Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/WyiEcPKDPOZ4npaWTBPvajkDxJc.roa
File: WyiEcPKDPOZ4npaWTBPvajkDxJc.roa (raw, json)
Hash identifier: JpG5GefRIC4adMANUonRtnEGzeOWb9BfUo1YS3fYmUM=
Subject key identifier: 5B:28:84:70:F2:83:3C:E6:78:9E:96:96:4C:13:EF:6A:39:03:C4:97
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F039EF2B3432A7831B941533B2264FA84
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/WyiEcPKDPOZ4npaWTBPvajkDxJc.roa
Signing time: Fri 26 Jun 2026 11:09:36 +0000
ROA not before: Fri 26 Jun 2026 11:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a09:3f04::/30 maxlen: 30
2a09:3f05::/32 maxlen: 32
2a09:3f06::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:9e:f2:b3:43:2a:78:31:b9:41:53:3b:22:64:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 26 11:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b288470f2833ce6789e96964c13ef6a3903c497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:51:bc:5a:4c:66:c7:4a:19:e5:f2:18:55:
0e:50:7e:ca:39:a3:e1:b5:d1:1b:b2:af:44:2f:d1:
e4:c8:c3:2e:29:d1:5e:c0:a7:37:ae:9e:6d:24:85:
03:8f:9b:4e:d5:16:6c:03:0b:90:c5:40:52:6d:b3:
a6:e0:a3:da:19:2d:50:bc:0e:12:58:02:0e:2e:d6:
03:22:04:79:e1:2c:1b:71:40:85:53:d8:23:45:8b:
ef:d2:d3:f0:03:97:ed:d3:d4:ba:08:ab:9f:7b:f3:
9f:3a:f3:96:6e:c4:35:d9:35:fd:2d:34:a2:3c:de:
57:e9:53:d4:39:e1:71:45:46:58:b1:57:21:f4:b1:
3f:ca:ab:b4:38:99:16:92:c7:77:3b:3e:e3:b4:36:
b6:7a:6f:6f:e0:a6:a3:dc:62:b5:2a:2d:b1:79:24:
4f:c0:1b:e2:18:d9:ae:da:a3:71:52:8e:58:d1:bd:
3b:e4:20:71:9d:88:80:ac:62:6f:f6:69:a9:8c:b5:
17:e3:94:56:33:a2:55:ec:32:9a:5a:ff:e7:e1:ca:
7e:39:61:db:9e:d9:da:f9:05:10:52:d4:5c:59:65:
ac:54:84:54:44:ed:a1:f3:4e:4c:dc:f2:94:8c:93:
3d:f9:93:c0:7e:a5:48:a5:57:03:77:a6:05:8f:dc:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:84:70:F2:83:3C:E6:78:9E:96:96:4C:13:EF:6A:39:03:C4:97
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/WyiEcPKDPOZ4npaWTBPvajkDxJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f04::/30
Signature Algorithm: sha256WithRSAEncryption
5c:5f:c9:ad:64:e3:4a:56:8c:96:f9:3c:92:48:13:bd:69:63:
65:48:05:50:8d:8e:26:2f:50:5d:d4:95:98:e7:f0:7f:96:24:
ae:ee:e2:c4:48:2b:e8:44:97:67:87:ed:e7:fa:06:88:15:57:
fb:85:d0:bb:93:bb:38:c4:28:1d:c3:4f:8f:b2:53:ea:aa:98:
ff:27:00:8d:43:0c:9b:87:f4:2b:20:73:4e:f4:42:13:19:8f:
52:b8:e8:af:1a:86:7e:84:de:ab:0b:25:57:1b:6d:99:36:cd:
6c:c4:6d:92:76:85:fe:c4:5b:2b:96:5a:83:4b:2d:4d:28:65:
f9:23:1e:33:36:9c:0a:0a:49:be:b3:b6:46:65:aa:82:5a:38:
8b:78:d4:e3:8b:65:40:f6:b8:c1:e0:32:fd:25:17:07:c2:1f:
6a:c1:8e:f9:9a:ae:b8:30:25:59:07:08:92:39:4c:b3:34:40:
9c:11:56:96:24:a7:82:02:fc:5c:81:52:0c:ff:4a:cf:36:f3:
21:ea:5b:9e:c6:c3:4f:ee:79:a5:eb:23:56:aa:83:a3:b6:13:
e2:5d:f5:49:2d:e8:12:07:e2:e3:4a:7a:74:bd:b3:aa:e2:68:
f4:f8:a6:46:e8:eb:4c:f7:cb:7f:9d:ab:03:05:d3:f4:32:82:
28:ec:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:42:02 2026 by rpki-client