Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WW_xrn9EVnpe7ZhKA43l9G5-mq8.roa
File: WW_xrn9EVnpe7ZhKA43l9G5-mq8.roa (raw, json)
Hash identifier: o5EiMhYcXtDgVxNWMxzuaNIHso3fpqshmJ1EqUXzMt0=
Subject key identifier: 59:6F:F1:AE:7F:44:56:7A:5E:ED:98:4A:03:8D:E5:F4:6E:7E:9A:AF
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A577903971DE8B01E72789CFFA11686
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WW_xrn9EVnpe7ZhKA43l9G5-mq8.roa
Signing time: Wed 14 Oct 2026 12:16:13 +0000
ROA not before: Wed 14 Oct 2026 12:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:b440::/32 maxlen: 32
2a11:1140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:57:79:03:97:1d:e8:b0:1e:72:78:9c:ff:a1:16:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=596ff1ae7f44567a5eed984a038de5f46e7e9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:30:cb:16:5a:04:ba:de:4b:d0:99:84:f0:
72:a2:d9:8b:fe:cb:ed:8d:e2:5e:11:ea:5b:d3:0c:
41:bd:76:fd:f7:0e:6e:e1:43:30:69:c5:8a:d9:f4:
ed:a8:65:9c:c0:0a:ba:15:fb:de:e4:fa:4c:b2:c7:
b7:8b:94:b5:a4:4d:c0:eb:82:af:7f:6d:b4:79:a5:
5f:10:6f:5d:9b:01:e0:69:2c:c6:77:bf:42:ce:cc:
de:10:5c:f5:c5:30:38:c3:00:70:7e:d7:5b:8b:44:
39:36:f9:9d:58:46:bf:0c:7a:34:44:32:bf:78:1b:
7b:80:88:ee:6b:c6:f3:90:74:da:f0:3a:8a:17:6b:
81:a3:79:1b:c1:e3:3c:73:70:b6:5d:39:5e:94:4c:
db:4c:48:cd:f8:59:ee:d0:92:02:42:12:6a:d8:38:
6e:56:be:2c:a0:6e:3e:b7:e9:2e:a2:00:91:82:71:
aa:31:ba:d4:6e:94:84:ba:f9:6c:1e:1b:1b:48:9f:
11:73:8a:fc:48:bd:e1:ad:c3:f1:52:cf:c8:b5:2a:
29:b5:97:ad:7e:22:93:28:ab:ca:9e:4a:93:be:5b:
55:a7:3c:12:32:0f:dc:eb:2e:fb:21:b5:1c:2a:28:
e0:c4:cb:ea:2e:9d:88:b9:78:a4:b0:08:c3:68:4f:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:F1:AE:7F:44:56:7A:5E:ED:98:4A:03:8D:E5:F4:6E:7E:9A:AF
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WW_xrn9EVnpe7ZhKA43l9G5-mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b440::/32
2a11:1140::/29
Signature Algorithm: sha256WithRSAEncryption
af:9e:5b:d7:69:e1:ec:29:6a:ec:be:f3:cb:e1:29:63:47:0f:
ed:07:d6:21:52:15:50:67:cd:da:3b:a1:79:75:41:43:1d:db:
18:83:28:33:8e:c8:89:9d:f4:14:b2:12:04:ee:5a:3d:30:64:
52:0e:df:ea:f1:a4:39:08:46:5c:26:a7:64:db:36:ac:b8:21:
a1:5c:ba:95:2c:0c:3f:5c:76:fa:0d:bb:b6:70:ac:d4:7d:fe:
f1:32:78:11:e6:15:e3:6e:82:4f:42:fe:46:28:7a:e2:29:ac:
e9:9a:e8:62:d5:74:93:40:3c:5a:dc:42:f7:15:2d:0f:98:18:
7e:24:c3:44:7b:82:7d:1a:98:29:9f:ba:f0:ca:ae:47:30:5a:
3f:95:aa:8b:29:aa:49:e1:37:ec:39:e1:e4:46:e4:89:8f:f0:
00:a7:d3:46:6e:e7:9b:f8:39:21:4f:4f:36:4e:0e:c6:54:2a:
e6:b7:95:51:0b:99:32:60:93:86:c0:0b:15:0a:39:fc:c5:13:
b5:95:04:c9:0b:67:be:6a:52:d0:6d:21:e4:d6:3b:8a:b4:ba:
e2:6a:da:1a:ea:25:20:62:61:98:84:46:1d:a9:14:22:0d:a6:
56:25:93:3b:0f:2f:39:f2:81:b7:27:1b:9d:b5:3c:ff:9b:8b:
d1:98:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:41 2026 by rpki-client