Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wGMUVNncpYfWtK4-oyStFeTWsBk.roa
File: wGMUVNncpYfWtK4-oyStFeTWsBk.roa (raw, json)
Hash identifier: rt+8kuiSOGaDXCD9dzirhX9La3uLydkllJTxo+PVxQs=
Subject key identifier: C0:63:14:54:D9:DC:A5:87:D6:B4:AE:3E:A3:24:AD:15:E4:D6:B0:19
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019ED085626B4EFCD4422348D2D99954CB4A
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wGMUVNncpYfWtK4-oyStFeTWsBk.roa
Signing time: Tue 16 Jun 2026 13:01:02 +0000
ROA not before: Tue 16 Jun 2026 13:01:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8254
IP address blocks: 5.34.178.0/23 maxlen: 23
46.28.71.0/24 maxlen: 24
82.117.252.0/23 maxlen: 23
82.117.254.0/24 maxlen: 24
85.90.197.0/24 maxlen: 32
85.90.198.0/24 maxlen: 24
193.238.154.0/24 maxlen: 24
217.12.194.0/24 maxlen: 32
217.12.204.0/24 maxlen: 32
2a05:9405::/32 maxlen: 32
2a12:6fc3::/32 maxlen: 32
2a12:6fc4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:85:62:6b:4e:fc:d4:42:23:48:d2:d9:99:54:cb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jun 16 13:01:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0631454d9dca587d6b4ae3ea324ad15e4d6b019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:18:95:50:e5:b2:54:b9:4b:20:b7:76:b0:
77:95:c9:06:c3:82:48:82:12:80:56:4c:77:da:df:
1b:f8:ae:69:c1:4b:78:86:2c:7e:eb:f8:98:dd:29:
13:68:d2:50:51:c5:7a:aa:5c:57:26:c3:79:bc:a5:
3c:63:81:59:41:0a:18:ea:b8:4f:9b:a1:ef:3b:18:
6c:20:dd:3c:eb:8a:8c:f0:16:bd:ec:5b:6c:87:01:
d1:9e:81:35:23:23:a9:86:64:ef:89:b0:92:d9:d1:
0e:1a:32:1e:9a:33:59:df:fc:e8:79:aa:10:66:18:
3c:92:71:a2:a1:6d:17:20:9a:34:f8:2a:8a:b2:35:
58:1d:2f:aa:94:47:94:aa:5a:ff:f6:cc:64:fa:12:
eb:54:14:e0:ab:2a:64:2a:b6:c2:62:9d:6f:19:be:
a6:cc:88:0f:c9:12:0f:f1:3d:7d:39:f0:ca:43:3d:
28:ea:87:7a:31:78:08:54:b9:8b:43:8b:52:ad:9b:
d1:a2:24:81:90:71:03:25:18:92:37:c4:57:af:37:
b4:21:f1:3c:8a:a9:df:69:89:ad:8e:ba:a4:fd:84:
97:2c:fc:5b:16:b7:37:81:d2:6d:92:a3:e5:f0:da:
9b:c5:49:e2:26:b9:8a:17:d1:16:e4:d9:b6:c2:02:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:63:14:54:D9:DC:A5:87:D6:B4:AE:3E:A3:24:AD:15:E4:D6:B0:19
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wGMUVNncpYfWtK4-oyStFeTWsBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.178.0/23
46.28.71.0/24
82.117.252.0-82.117.254.255
85.90.197.0-85.90.198.255
193.238.154.0/24
217.12.194.0/24
217.12.204.0/24
IPv6:
2a05:9405::/32
2a12:6fc3::-2a12:6fc4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:6d:02:ba:62:31:94:dc:7a:a5:4e:cd:c9:8a:75:f8:7e:4a:
58:e1:0c:da:bc:cd:00:cb:0d:30:d0:53:ce:b0:57:1d:fa:62:
16:70:c0:85:42:da:1d:c7:c1:93:7f:1a:19:5a:b1:91:15:18:
55:93:f6:3c:4d:58:78:bf:33:73:16:f9:bb:02:0d:16:ab:6a:
7e:da:c7:46:54:19:d1:57:df:ca:fb:19:f9:4c:7e:fb:36:a9:
6d:f4:a5:6c:65:32:5e:cd:4b:62:b1:24:62:e6:1b:41:d8:15:
00:b9:be:c2:d5:7c:a4:9d:2c:be:15:39:c3:99:22:08:d8:36:
51:36:5e:a3:0a:c1:28:07:43:1b:40:95:18:8e:07:8c:f1:30:
53:67:49:a7:7a:09:d8:22:3e:8c:72:40:e4:0e:33:e1:ca:6e:
73:ed:a4:0b:1f:b7:c0:46:d9:dd:0a:83:b4:1f:42:56:6c:30:
78:c7:38:41:9d:87:c8:97:d2:77:0d:a5:3c:95:30:be:15:d3:
b9:1f:9a:9d:60:15:9b:ef:5e:20:00:e4:c3:b3:46:ea:f0:03:
1e:87:fc:cb:0b:52:c5:af:04:7c:da:4d:b0:a3:47:d2:be:61:
52:69:e2:39:20:6e:65:b1:e0:8d:17:30:14:85:87:18:e4:a8:
aa:6a:3b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:21:47 2026 by rpki-client