Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa
File: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (raw, json)
Hash identifier: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=
Subject key identifier: 5A:EF:5F:AB:3B:0E:D1:ED:DD:0D:6E:E9:83:D2:16:E2:47:7C:71:AE
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A06CE3C12FEADD45ECF3041FD75CD83004
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa
Signing time: Fri 04 Sep 2026 14:47:40 +0000
ROA not before: Fri 04 Sep 2026 14:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
194.15.32.0/24 maxlen: 24
194.15.33.0/24 maxlen: 24
194.15.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:e3:c1:2f:ea:dd:45:ec:f3:04:1f:d7:5c:d8:30:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 4 14:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5aef5fab3b0ed1eddd0d6ee983d216e2477c71ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:40:7c:9f:8b:e4:fe:10:3f:70:a2:29:f5:
1a:56:b4:04:a0:9f:e6:15:54:06:de:8c:c2:05:a6:
ac:b1:70:09:1f:9c:46:a4:bf:a7:c8:ec:28:85:05:
d9:b9:55:d5:e6:6f:0e:50:b2:93:c7:c3:0d:8b:ad:
6f:06:47:e0:11:6b:a6:c1:01:14:e8:c4:80:e9:c8:
3b:31:40:a3:cc:6d:72:ec:9b:65:90:12:3d:24:c1:
8c:07:fb:0c:c8:96:4e:3e:9d:c7:6d:ff:4f:18:47:
c6:6a:29:e9:29:84:f6:80:06:f7:7c:a5:cd:1e:fb:
2b:76:31:c1:f4:76:a6:e9:99:f3:8f:d6:10:7d:60:
a8:3a:64:e7:20:d4:02:d5:9f:56:d2:b5:6f:77:da:
84:fb:11:bd:86:2d:a7:0e:51:c1:9d:ba:61:b2:a9:
88:a6:e2:e1:8f:9f:e7:78:05:3f:30:52:c0:60:82:
09:bd:fb:f3:70:52:f7:8a:60:76:09:68:3f:cf:07:
a9:0c:35:00:5d:62:76:7c:dc:ca:ca:0b:67:ef:92:
b0:ca:f4:94:22:8b:95:54:f5:df:ae:6c:67:96:ac:
db:3e:0c:94:54:0b:d3:15:60:dd:14:38:9a:55:3f:
34:b1:d5:e8:34:ec:6a:61:c5:90:14:ef:fd:d8:9b:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:5F:AB:3B:0E:D1:ED:DD:0D:6E:E9:83:D2:16:E2:47:7C:71:AE
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
194.15.32.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b6:e4:d9:91:3b:ee:23:18:a2:2a:7d:9e:ce:4f:4e:b8:eb:
63:78:f9:83:a4:fc:9f:21:07:07:0e:2c:c4:43:66:e8:78:75:
ad:1f:82:c1:2b:f4:4c:58:bd:c7:da:b2:78:f2:25:25:d1:03:
93:d1:de:0b:f5:f7:c6:ab:a9:7c:9e:f0:3d:33:0e:09:f7:01:
10:c4:16:22:d4:cd:dd:2e:30:03:9c:f5:24:73:cb:d7:5b:53:
0c:e5:a1:ba:6f:64:2c:9d:d1:55:01:da:af:2a:21:6c:1e:10:
3c:02:1a:d1:17:b7:55:a7:3e:a4:b7:e7:88:6c:f8:28:75:89:
e0:31:46:ea:18:52:08:6d:81:c4:0f:8f:72:ab:04:25:50:aa:
3e:bc:14:a0:9e:92:40:b5:b7:e3:52:f1:f9:45:6b:b4:50:8f:
79:db:91:e5:50:fa:48:77:7a:98:6e:ab:35:e8:eb:d5:12:2d:
97:4a:da:9a:09:82:6c:ac:8d:84:4e:4d:ae:bc:10:d1:a0:e2:
17:41:4a:00:31:de:d3:40:44:9c:64:fa:bd:71:28:d1:c8:67:
f0:03:88:1e:3a:ae:70:77:67:31:ac:d2:6c:72:ce:a7:a9:7e:
a1:f0:9c:37:95:e4:0c:26:0d:a4:4e:e1:a9:42:11:1d:b8:99:
09:ba:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:37:39 2026 by rpki-client