Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wVqEMcy9NOr1-IAPq3k7lV1oyI8.roa
File: wVqEMcy9NOr1-IAPq3k7lV1oyI8.roa (raw, json)
Hash identifier: gizo3ZKNmktOcQJ8zrbg42cieux658F+LKH92TZvWb0=
Subject key identifier: C1:5A:84:31:CC:BD:34:EA:F5:F8:80:0F:AB:79:3B:95:5D:68:C8:8F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0F2FE7F4A4433F99F483C9AECA9E59B7A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wVqEMcy9NOr1-IAPq3k7lV1oyI8.roa
Signing time: Wed 30 Sep 2026 15:46:00 +0000
ROA not before: Wed 30 Sep 2026 15:46:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 200.102.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:fe:7f:4a:44:33:f9:9f:48:3c:9a:ec:a9:e5:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 30 15:46:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c15a8431ccbd34eaf5f8800fab793b955d68c88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:65:3e:91:96:77:e2:45:d5:be:bc:cc:b8:
72:5b:8c:1b:5d:24:20:8f:f8:14:59:2a:60:c3:c5:
d6:58:6e:07:a3:f5:27:4f:13:79:af:43:07:6f:2f:
8d:03:e7:8a:07:a4:ab:7d:e9:ca:9c:6c:b8:49:87:
04:17:31:77:eb:09:94:1f:a9:7e:21:68:6d:5b:a4:
6e:75:66:ae:be:76:e0:86:94:85:17:42:1c:21:9c:
fc:41:82:2f:56:62:15:c6:e9:63:9e:6d:68:2a:30:
b6:d3:05:d6:78:ee:17:6d:c6:d7:0e:62:e0:90:9a:
fb:67:0c:bf:31:c2:16:4e:08:e5:6a:b7:f5:cb:29:
db:cb:4a:69:73:5d:d4:3d:56:b6:c7:be:31:7f:31:
6b:0c:98:df:67:01:bc:4f:2b:ce:15:34:3f:66:bd:
2d:0a:b0:59:79:af:7a:cc:76:c6:35:60:68:e1:a2:
05:3d:ba:44:89:77:2d:c4:22:a5:5b:31:82:4b:83:
1f:1a:75:8e:81:18:05:52:bb:72:27:9c:64:07:26:
63:26:26:15:84:2f:74:58:15:0a:38:5c:2b:27:c3:
14:90:63:ea:8b:4f:d3:45:bf:23:13:15:8b:ed:1c:
ae:1a:f8:9b:32:d0:be:0b:e0:1a:9f:83:e6:c9:ea:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:84:31:CC:BD:34:EA:F5:F8:80:0F:AB:79:3B:95:5D:68:C8:8F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wVqEMcy9NOr1-IAPq3k7lV1oyI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.102.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ac:ad:7c:69:77:0d:40:c7:37:79:ee:7a:fb:c1:3b:1b:32:
88:d7:0c:be:02:11:22:da:9e:ae:5d:90:a4:c0:3f:ed:5b:df:
bd:c0:87:16:56:f7:1b:ee:bd:ad:b1:96:43:12:a4:2e:f1:a2:
70:2c:9d:7c:0f:9f:e5:81:5d:15:6f:f1:80:17:49:34:cb:ce:
24:34:68:19:73:74:74:06:c6:3d:21:66:75:c2:dc:f1:84:60:
2f:39:b8:42:d3:49:93:ec:fb:86:c6:f0:8b:1f:00:05:ef:20:
48:18:a6:52:c0:66:94:78:03:bf:80:c2:6e:6f:da:f7:a9:d8:
60:b5:9f:51:ac:51:13:15:60:09:21:de:93:04:e9:e0:28:6b:
2b:d4:c9:60:c6:30:88:20:96:07:29:28:b9:f7:a5:d2:e7:54:
89:50:df:7d:9d:83:f9:46:47:4f:fc:26:6e:fd:84:8d:64:e2:
41:c0:d0:19:38:29:05:6a:0c:b8:bc:15:c8:e9:e4:3b:40:d2:
5a:bf:97:62:b1:94:dc:a2:cf:8d:af:a9:15:0d:e2:f7:d0:83:
31:97:b6:fb:b4:1a:0e:f4:2c:31:ce:3c:8d:06:68:70:76:e0:
76:50:01:bb:27:4c:d6:52:89:b1:21:10:95:bc:91:bf:c1:96:
bb:30:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:28 2026 by rpki-client