Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/fWjrIUWb0Uxvfjvry6nROOIzUx4.roa
File: fWjrIUWb0Uxvfjvry6nROOIzUx4.roa (raw, json)
Hash identifier: gTxk/gRGNSiFKqGiLyaw7PhZ38jlD9pkvVrGhe/pqVI=
Subject key identifier: 7D:68:EB:21:45:9B:D1:4C:6F:7E:3B:EB:CB:A9:D1:38:E2:33:53:1E
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019E4AD9F662E14C563C858EA5D08DAA745B
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/fWjrIUWb0Uxvfjvry6nROOIzUx4.roa
Signing time: Thu 21 May 2026 14:04:18 +0000
ROA not before: Thu 21 May 2026 14:04:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203989
IP address blocks: 194.113.40.0/23 maxlen: 23
194.113.40.0/24 maxlen: 24
194.113.41.0/24 maxlen: 24
2a00:1830::/43 maxlen: 43
2a00:1830::/44 maxlen: 44
2a00:1830:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:d9:f6:62:e1:4c:56:3c:85:8e:a5:d0:8d:aa:74:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: May 21 14:04:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d68eb21459bd14c6f7e3bebcba9d138e233531e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:2a:44:35:c0:82:42:da:a1:60:1c:30:13:
d7:8e:61:66:7b:c0:f6:73:c5:3b:d8:2c:49:f9:5b:
67:e9:bf:e0:bf:fb:33:7d:d3:91:ba:1c:33:81:70:
8f:d5:e4:a3:0d:e8:be:b9:33:ab:a6:04:57:bf:bb:
b7:16:96:39:1f:bb:1f:84:e1:cc:7e:14:60:f3:eb:
1b:1a:7c:02:24:f8:98:d0:27:5a:57:f7:44:e5:b3:
b9:1c:7c:26:f4:48:4d:06:a7:5c:df:fb:be:24:e2:
9a:7a:a9:67:f2:51:45:6c:db:24:58:f9:96:0a:19:
61:40:e1:6f:92:6f:c1:f8:41:58:a4:0d:16:57:b0:
61:ce:e7:5a:65:7c:51:60:21:b4:51:3d:6e:f3:89:
3b:78:42:11:f1:ac:35:44:d3:91:8d:2b:21:27:c8:
26:49:43:58:9d:f0:b2:27:af:9e:6c:18:82:95:c2:
56:3b:31:37:18:45:62:79:6b:e7:80:e4:fe:20:fe:
43:59:6a:d5:59:4b:3d:71:aa:3d:7e:bb:55:2f:77:
4c:0d:80:9e:ee:2c:c6:6c:49:b4:27:97:bc:4c:92:
04:77:45:3a:e5:e8:71:78:43:1b:3a:e5:78:b8:9f:
25:80:df:45:c3:2d:db:30:31:ce:af:5b:39:e6:16:
3c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:68:EB:21:45:9B:D1:4C:6F:7E:3B:EB:CB:A9:D1:38:E2:33:53:1E
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/fWjrIUWb0Uxvfjvry6nROOIzUx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.40.0/23
IPv6:
2a00:1830::/43
Signature Algorithm: sha256WithRSAEncryption
90:07:78:f4:c0:cb:cf:f7:8c:bb:13:52:c2:15:c3:26:75:d2:
c5:03:a4:dc:65:58:52:30:10:dc:55:ca:d1:a6:4a:d5:e5:fc:
8f:6c:47:71:de:45:e1:e0:22:58:3c:34:91:73:9a:a4:96:08:
ad:72:28:1b:b1:f7:eb:87:c8:82:62:49:a9:69:6e:64:23:90:
ce:72:23:6a:1f:f4:cc:99:94:96:d8:ec:ee:b9:c5:cc:63:b6:
7f:91:cd:e3:0b:d2:9d:0a:93:ff:3c:f8:1d:4b:96:77:52:e2:
75:5f:b7:7a:56:5f:8a:a4:97:52:dc:24:49:98:7e:ed:25:11:
bd:ea:8a:bf:d0:c6:2e:9d:17:f8:00:35:0a:ea:4a:ee:28:be:
f3:43:66:ab:14:cd:78:54:7b:71:4a:c7:64:2a:6c:58:b6:c8:
32:24:39:c3:6e:51:e3:53:c6:78:80:90:1c:ed:2d:bb:1e:88:
57:24:9c:86:9c:ce:0b:e9:af:fa:a9:c2:d1:60:91:c0:0c:65:
1a:46:38:fa:c2:f8:3f:59:e8:d7:f3:3e:ff:52:08:75:3c:a4:
6c:f6:8c:52:1c:ea:a8:d3:14:cb:a5:55:f4:83:f5:a5:6c:e8:
12:83:0f:ea:41:d3:eb:88:d7:e2:70:06:a3:ae:d4:8a:cc:eb:
bb:14:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:22:58 2026 by rpki-client