Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/WYOxW-nG4Fh38eP_qnb0vGAlt5E.roa
File: WYOxW-nG4Fh38eP_qnb0vGAlt5E.roa (raw, json)
Hash identifier: J55jk4j0PfjA2fwMncTwX8/9jIy/dYY/lv6euFSl8aM=
Subject key identifier: 59:83:B1:5B:E9:C6:E0:58:77:F1:E3:FF:AA:76:F4:BC:60:25:B7:91
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A04F58297CAC049EB32707857B458AC28C
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/WYOxW-nG4Fh38eP_qnb0vGAlt5E.roa
Signing time: Sat 29 Aug 2026 21:06:12 +0000
ROA not before: Sat 29 Aug 2026 21:06:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 2a0d:d940:10b::/48 maxlen: 48
2a0d:d940:90b4::/48 maxlen: 48
2a0d:d940:a020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:58:29:7c:ac:04:9e:b3:27:07:85:7b:45:8a:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 29 21:06:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5983b15be9c6e05877f1e3ffaa76f4bc6025b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f0:3f:cf:bb:2b:0c:df:4e:24:2d:f6:7e:46:
24:81:51:eb:05:c0:5a:e9:42:03:27:d3:2d:96:fc:
ab:2f:71:00:cc:79:f1:bd:fd:ad:b3:7d:f5:00:5e:
81:f8:06:fd:13:fd:50:d8:e8:80:a8:ef:ee:ae:8f:
7f:5c:da:52:c1:04:34:c4:55:db:5e:24:a1:d3:5b:
dc:f1:a4:98:e1:1b:30:65:2a:41:4d:94:45:5d:5c:
f6:33:4c:6c:ce:f8:d5:95:1b:83:04:7c:5c:a5:47:
68:f3:aa:5b:82:9a:43:60:ad:49:99:03:01:65:96:
17:cd:1a:32:92:09:7f:76:49:1d:6e:25:e4:19:42:
12:f8:01:fd:c7:d1:d0:da:09:14:53:b0:b4:0d:ab:
c0:2a:d4:bb:56:46:b4:2e:f4:f3:a7:24:34:32:43:
c8:e4:a9:80:e0:d2:56:ad:5c:c5:fc:70:92:af:c7:
70:e7:0a:a6:1a:99:27:fe:6e:8b:e8:99:16:d7:40:
21:08:39:3d:f2:94:87:d4:80:91:e2:9b:3e:ad:25:
6d:7c:3f:8f:52:94:4c:2c:61:1c:9a:1e:17:78:b3:
10:a7:79:77:01:d5:3f:be:65:b2:25:47:bf:21:3f:
e2:02:de:b6:95:fe:07:4b:0b:59:b9:16:79:21:9f:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:B1:5B:E9:C6:E0:58:77:F1:E3:FF:AA:76:F4:BC:60:25:B7:91
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/WYOxW-nG4Fh38eP_qnb0vGAlt5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10b::/48
2a0d:d940:90b4::/48
2a0d:d940:a020::/44
Signature Algorithm: sha256WithRSAEncryption
6b:76:6f:74:1e:6c:82:7d:5a:78:5f:ca:e3:d3:ff:e8:aa:c1:
03:8a:f3:1c:c1:44:19:51:37:b2:cc:92:f9:ba:a7:51:67:54:
c7:95:3c:5d:ee:50:85:9d:99:01:6f:df:d9:63:6f:eb:2a:a9:
c4:7a:53:09:80:96:2a:35:59:1a:f9:a6:50:39:16:df:16:6e:
4a:05:79:d0:92:37:92:d1:bf:0a:d6:30:bf:68:ca:97:09:9f:
f5:66:f0:02:19:cb:14:b3:d2:4d:14:70:dc:28:da:a4:dd:99:
f9:09:73:14:03:32:ee:52:a3:8b:6f:80:c5:83:5c:13:49:dd:
2c:a5:9a:41:48:15:6a:70:6e:5c:24:88:71:cb:30:28:65:0b:
3e:12:3f:5f:1a:c9:3f:63:af:a8:b9:92:b8:82:12:f2:38:63:
4a:ab:38:c1:24:37:a5:48:da:68:ef:2e:1e:89:a8:90:16:86:
b9:39:d8:f6:b1:ed:1b:5f:e4:87:8f:8b:7d:ac:b1:63:46:67:
84:60:a8:57:80:be:b6:63:06:0c:c0:d6:bc:e6:1c:d7:b9:51:
a6:5e:42:5f:63:6e:47:05:0a:92:0d:81:3a:ca:c3:2a:6d:1e:
25:ad:66:36:36:de:87:b2:14:d0:8b:1c:6f:9a:5b:55:fa:45:
81:4c:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:41 2026 by rpki-client