Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa
File: whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa (raw, json)
Hash identifier: j/vGUE59TZltmJLF+biW83xG7UAq25/opkA46PKZ2AA=
Subject key identifier: C2:1A:50:52:2F:D0:35:53:4F:17:11:79:60:DD:14:F9:9E:02:26:5F
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D6BDDF079CCE319B5E44AD39381CE32D2
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa
Signing time: Wed 08 Apr 2026 06:53:20 +0000
ROA not before: Wed 08 Apr 2026 06:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 216.236.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:dd:f0:79:cc:e3:19:b5:e4:4a:d3:93:81:ce:32:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 8 06:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c21a50522fd035534f17117960dd14f99e02265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:a1:d4:b8:33:36:5c:10:fa:6d:59:bb:05:
fd:1d:59:e6:b9:0d:f6:a4:82:20:2e:67:22:11:dc:
8c:0c:68:c0:62:7b:13:97:16:f8:47:92:85:c2:49:
d4:6f:7b:50:7d:4c:e7:4e:b0:45:9b:22:b4:79:13:
13:34:0d:a7:62:51:73:92:cb:fb:f7:3c:f9:fd:6d:
c9:b5:5a:5e:67:81:6e:08:c1:47:23:90:0a:d8:2c:
a7:08:7c:5f:06:fa:ac:ee:37:03:eb:de:33:21:5d:
5b:f7:a3:61:9c:79:56:3a:2f:24:e1:f9:34:54:63:
ec:29:03:d3:8c:1b:79:42:d9:94:74:b0:8a:59:73:
64:0f:36:bc:7d:4c:5d:7a:64:4d:06:0e:bc:12:3b:
1a:00:3e:5c:dc:02:f5:57:95:7a:9a:a2:3c:4e:79:
06:71:ef:68:be:52:03:fc:97:d2:9f:b4:d1:0c:c3:
f7:0f:12:9e:b5:3e:c0:b1:58:dd:29:5a:16:9a:cc:
16:b8:38:95:86:5d:1e:8b:92:59:40:87:f1:70:26:
eb:4e:12:46:63:2a:24:9f:49:5a:7a:69:d3:1d:84:
39:fa:19:3a:e3:89:06:a5:1c:56:cc:d4:c1:3b:f4:
5e:50:c3:b3:f4:72:85:2d:a7:c0:d8:ce:0d:7c:91:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:50:52:2F:D0:35:53:4F:17:11:79:60:DD:14:F9:9E:02:26:5F
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/whpQUi_QNVNPFxF5YN0U-Z4CJl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.50.0/24
Signature Algorithm: sha256WithRSAEncryption
28:69:06:ff:21:51:3a:9d:e3:63:42:73:3c:81:7d:07:38:2c:
e1:54:84:8f:d5:8c:e2:07:7a:d1:85:68:9a:8a:fb:71:95:53:
23:52:a4:4b:84:10:bf:4d:cd:6f:22:24:96:a2:90:7c:39:85:
11:52:09:3f:fd:13:d1:b2:0d:ff:6d:e2:91:47:34:27:6d:15:
ac:49:7e:d0:00:97:27:05:f8:08:c5:b3:48:59:72:e5:5f:8d:
a8:41:75:71:09:e4:0d:0a:5f:a2:71:96:fd:43:18:db:77:03:
40:6f:5d:12:00:15:54:06:38:b2:6a:24:28:5a:9d:f9:1b:b1:
8e:af:ad:5a:da:62:b2:ac:d8:10:a1:f7:e2:c9:94:a8:e9:a1:
e3:96:44:45:c8:d7:85:d7:40:ca:2f:77:f6:9c:3f:16:1d:b6:
29:99:a7:0f:5a:10:f9:81:b9:be:00:00:4b:ae:a1:c0:53:ef:
ae:c4:c9:c4:5b:7f:da:f8:8f:79:20:3e:65:ee:ea:f9:18:4b:
30:88:d8:80:90:b9:5c:ef:97:a9:9d:11:6e:a8:52:31:82:62:
ed:a8:78:2d:8f:37:a0:96:f5:5c:87:ad:93:87:fb:9f:6a:13:
22:17:e7:8e:c8:ee:71:3a:8f:a4:eb:ee:28:01:8d:e2:80:6b:
97:1e:4d:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1r3fB5zOMZteRK05OBzjLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNDA4MDY1MzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjFhNTA1MjJmZDAzNTUzNGYxNzExNzk2MGRkMTRmOTllMDIyNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0yh1LgzNlwQ+m1ZuwX9HVnmuQ32
pIIgLmciEdyMDGjAYnsTlxb4R5KFwknUb3tQfUznTrBFmyK0eRMTNA2nYlFzksv7
9zz5/W3JtVpeZ4FuCMFHI5AK2CynCHxfBvqs7jcD694zIV1b96NhnHlWOi8k4fk0
VGPsKQPTjBt5QtmUdLCKWXNkDza8fUxdemRNBg68EjsaAD5c3AL1V5V6mqI8TnkG
ce9ovlID/JfSn7TRDMP3DxKetT7AsVjdKVoWmswWuDiVhl0ei5JZQIfxcCbrThJG
Yyokn0laemnTHYQ5+hk644kGpRxWzNTBO/ReUMOz9HKFLafA2M4NfJGIyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIaUFIv0DVTTxcReWDdFPmeAiZfMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvd2hwUVVpX1FOVk5QRnhGNVlOMFUtWjRDSmw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OwyMA0G
CSqGSIb3DQEBCwUAA4IBAQAoaQb/IVE6neNjQnM8gX0HOCzhVISP1YziB3rRhWia
ivtxlVMjUqRLhBC/Tc1vIiSWopB8OYURUgk//RPRsg3/beKRRzQnbRWsSX7QAJcn
BfgIxbNIWXLlX42oQXVxCeQNCl+icZb9QxjbdwNAb10SABVUBjiyaiQoWp35G7GO
r61a2mKyrNgQoffiyZSo6aHjlkRFyNeF10DKL3f2nD8WHbYpmacPWhD5gbm+AABL
rqHAU++uxMnEW3/a+I95ID5l7ur5GEswiNiAkLlc75epnRFuqFIxgmLtqHgtjzeg
lvVch62Th/ufahMiF+eOyO5xOo+k6+4oAY3igGuXHk19
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:29 2026 by rpki-client