Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/wfsD9iN2MalMoEehpExpxpzcNHY.roa
File: wfsD9iN2MalMoEehpExpxpzcNHY.roa (raw, json)
Hash identifier: S9kLLOoXNyv5Q4i4uGfLixqBHytrsNDpY4/xVC8e+1U=
Subject key identifier: C1:FB:03:F6:23:76:31:A9:4C:A0:47:A1:A4:4C:69:C6:9C:DC:34:76
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0182F4BF8EA6AA866443734D9E9301F1C
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/wfsD9iN2MalMoEehpExpxpzcNHY.roa
Signing time: Wed 19 Aug 2026 04:02:27 +0000
ROA not before: Wed 19 Aug 2026 04:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216061
IP address blocks: 94.184.0.0/24 maxlen: 24
94.184.1.0/24 maxlen: 24
94.184.2.0/24 maxlen: 24
94.184.3.0/24 maxlen: 24
94.184.5.0/24 maxlen: 24
94.184.7.0/24 maxlen: 24
94.184.8.0/24 maxlen: 24
94.184.25.0/24 maxlen: 24
94.184.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:2f:4b:f8:ea:6a:a8:66:44:37:34:d9:e9:30:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 19 04:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1fb03f6237631a94ca047a1a44c69c69cdc3476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:18:04:8c:15:d0:34:fa:b6:fa:a2:1f:b6:
e2:ad:da:6b:b7:75:e5:29:ad:7d:24:8e:21:f0:e9:
9e:19:7f:e8:2a:d4:fc:20:79:8c:5c:2c:a1:c9:81:
a5:17:18:18:21:ec:b6:fa:6d:bc:85:bd:31:e9:3a:
bc:d1:57:dd:36:aa:8b:a9:cd:50:95:a4:69:26:57:
22:3b:ec:ce:17:86:d9:42:b5:ab:d4:99:2b:ba:fd:
5d:82:09:d5:a5:2f:54:f0:f6:7c:11:5d:64:bd:41:
3d:df:8e:fa:2b:68:b9:da:5a:b2:6d:c6:3e:ce:c8:
ab:e3:8e:81:b7:48:ff:18:ed:8c:6c:7b:43:4f:09:
41:36:2d:2b:5a:78:1e:ed:bb:10:59:82:56:bd:cb:
d0:47:35:af:48:4f:90:c9:a0:f0:dd:05:20:d4:d8:
a5:e3:c4:17:12:d1:30:d8:51:54:31:1a:0e:5c:50:
6e:e9:bb:cd:72:57:67:51:7c:1b:66:33:a1:18:6e:
12:b7:af:00:a3:8f:b0:ef:07:69:54:48:a2:29:25:
16:8a:2d:1c:70:6d:da:91:e6:ab:d6:7e:f5:c8:21:
05:9e:4e:77:03:6f:33:e2:5c:b9:8d:96:d4:a4:1a:
2d:61:ed:3b:57:da:0d:fb:e1:70:5a:15:c6:64:76:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FB:03:F6:23:76:31:A9:4C:A0:47:A1:A4:4C:69:C6:9C:DC:34:76
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/wfsD9iN2MalMoEehpExpxpzcNHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/22
94.184.5.0/24
94.184.7.0-94.184.8.255
94.184.25.0/24
94.184.27.0/24
Signature Algorithm: sha256WithRSAEncryption
96:77:8e:ca:0b:48:30:bc:9b:83:05:67:87:12:fe:00:6b:7e:
63:f0:f7:a4:a1:9e:7c:ee:98:e3:69:e4:d3:cd:4f:aa:6a:00:
75:11:17:f0:f1:4d:b3:72:62:f9:d5:86:7c:2d:47:e7:15:0a:
58:5a:af:28:db:90:ee:0a:94:68:94:06:78:58:98:f0:08:cb:
0b:ce:b8:da:b1:da:7b:08:d7:72:ce:f5:8a:5e:0c:1c:78:9e:
50:00:87:3e:bd:53:a4:be:87:e9:ce:ae:e3:98:0a:f8:c5:16:
b2:74:91:72:d9:c7:ea:da:78:99:1a:4b:e3:b7:b3:b2:63:a4:
b4:2b:42:a7:06:ef:4d:a7:5e:be:2e:e3:35:98:b6:f6:e0:39:
64:4d:75:cf:d2:b1:98:31:60:c5:08:4c:cd:a0:24:7d:42:d8:
3d:1b:96:96:6a:84:61:71:3b:60:08:f2:e6:f1:18:98:96:e1:
07:b7:af:5b:12:09:5b:a2:61:61:5e:f0:58:2b:2a:57:d2:71:
2a:b4:3d:ef:fa:dd:a7:54:dd:08:48:8d:47:16:81:c8:d3:26:
8c:15:0b:80:cb:a5:39:0b:1d:5d:62:9a:b9:f5:5d:ce:63:8d:
13:37:22:25:b8:e1:f2:72:99:26:b8:7f:8c:1a:07:67:0f:8b:
1e:a2:31:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:29 2026 by rpki-client