Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wg9nqQ5PFIPUbqFKja0UuUoO0R0.roa
File: wg9nqQ5PFIPUbqFKja0UuUoO0R0.roa (raw, json)
Hash identifier: sGZD4DQ38q6XkloMs9ZJy6qWQX4Y9ZdLq1CuUcx9RP4=
Subject key identifier: C2:0F:67:A9:0E:4F:14:83:D4:6E:A1:4A:8D:AD:14:B9:4A:0E:D1:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A13A3B1876FD9AE45EA9682D6127B73339
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wg9nqQ5PFIPUbqFKja0UuUoO0R0.roa
Signing time: Wed 14 Oct 2026 11:45:13 +0000
ROA not before: Wed 14 Oct 2026 11:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 2a0e:f500::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:3b:18:76:fd:9a:e4:5e:a9:68:2d:61:27:b7:33:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 14 11:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c20f67a90e4f1483d46ea14a8dad14b94a0ed11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:cf:fa:27:bc:09:4c:eb:f6:35:80:3a:78:
ce:ee:e7:7c:95:fd:e3:21:23:d2:bd:ea:fb:7c:ab:
65:d2:26:05:4d:f6:3a:3e:13:1b:0f:ff:78:e5:f8:
d6:57:e6:8d:18:7f:09:ef:79:f9:6e:0d:ee:5c:cb:
de:53:2a:60:09:66:25:4e:f4:33:55:55:07:e7:75:
52:68:d8:d6:02:d9:fa:74:b7:25:3a:a3:56:50:2a:
8f:0d:f5:0e:72:6d:45:e4:94:36:13:d4:34:24:5b:
72:e2:8e:b9:2a:3c:a8:52:e1:00:25:c2:88:44:0e:
25:cc:c4:f5:2c:3b:10:20:6a:ac:4f:40:77:ad:35:
35:a4:05:dd:0b:92:81:b2:e4:26:7e:bb:0d:de:0b:
b6:ab:ae:58:52:40:26:cc:51:1d:cc:67:9d:7d:77:
20:a2:30:13:87:3e:8a:44:ce:be:84:02:00:33:4e:
f4:ba:95:5a:b9:4f:d1:f6:0e:82:89:55:c2:c7:9f:
ca:7f:7d:5a:a2:9c:13:d6:b8:16:71:84:4f:47:3d:
ae:51:db:e7:be:14:09:cb:71:36:61:9b:3a:7d:4f:
06:e5:c1:6c:48:51:42:6d:d4:48:fe:c8:56:37:97:
73:95:33:8a:39:07:2a:8d:df:48:aa:96:48:0b:5f:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:67:A9:0E:4F:14:83:D4:6E:A1:4A:8D:AD:14:B9:4A:0E:D1:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/wg9nqQ5PFIPUbqFKja0UuUoO0R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f500::/29
2a0f:e640::/29
Signature Algorithm: sha256WithRSAEncryption
94:63:04:55:f3:a6:f3:76:fc:40:a5:83:24:f4:f6:6e:e0:a1:
86:93:d6:86:2f:b2:71:7c:d1:05:8e:b5:ff:71:6a:ae:93:79:
f3:9a:83:c6:46:62:89:5f:4a:9b:29:7f:c3:d1:a0:2b:0e:14:
7b:93:f7:4a:2a:40:53:c9:34:40:7d:72:cd:5d:a6:cd:c4:b5:
4d:cd:74:ae:cd:af:4a:7a:5c:15:ac:af:a7:e0:d8:60:43:61:
c3:f6:b3:83:cf:7e:92:9a:e7:aa:9c:2c:07:eb:0e:0f:98:94:
c5:68:3c:39:34:4d:2b:d9:c3:17:a3:18:7c:85:63:7c:02:54:
fb:86:7d:30:30:7f:2c:a6:ee:2e:77:7e:9d:fe:ea:2c:72:6b:
7e:b4:ea:6f:b7:22:ea:e3:3d:61:6d:fe:62:67:57:25:ed:c4:
0d:11:59:e6:5c:eb:76:3a:e2:a8:0e:b1:0e:38:51:2d:f1:97:
6d:50:17:1f:24:a1:0c:55:fb:6d:f9:79:a5:b6:c9:5b:4e:89:
93:82:b4:b9:9f:f6:bf:98:0b:df:61:ba:f6:0e:7c:ee:17:e2:
ce:15:11:a5:67:ab:6e:dc:96:6e:b9:33:a7:97:28:67:d7:3c:
11:e2:80:c3:48:68:36:f7:a0:a0:2d:0c:3c:68:91:ed:dc:68:
1a:e6:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:36 2026 by rpki-client