Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/wBI_NU2QpXV6NMet63ptsggHiP4.roa
File: wBI_NU2QpXV6NMet63ptsggHiP4.roa (raw, json)
Hash identifier: Cnsdq6Kk8yjq887iBv+JHpuDFWafcOA5VR5IEEIgGWo=
Subject key identifier: C0:12:3F:35:4D:90:A5:75:7A:34:C7:AD:EB:7A:6D:B2:08:07:88:FE
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 01A07FD8F62145A1B0C1A799A7278D7136F2
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/wBI_NU2QpXV6NMet63ptsggHiP4.roa
Signing time: Tue 08 Sep 2026 07:08:40 +0000
ROA not before: Tue 08 Sep 2026 07:08:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198965
IP address blocks: 194.93.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:d8:f6:21:45:a1:b0:c1:a7:99:a7:27:8d:71:36:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Sep 8 07:08:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0123f354d90a5757a34c7adeb7a6db2080788fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:5d:55:9b:1e:b7:21:8f:76:5e:ce:17:0b:
e8:7c:a7:12:45:62:6c:fc:5c:a5:e8:91:2f:d9:d5:
50:3c:3a:ce:c6:63:e3:b1:c9:dd:30:98:e7:48:49:
38:d1:42:16:fe:62:44:15:2a:7d:cc:c9:c1:99:18:
da:26:ef:81:31:a4:25:2f:bf:30:67:09:99:33:bc:
67:cd:3e:2f:c2:ff:b9:c1:05:18:ea:74:35:19:1b:
1a:0a:51:be:e7:ba:b9:81:86:f5:a3:bf:54:2a:b7:
ec:3d:d4:bf:59:1a:7a:6e:92:e3:fa:0c:d8:77:cb:
4e:93:0b:19:cc:6c:ba:2c:ff:5a:36:18:83:f4:ae:
b2:5c:99:55:ab:b1:46:bc:cf:03:08:e5:41:97:91:
09:be:96:6f:3d:ff:df:2f:1b:6b:88:40:1d:c4:aa:
af:4a:9a:1d:c9:c8:29:d1:e2:cb:77:6c:f0:cb:42:
85:f2:0e:a9:e4:4c:64:37:a8:41:1b:42:ba:d4:20:
e2:62:1c:6a:af:93:9a:41:e1:37:88:b5:2a:6f:79:
6b:43:ba:17:7c:61:c6:ad:b8:42:ff:64:f4:6e:52:
3e:0b:44:2e:52:e6:24:6d:ac:4c:27:3c:95:27:47:
91:40:02:dd:a5:c5:d3:2b:dd:a2:8b:46:c7:56:48:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:12:3F:35:4D:90:A5:75:7A:34:C7:AD:EB:7A:6D:B2:08:07:88:FE
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/wBI_NU2QpXV6NMet63ptsggHiP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
64:68:7b:e2:f5:5a:c0:55:25:13:46:b2:4b:85:91:df:6a:ac:
b2:49:dc:a2:19:fb:b6:f2:7b:1e:01:9d:c9:83:5f:50:93:12:
7b:64:35:8d:d5:05:63:a2:dd:de:a5:b8:2c:46:c9:c0:6f:4e:
da:c7:55:26:c3:76:31:dd:7f:78:cc:13:88:d1:d7:20:61:38:
40:52:1a:ed:8c:8d:d3:63:14:33:ae:f7:a6:7e:38:df:82:71:
84:87:2e:82:68:59:c7:f6:e4:fa:b5:6b:25:c9:87:2a:59:92:
0f:f5:3d:d0:42:0c:1c:d2:7f:ad:35:36:67:35:31:b3:4c:c3:
2d:5b:0f:95:e1:1c:0c:f5:18:73:69:ee:e8:14:9d:84:63:e0:
44:66:ba:b4:57:6e:85:19:6e:bb:52:58:ee:dc:eb:db:4a:cb:
37:4a:20:5d:e5:47:ab:0d:d2:de:79:de:9b:b3:8f:19:86:5d:
bc:c8:51:8a:47:4e:50:86:17:54:77:02:64:20:b1:36:55:f9:
21:15:b4:38:75:fd:9a:c7:ac:df:fd:c7:96:a5:36:7b:11:37:
f7:20:5b:6c:c9:f7:20:16:52:47:ed:8b:47:fc:67:11:69:c7:
cc:5e:10:d2:28:94:20:11:c1:a6:9c:c2:bd:27:83:bf:7f:1d:
75:87:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:47:30 2026 by rpki-client