Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wZxA_Qv6IOBvWc6pjVAcF2DJBcg.roa
File: wZxA_Qv6IOBvWc6pjVAcF2DJBcg.roa (raw, json)
Hash identifier: Oi1rGELeG9N09DiQPP8R2qfrh8rUxUMM+bk+6ds7teg=
Subject key identifier: C1:9C:40:FD:0B:FA:20:E0:6F:59:CE:A9:8D:50:1C:17:60:C9:05:C8
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A002C5220D567DB55307B8DCE5D56DD05D
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wZxA_Qv6IOBvWc6pjVAcF2DJBcg.roa
Signing time: Sat 15 Aug 2026 00:14:28 +0000
ROA not before: Sat 15 Aug 2026 00:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52376
IP address blocks: 2.20.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:c5:22:0d:56:7d:b5:53:07:b8:dc:e5:d5:6d:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Aug 15 00:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c19c40fd0bfa20e06f59cea98d501c1760c905c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:0b:75:3f:d7:41:4e:cd:03:f7:07:31:41:
46:8c:71:9f:2d:e9:7f:eb:c6:2b:32:42:c0:88:1b:
64:5e:27:83:d1:4f:22:80:fc:3e:4e:36:aa:42:ca:
ab:01:1c:dd:24:77:a7:13:dc:6a:f8:ee:40:b7:f1:
f1:d8:74:a9:a2:3c:6a:42:d9:15:39:5f:f0:19:4b:
65:94:93:f0:84:87:ae:1a:87:a6:ec:3b:46:71:1d:
a2:a3:68:ff:c3:6d:40:78:62:2e:17:c6:be:46:62:
1b:64:be:3b:59:19:14:9c:8c:2e:70:c4:90:09:7e:
71:62:39:1f:44:2b:d5:f0:2d:ca:e4:52:30:45:e0:
2d:f4:5f:f2:1e:fc:de:f3:b0:9a:7f:5b:d5:c9:17:
48:a9:97:4e:7f:8d:2d:13:ed:23:e5:1e:9c:16:79:
63:b9:24:c2:13:b8:56:fc:aa:13:9e:02:42:b7:1d:
66:21:92:62:2a:da:07:79:d3:b6:5e:a5:11:11:df:
1a:32:ef:a4:81:c1:43:64:62:b0:5c:78:37:5c:30:
f6:93:a1:39:87:72:1f:c7:d0:2c:1f:4b:63:c7:f4:
31:1b:3a:1b:f1:30:90:ec:06:10:b3:bf:e1:fd:50:
26:29:ff:b3:76:31:26:f4:f8:27:64:c6:0e:54:45:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:40:FD:0B:FA:20:E0:6F:59:CE:A9:8D:50:1C:17:60:C9:05:C8
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wZxA_Qv6IOBvWc6pjVAcF2DJBcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.20.46.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e1:39:10:62:cf:ab:48:87:5b:c2:36:27:8b:c7:1f:84:f8:
d5:a6:f3:6e:72:2a:69:1a:09:ba:5c:4e:ef:da:fe:14:ca:e5:
80:21:b2:86:fc:88:bd:88:f7:74:cd:5b:d9:99:77:23:9f:2c:
26:81:d7:06:44:8d:a6:de:00:ec:67:b7:61:99:f6:a3:a4:51:
61:15:a4:cf:bc:10:37:77:6c:b6:f2:0d:a1:f0:92:dc:0f:cb:
eb:7a:7a:22:0d:b1:9c:47:3b:cb:ab:07:3a:d7:8a:7c:e0:09:
dd:cf:46:24:4b:5a:43:2f:a6:2d:26:26:a3:c1:4a:52:a5:f2:
4a:c1:35:89:38:b7:94:e9:2e:48:ca:ef:77:37:0d:76:87:e0:
82:be:09:f2:13:fc:70:5b:15:c5:19:3a:68:18:8b:1d:bd:a7:
a3:fa:d8:f3:94:d5:e3:ce:65:99:64:18:9e:73:ac:2e:5f:db:
80:96:6d:02:10:0f:16:ee:2a:eb:f5:81:ec:8d:85:47:8c:06:
2e:5f:7a:bd:b9:52:19:b3:93:01:c3:0c:f6:0d:d0:1e:e1:79:
52:34:11:6a:f5:ef:93:df:71:d2:ec:58:ca:ae:e4:8e:35:34:
64:71:56:01:16:cc:bd:ee:37:05:d1:22:26:1c:24:1a:14:5c:
c2:90:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:03:22 2026 by rpki-client