Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/wTB7YapR8FGoFATqwmZebBz9Kkc.roa
File: wTB7YapR8FGoFATqwmZebBz9Kkc.roa (raw, json)
Hash identifier: 0Qw+B8XEPWT/iArBGdqiwze9UXkbzqVCsKpo+6tSnsA=
Subject key identifier: C1:30:7B:61:AA:51:F0:51:A8:14:04:EA:C2:66:5E:6C:1C:FD:2A:47
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A06CC565F4ED2C25E37DF0348130BBF91B
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/wTB7YapR8FGoFATqwmZebBz9Kkc.roa
Signing time: Fri 04 Sep 2026 14:14:31 +0000
ROA not before: Fri 04 Sep 2026 14:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 129.101.96.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:14:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:c5:65:f4:ed:2c:25:e3:7d:f0:34:81:30:bb:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Sep 4 14:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1307b61aa51f051a81404eac2665e6c1cfd2a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:02:d8:48:33:bb:d3:2c:38:c2:39:97:66:
22:cd:42:48:84:9c:a3:a7:aa:5b:76:27:fe:a7:35:
f6:3c:df:03:76:51:71:47:62:c8:84:f2:70:02:f3:
ce:a0:aa:2c:ba:66:b9:17:49:f9:a2:23:af:d5:82:
38:65:58:8f:df:0b:e0:9b:9b:5b:f8:a9:f8:f4:87:
5f:47:8d:e7:6f:90:f8:44:34:e4:f9:06:1e:45:88:
e9:c8:03:b9:25:5d:ec:b2:51:2f:80:06:16:b9:28:
84:10:45:be:18:c4:a7:e3:65:fe:6d:43:1b:1c:4a:
65:fa:2b:66:96:3a:43:ee:1a:98:b7:ad:75:b7:80:
79:06:10:ce:cc:74:d6:92:51:1e:cd:64:36:73:3d:
08:bf:db:c5:f6:9f:15:b5:fb:3e:1f:32:1b:a1:d0:
f8:88:b7:21:8e:91:34:7b:cb:71:ec:ea:aa:27:7a:
6a:08:c7:ca:26:db:06:1a:e1:78:f6:e3:34:6f:10:
da:a2:49:5a:ce:24:a4:f1:fc:e8:60:4a:63:f8:4a:
92:76:db:ad:69:cb:98:9a:b9:10:04:83:8a:27:2a:
bd:36:ba:92:37:57:ed:6a:50:ae:48:5c:fe:e6:4a:
42:83:68:81:5c:44:55:d9:aa:6b:89:cc:02:46:cb:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:7B:61:AA:51:F0:51:A8:14:04:EA:C2:66:5E:6C:1C:FD:2A:47
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/wTB7YapR8FGoFATqwmZebBz9Kkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.101.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:e6:7a:11:20:d3:b4:20:e7:9b:28:1c:cb:dd:32:00:03:69:
ef:5e:d5:35:ce:3b:e2:df:ca:80:0c:6e:c6:87:5c:cc:80:85:
6a:e5:bf:38:1c:17:88:b5:8b:af:85:5b:75:0e:35:6c:ad:3d:
d0:d1:0e:01:a8:55:ca:89:0c:9f:3c:8d:e0:8e:ca:89:e9:c2:
5f:15:2e:65:fa:93:6d:21:98:fd:11:78:3f:d2:51:6c:04:e0:
ed:1a:03:2e:b0:e8:e7:83:17:20:84:74:d3:fc:15:3b:b5:1c:
3d:c6:0c:07:3c:d7:3d:98:da:06:a9:6e:f8:ae:3c:ab:fa:42:
44:14:0b:5e:7e:31:0c:3c:a9:54:2d:c3:ab:3d:36:ee:c6:20:
de:c4:bf:33:03:78:78:3d:f1:2b:5a:85:2f:6e:72:00:db:46:
b1:b0:eb:e7:46:8b:a6:e3:b0:1e:9d:6b:d8:b7:8a:11:25:a0:
0e:ad:c3:4f:8c:a1:80:52:3e:50:0a:a1:43:99:6d:27:cc:ee:
68:9f:76:85:b0:55:c9:25:3c:0f:9d:3e:26:ad:65:24:6a:ca:
75:65:f6:16:0f:35:76:f0:13:0f:3d:83:7f:be:39:a8:9f:50:
26:f4:b1:94:35:09:ec:bc:15:22:46:dc:49:9c:0a:ab:25:1f:
24:b1:51:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBsxWX07Swl433wNIEwu/kbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNzk5NGI2NmY5ZmQ2N2MxNzVlMzQzYzYyYWVlNjA3N2Nk
NDI0NWYwHhcNMjYwOTA0MTQxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTMwN2I2MWFhNTFmMDUxYTgxNDA0ZWFjMjY2NWU2YzFjZmQyYTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY4C2Egzu9MsOMI5l2YizUJIhJyj
p6pbdif+pzX2PN8DdlFxR2LIhPJwAvPOoKosuma5F0n5oiOv1YI4ZViP3wvgm5tb
+Kn49IdfR43nb5D4RDTk+QYeRYjpyAO5JV3sslEvgAYWuSiEEEW+GMSn42X+bUMb
HEpl+itmljpD7hqYt611t4B5BhDOzHTWklEezWQ2cz0Iv9vF9p8Vtfs+HzIbodD4
iLchjpE0e8tx7OqqJ3pqCMfKJtsGGuF49uM0bxDaoklaziSk8fzoYEpj+EqSdtut
acuYmrkQBIOKJyq9NrqSN1ftalCuSFz+5kpCg2iBXERV2apricwCRsuePQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEwe2GqUfBRqBQE6sJmXmwc/SpHMB8GA1UdIwQY
MBaAFCJ5lLZvn9Z8F140PGKu5gd81CRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEt
ZGE1MTJmYjlkMTJhLzEvd1RCN1lhcFI4RkdvRkFUcXdtWmViQno5S2tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjE5NmEtMDcwNC00YTRjLTllMWEtZGE1MTJmYjlkMTJh
LzEvSW5tVXRtLWYxbndYWGpROFlxN21CM3pVSkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgWVgMA0G
CSqGSIb3DQEBCwUAA4IBAQB75noRINO0IOebKBzL3TIAA2nvXtU1zjvi38qADG7G
h1zMgIVq5b84HBeItYuvhVt1DjVsrT3Q0Q4BqFXKiQyfPI3gjsqJ6cJfFS5l+pNt
IZj9EXg/0lFsBODtGgMusOjngxcghHTT/BU7tRw9xgwHPNc9mNoGqW74rjyr+kJE
FAtefjEMPKlULcOrPTbuxiDexL8zA3h4PfErWoUvbnIA20axsOvnRoum47AenWvY
t4oRJaAOrcNPjKGAUj5QCqFDmW0nzO5on3aFsFXJJTwPnT4mrWUkasp1ZfYWDzV2
8BMPPYN/vjmon1Am9LGUNQnsvBUiRtxJnAqrJR8ksVHn
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:48 2026 by rpki-client