Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wnsD-mkOhlCIzWk47VP1DkZymu0.roa
File: wnsD-mkOhlCIzWk47VP1DkZymu0.roa (raw, json)
Hash identifier: YkC/+ZwG7p0uZCLzbKaf5tlihUqS6Kr3q80PCbnVGqY=
Subject key identifier: C2:7B:03:FA:69:0E:86:50:88:CD:69:38:ED:53:F5:0E:46:72:9A:ED
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A19E931FF3003DBEF040BAC5D1ED3750AC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wnsD-mkOhlCIzWk47VP1DkZymu0.roa
Signing time: Mon 02 Nov 2026 23:23:24 +0000
ROA not before: Mon 02 Nov 2026 23:23:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.26.173.0/24 maxlen: 24
2.27.57.0/24 maxlen: 24
13.143.139.0/24 maxlen: 24
13.143.143.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
177.1.202.0/24 maxlen: 24
177.1.203.0/24 maxlen: 24
177.202.92.0/24 maxlen: 24
179.254.82.0/24 maxlen: 24
191.217.241.0/24 maxlen: 24
191.217.244.0/24 maxlen: 24
191.217.254.0/24 maxlen: 24
191.217.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:93:1f:f3:00:3d:be:f0:40:ba:c5:d1:ed:37:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 2 23:23:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c27b03fa690e865088cd6938ed53f50e46729aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:9e:c0:3e:17:b1:c1:8c:6e:9d:bb:23:49:
bd:d6:a3:b4:f1:4f:55:51:20:1a:67:d8:75:fe:74:
91:17:07:cf:99:a5:a7:bb:0c:62:5d:d4:1e:89:08:
0a:69:71:29:27:8c:da:98:40:41:e5:75:2f:d3:35:
58:22:6d:6b:46:51:be:e0:06:eb:51:42:9f:64:ba:
07:e7:37:ca:f4:98:67:cd:4d:fb:b0:ef:a0:1b:82:
3f:d3:d7:d7:d2:9f:90:20:8f:96:fa:a1:a6:85:15:
0b:75:f5:ba:d0:d5:c9:5a:6c:e7:8a:40:99:da:27:
a8:3a:3c:aa:a2:28:18:b2:77:ac:b3:f4:40:65:eb:
bf:98:93:88:85:e3:7f:d0:f5:6c:48:93:af:d5:ac:
e9:40:a7:53:d6:c4:37:ec:d2:ba:b0:2c:43:3f:58:
d8:ab:ee:c4:99:a4:18:da:53:4c:16:f6:a5:36:4f:
c4:19:7f:62:94:9e:5a:90:85:de:e6:73:7a:d6:c0:
92:90:02:05:d1:f8:c2:7f:c0:ef:a4:f7:3e:53:e5:
a3:45:23:19:69:b7:4e:c4:ea:eb:02:7b:26:b1:2b:
2e:6f:2c:8c:b3:69:6f:fc:0d:37:3e:73:39:6b:f0:
66:73:8e:22:8e:1d:1b:ae:cd:21:f0:e1:3e:24:10:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:03:FA:69:0E:86:50:88:CD:69:38:ED:53:F5:0E:46:72:9A:ED
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wnsD-mkOhlCIzWk47VP1DkZymu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.173.0/24
2.27.57.0/24
13.143.139.0/24
13.143.143.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
177.1.202.0/23
177.202.92.0/24
179.254.82.0/24
191.217.241.0/24
191.217.244.0/24
191.217.254.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ae:8a:68:d3:e5:7f:e5:c3:c3:76:ca:d1:4a:56:9f:f3:8c:
5e:22:c3:be:d6:81:2d:a6:36:16:99:56:52:92:6f:05:cb:c2:
d4:bd:e6:ba:cb:74:be:c5:37:cb:cb:ee:9c:85:01:ba:91:3e:
b4:c9:c6:f7:17:71:f9:ac:78:21:29:43:e1:74:a7:ff:40:86:
51:b6:7c:08:86:20:a3:48:ef:c2:0d:05:96:37:3e:1d:23:a4:
5b:5f:5e:84:2f:71:5c:d8:9c:d8:8f:21:da:47:22:64:ae:0f:
91:c0:48:66:a4:c4:93:bd:9f:ca:c0:1f:a6:43:68:c4:83:39:
f7:fb:8f:ef:ec:13:be:d5:d2:98:2b:3f:8f:35:43:7c:ea:5c:
da:01:66:aa:c7:e8:74:36:c4:63:af:01:e3:72:6b:71:95:61:
98:2f:4a:67:18:1d:e0:c7:83:cb:3b:e6:90:dc:d2:55:2c:f3:
2e:63:7d:30:1f:69:d4:7b:33:a5:87:5b:5b:82:45:ad:15:89:
e3:c6:d7:9a:6e:54:a4:0e:b0:55:d5:85:e1:57:77:2e:a6:fe:
7b:64:e8:b5:50:0e:fe:1a:0e:43:ff:07:0d:92:28:38:93:23:
25:8d:2e:d1:0a:e7:d3:83:22:07:9a:f0:1c:c9:b2:cb:43:bf:
ec:bd:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:52 2026 by rpki-client