Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/w9Z_kQBpH-mdA7iwzKTWMENR2To.roa
File: w9Z_kQBpH-mdA7iwzKTWMENR2To.roa (raw, json)
Hash identifier: rlA3z5HMnFFWQ/5n7/7EQ6au3c+5eK2aDkiGB8PIifk=
Subject key identifier: C3:D6:7F:91:00:69:1F:E9:9D:03:B8:B0:CC:A4:D6:30:43:51:D9:3A
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368C93289ADA90CE01D19944278531D
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/w9Z_kQBpH-mdA7iwzKTWMENR2To.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36040
IP address blocks: 176.126.58.0/24 maxlen: 24
185.225.248.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c9:32:89:ad:a9:0c:e0:1d:19:94:42:78:53:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3d67f9100691fe99d03b8b0cca4d6304351d93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:b7:e3:0a:4d:e8:72:c2:35:f4:a1:60:4b:
a3:a0:21:02:55:5d:46:4d:ac:18:dd:1c:c5:4e:0a:
b4:6e:e3:ce:43:7b:d1:5d:73:e4:f6:46:ba:dc:45:
e8:5e:90:19:e2:d7:5a:99:25:26:d2:d3:76:39:f7:
56:e7:3b:dc:98:6a:0b:31:2c:bf:2f:74:d0:1d:e1:
f4:6f:9c:12:f6:6b:5f:a7:9f:d0:27:95:b5:f9:03:
1e:f2:eb:43:46:f3:16:a8:16:b6:6a:44:96:bb:1b:
9f:b3:86:0e:80:94:3a:c0:20:c3:01:fb:1d:c7:51:
f1:de:de:ed:ff:9d:64:46:d2:82:23:46:81:38:be:
dc:06:bc:90:e2:5d:25:8e:7e:5b:f8:db:49:5e:84:
2f:3f:08:61:2d:d8:12:61:6a:e1:32:f4:04:9e:52:
3a:08:31:f7:d1:03:79:48:4a:de:97:f8:b0:f7:67:
64:69:6c:27:6a:2d:eb:44:c6:d9:6a:77:17:be:35:
3b:50:c6:35:b3:0a:b2:01:2c:69:13:4c:ca:92:f8:
f2:17:99:16:57:d1:0d:39:7e:e2:ff:95:0a:3e:be:
91:bc:64:97:2b:e3:9e:fd:21:da:e4:a5:b0:2b:4d:
6b:fc:ad:2a:64:34:88:76:79:e4:64:26:94:44:d8:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:7F:91:00:69:1F:E9:9D:03:B8:B0:CC:A4:D6:30:43:51:D9:3A
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/w9Z_kQBpH-mdA7iwzKTWMENR2To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.58.0/24
185.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3d:94:1b:5d:6e:ba:00:e3:bc:17:cf:ab:2f:93:6d:76:59:
7e:fd:92:29:ae:ee:15:17:47:5e:16:2e:ea:1d:fc:a0:8d:d7:
0b:90:ea:ba:e5:90:81:da:9c:71:47:b3:76:01:09:95:52:53:
bd:c2:25:7b:c6:3c:55:fa:ab:0d:6b:fa:4d:15:40:a2:c1:97:
d5:79:fb:40:21:ce:ce:04:f7:be:89:e1:d2:77:7c:dd:ff:78:
74:f1:cc:4b:6a:f7:1a:6b:e1:45:f8:88:39:13:75:a8:f6:38:
a9:e9:9a:78:87:9d:89:5b:ba:25:fe:14:d2:27:d6:24:5e:3b:
69:6b:0c:e3:33:13:f2:ca:b1:3b:b7:b6:4b:b9:8f:e6:d4:56:
02:d0:a7:75:a8:1a:cc:02:0a:b4:c0:64:06:c1:94:f2:d6:6d:
8c:58:4f:e9:46:7b:97:90:03:2a:5e:bf:10:22:59:be:4e:a5:
36:d9:e5:82:a1:17:61:22:eb:5f:58:5f:ef:39:3e:3b:56:e8:
b2:27:52:87:7d:89:08:4d:c8:a8:25:19:55:56:94:be:dc:b9:
9d:b6:de:64:97:0d:3b:c9:f1:42:ba:35:40:fb:d7:13:2b:6b:
2a:0f:41:fa:40:66:bd:f8:e1:80:2a:fb:5e:c8:b5:30:82:09:
d2:22:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:24 2026 by rpki-client