Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wahMcpyy0RB4RFIpMXFJKR7fiSE.roa
File: wahMcpyy0RB4RFIpMXFJKR7fiSE.roa (raw, json)
Hash identifier: lx36gRzBU1ZKWUNDBFdVP4GOl+5penWcYPy8Djj7GTQ=
Subject key identifier: C1:A8:4C:72:9C:B2:D1:10:78:44:52:29:31:71:49:29:1E:DF:89:21
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019C41CB5E55329C93B2AC4E851D2A736725
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wahMcpyy0RB4RFIpMXFJKR7fiSE.roa
Signing time: Mon 09 Feb 2026 09:46:12 +0000
ROA not before: Mon 09 Feb 2026 09:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201392
IP address blocks: 80.71.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:cb:5e:55:32:9c:93:b2:ac:4e:85:1d:2a:73:67:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 9 09:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1a84c729cb2d11078445229317149291edf8921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:13:0d:ca:b6:bc:77:0d:a9:22:18:f8:8d:
98:de:e1:0d:89:65:12:f4:6d:07:2c:f0:7b:75:3a:
ce:0b:96:ed:9d:4e:3e:db:f6:b7:9a:e6:21:46:60:
11:86:43:06:f0:7e:f2:ab:76:e2:c5:1d:69:46:06:
7b:c6:e5:f3:bd:28:39:57:0e:79:05:8a:1e:b5:57:
6d:96:ea:d5:39:17:4a:28:96:9a:bf:a0:b3:0c:54:
c7:14:40:0f:8f:35:46:49:ea:cd:e2:95:e1:0e:02:
56:70:8b:04:a6:bb:3e:67:88:33:f6:00:6f:3d:c0:
cc:fd:57:b5:fc:f7:e4:56:95:f8:98:87:c8:b1:f7:
49:13:9d:99:87:a4:55:ac:9c:06:43:d6:8c:5b:de:
56:cf:d8:ef:c0:1c:84:d8:c8:78:5e:44:23:e5:fe:
74:54:7d:31:88:0e:ca:a9:38:81:f0:19:2d:2c:be:
2f:d9:32:69:8b:18:5d:c7:36:ca:51:fd:ec:9c:82:
67:23:be:a3:3a:7a:f5:76:04:0d:36:3d:03:ff:b5:
38:d7:d3:c4:bc:eb:34:14:ba:58:a0:af:2b:46:c1:
f8:4c:55:09:33:4d:77:3a:73:bb:cb:6a:1a:b8:cc:
89:db:9f:4e:5c:8b:9a:ec:33:d3:18:f3:48:30:ac:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:4C:72:9C:B2:D1:10:78:44:52:29:31:71:49:29:1E:DF:89:21
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wahMcpyy0RB4RFIpMXFJKR7fiSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:47:37:2c:c2:b8:37:76:a0:7f:17:99:e4:bd:00:98:52:23:
6e:0a:29:ab:47:a2:8a:1a:38:40:65:6a:a6:e1:07:6b:e3:d1:
91:5b:3c:00:30:68:84:2d:e3:e7:80:81:94:f5:70:fb:c0:bb:
83:1c:bd:4d:12:9e:35:be:28:1a:42:dd:79:9d:a8:4a:0f:af:
e5:f1:f7:04:b9:1c:fe:66:67:0d:5b:85:db:38:a7:d8:5a:86:
99:5f:c9:7f:55:22:64:5b:d9:cf:92:8a:3c:31:d8:52:df:20:
8d:fd:c1:6b:7b:2d:4e:56:25:1b:9b:d3:da:01:10:fa:14:e8:
2a:48:44:3e:55:ae:97:02:09:0f:c4:e6:12:4a:de:a7:38:0b:
81:1d:33:7f:86:bf:e4:c9:50:3b:36:53:24:c8:9f:2f:34:e8:
48:11:9a:97:27:5a:dc:70:ae:57:37:c6:ab:a8:3f:97:92:27:
fa:2f:37:34:62:39:26:2c:b9:95:23:c6:2e:c1:3f:ce:9e:39:
26:cb:d9:bf:13:60:0e:dd:f2:b0:d2:fd:dd:a2:b1:25:59:d8:
f4:4f:ca:1b:e8:f2:67:71:48:f0:e5:7b:fa:8a:8e:37:da:c1:
be:05:e9:38:76:10:0b:5f:a6:45:f0:14:26:3d:9b:31:a9:eb:
40:e0:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:35:39 2026 by rpki-client