Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/pW6jmWf2raK3Zl4GPbsEQcPmQOA.roa
File: pW6jmWf2raK3Zl4GPbsEQcPmQOA.roa (raw, json)
Hash identifier: c1/FLBdVoe9kgtOV+DR8t4lDO5Egn0FpEQ4VTohCcXI=
Subject key identifier: A5:6E:A3:99:67:F6:AD:A2:B7:66:5E:06:3D:BB:04:41:C3:E6:40:E0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01A0EC3EDED1F06C30A78328AF76762FADA6
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/pW6jmWf2raK3Zl4GPbsEQcPmQOA.roa
Signing time: Tue 29 Sep 2026 08:18:58 +0000
ROA not before: Tue 29 Sep 2026 08:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214790
IP address blocks: 185.37.8.0/24 maxlen: 24
194.117.88.0/24 maxlen: 24
2a10:c943::/32 maxlen: 32
2a10:c943:100::/48 maxlen: 48
2a10:c943:200::/48 maxlen: 48
2a10:c943:300::/48 maxlen: 48
2a10:c944::/32 maxlen: 32
2a10:c944:100::/48 maxlen: 48
2a10:c944:321::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:3e:de:d1:f0:6c:30:a7:83:28:af:76:76:2f:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Sep 29 08:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a56ea39967f6ada2b7665e063dbb0441c3e640e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:dc:57:9d:f7:0c:ba:f6:25:63:79:cb:f9:
f8:ae:f3:f0:40:b6:6f:ee:ec:2d:05:88:e1:c1:c9:
11:7e:0e:18:ee:4f:d1:4b:42:60:8a:4d:b9:e9:96:
28:a2:87:15:3e:4e:c6:6c:8e:4c:fb:ec:32:9b:77:
a3:44:b7:e8:cd:cb:67:dc:58:d9:f9:76:20:a9:ee:
c7:ed:ef:c6:86:fa:dd:68:a2:37:b4:17:a7:e5:55:
7d:a8:20:32:0f:42:6b:b3:95:ac:a1:46:cc:f3:18:
4b:88:09:be:55:32:e7:e9:dd:6f:78:5f:4c:17:89:
52:0a:48:a8:70:6d:64:ca:12:25:0c:bf:e9:72:19:
ca:ed:41:35:f2:7e:42:88:29:9b:96:1a:7a:e8:df:
82:19:d1:c8:8d:8f:f9:7c:3a:c2:a6:0e:71:88:83:
85:b0:1f:f1:ce:29:35:fc:90:6b:ae:a9:3a:5a:71:
0c:88:f2:01:55:be:33:c2:50:94:ac:f7:57:d2:c6:
07:20:b9:08:82:5b:c9:90:48:68:6c:7b:0e:5e:e5:
37:fd:b7:47:80:62:02:cc:a8:59:e5:a8:18:57:99:
5a:a0:47:b0:a5:8a:ce:35:2a:d6:9a:49:be:a8:cc:
9e:e5:0f:72:c6:5d:0f:36:92:95:de:ec:5a:50:a8:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:A3:99:67:F6:AD:A2:B7:66:5E:06:3D:BB:04:41:C3:E6:40:E0
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/pW6jmWf2raK3Zl4GPbsEQcPmQOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.8.0/24
194.117.88.0/24
IPv6:
2a10:c943::-2a10:c944:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
10:70:ea:5d:ec:81:e8:bc:62:ea:86:aa:cb:78:b3:ed:41:ad:
58:03:5a:01:9f:d5:f7:6c:c7:a1:9c:25:96:85:73:8b:46:7f:
5d:5a:70:dd:a6:b0:8d:1d:2b:3c:96:92:15:68:40:41:01:86:
a4:a4:78:ff:41:07:71:19:ba:d9:b8:98:5e:5e:36:c2:10:2f:
bc:d7:0a:56:97:af:69:c4:61:e9:c6:81:e2:29:14:9e:ee:9e:
a8:0d:a1:dd:fa:e3:24:96:1c:a7:fc:c3:45:e4:77:8e:34:6f:
6a:4d:a2:1b:f3:02:0a:7d:5c:6b:c4:01:ac:25:83:da:72:d7:
4e:fa:95:fb:ce:c7:e2:b1:00:b2:8c:05:e2:4e:66:a1:9f:f9:
70:50:10:da:b6:7d:c6:10:18:3c:7e:a3:0b:b7:9d:d7:1d:ed:
a2:dc:2f:f5:8d:15:0e:2f:69:e0:5a:e7:57:c5:52:a3:63:fd:
6d:49:dd:a0:da:c8:96:09:2c:6b:5d:5f:d7:e2:81:0d:79:dd:
40:3c:1f:32:a7:29:db:77:b1:9b:fd:ce:d5:97:d9:67:f6:5d:
ae:e7:c7:01:9f:92:83:a9:7b:91:eb:30:f4:45:04:38:34:0b:
b7:9e:b2:41:21:e3:1d:97:38:08:3f:6c:9f:8b:b9:bc:89:80:
6d:da:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:13 2026 by rpki-client