Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa
File: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (raw, json)
Hash identifier: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=
Subject key identifier: C0:F2:7F:6D:67:2A:89:3E:51:C9:CD:8F:AC:BC:FE:46:5C:49:15:F9
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019C495AE01C1D3979296852DD933BD4CD9F
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa
Signing time: Tue 10 Feb 2026 21:00:18 +0000
ROA not before: Tue 10 Feb 2026 21:00:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 193.222.61.0/24 maxlen: 24
2001:67c:12b4::/48 maxlen: 48
2a0a:a000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:49:5a:e0:1c:1d:39:79:29:68:52:dd:93:3b:d4:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Feb 10 21:00:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0f27f6d672a893e51c9cd8facbcfe465c4915f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:f1:18:a6:f6:00:cc:34:ae:fa:09:80:ef:
bb:ce:64:fb:24:92:a9:1f:7a:7d:8a:38:89:bf:57:
8e:02:6e:da:20:52:a1:c1:f1:6c:0a:8d:82:24:1f:
37:48:a3:e1:ff:1b:46:42:12:16:8c:57:8e:de:ef:
c0:7d:e0:d6:70:06:95:4d:f6:3c:08:87:2f:e2:57:
d2:f5:be:2c:b6:45:51:4c:54:cb:88:7e:41:df:31:
7b:59:85:47:16:a9:8c:06:87:07:f1:94:14:5d:fb:
bb:0b:89:ef:47:3d:ac:cb:29:92:66:d9:35:5e:af:
b5:cf:ec:c1:69:b9:5e:e5:84:9e:b9:d7:7d:f4:ff:
fa:57:bc:69:c1:75:21:37:f0:79:04:40:c5:2d:10:
79:69:1a:16:5a:55:0f:5f:7a:c8:13:4e:68:19:e1:
2a:1f:42:ab:94:80:a2:7c:44:d1:cc:95:60:b0:57:
9c:5b:f3:5f:e8:97:ef:d9:c0:e0:f2:78:0e:15:71:
3f:3c:d1:73:06:23:fd:60:75:b0:06:25:5a:06:fc:
bd:d8:ee:7c:02:51:94:0c:41:ee:8a:92:58:7b:fe:
96:94:88:24:2a:a2:8a:8c:43:50:eb:bf:ea:58:c8:
9b:f9:6a:24:64:0d:f9:a2:a4:22:e7:21:5a:15:29:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:7F:6D:67:2A:89:3E:51:C9:CD:8F:AC:BC:FE:46:5C:49:15:F9
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.61.0/24
IPv6:
2001:67c:12b4::/48
2a0a:a000::/40
Signature Algorithm: sha256WithRSAEncryption
2d:08:ce:19:af:6a:fb:29:0d:36:2f:da:c6:0c:7d:9b:53:30:
48:dd:6e:16:15:59:50:7d:38:59:12:6c:32:e0:3d:b7:22:c6:
8a:1f:7d:f3:bd:ef:01:87:62:8b:4d:5d:d9:a5:8a:5f:2f:66:
29:18:74:4f:d1:2c:73:e4:d5:98:3b:7b:35:5a:38:01:06:1a:
bb:0b:d5:7f:6e:86:ec:50:f3:90:ea:96:c1:86:a2:94:25:47:
05:cd:3f:48:6b:3d:46:44:17:41:31:df:ec:c7:0f:53:58:63:
08:d0:3b:b7:29:b5:74:4b:85:1b:d9:a9:f0:d8:9e:f6:19:8a:
59:26:c0:70:d1:3f:40:a9:cb:9c:00:1e:62:f7:de:fe:8d:8f:
79:59:81:ef:5f:65:74:5b:0e:30:23:d8:91:f1:3d:1c:a5:5a:
d1:58:f9:a5:a6:ed:31:e8:ec:b4:f7:80:e8:d4:a9:80:7f:a5:
c9:b0:ed:3d:24:65:e7:cf:40:2d:cf:ec:d8:a5:da:36:55:b5:
99:71:05:1c:16:bc:dc:96:5b:0e:e2:8b:88:6c:f9:02:4a:5d:
c6:27:ab:f2:14:0a:15:18:59:08:7d:1d:9b:34:cf:76:c2:23:
91:94:16:50:b4:bf:59:95:5a:c3:35:19:6d:3b:9c:78:20:49:
63:e0:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:34 2026 by rpki-client