:67:26:77:e0:f9:c1:40:
0f:32:85:89:94:27:92:89:4a:b0:25:e1:bb:ff:f4:83:89:23:
07:4f:31:57:76:ec:f4:da:43:dc:d5:11:d0:3d:89:4a:91:77:
51:40:ae:f4:47:51:67:1a:22:b6:1b:00:0d:29:98:ab:e6:0a:
f3:31:b1:4b:f4:f3:98:72:8e:c9:4d:84:b1:ba:fe:61:e3:fe:
c2:9f:12:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:21:50 2026 by rpki-client