Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WnopdAwOrDN6y_1U890g8zUPsu4.roa
File: WnopdAwOrDN6y_1U890g8zUPsu4.roa (raw, json)
Hash identifier: cEqS9xsX7GzUgGfzRbri3RLqsLO7DlebLIf8kF5GpUM=
Subject key identifier: 5A:7A:29:74:0C:0E:AC:33:7A:CB:FD:54:F3:DD:20:F3:35:0F:B2:EE
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A1608222EA9E6317782A51704559AAC401
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WnopdAwOrDN6y_1U890g8zUPsu4.roa
Signing time: Wed 21 Oct 2026 22:08:23 +0000
ROA not before: Wed 21 Oct 2026 22:08:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35415
IP address blocks: 213.189.19.0/24 maxlen: 24
213.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:82:22:ea:9e:63:17:78:2a:51:70:45:59:aa:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 21 22:08:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a7a29740c0eac337acbfd54f3dd20f3350fb2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:5f:f0:fd:97:17:66:fa:9c:99:1b:7f:3a:
a3:33:9e:14:28:a9:98:fd:9a:1f:e3:01:32:b1:76:
77:52:bf:0d:04:4a:c7:84:19:49:92:82:40:22:f1:
2e:a5:44:74:43:83:e0:51:6b:97:d6:a1:6b:cd:1e:
2c:18:8a:d7:55:16:67:3c:09:aa:87:4f:c3:2a:b8:
43:3b:a9:cb:03:66:84:84:f3:58:3a:9d:d5:ba:00:
f6:5f:95:6f:15:13:97:38:95:b0:f9:eb:68:84:2e:
08:3b:85:9e:9c:1e:da:7b:b9:3f:ce:c8:6e:0f:63:
c0:c3:39:2b:5b:b0:62:7f:99:5e:3f:e6:40:4a:28:
4a:4a:3d:0f:e9:a1:a8:22:39:1d:c0:13:90:b7:f5:
98:b5:c0:63:ad:1a:cb:df:13:45:11:39:0e:08:38:
0b:c1:f7:19:9a:2a:f8:6f:76:4c:e8:b1:7d:a1:4d:
17:7e:08:bd:f6:d2:1a:5b:c1:0a:f8:fe:57:82:63:
dd:ab:c6:bc:77:a3:02:70:28:09:eb:17:86:5c:97:
72:23:4b:59:63:2b:01:c7:4b:5e:c4:66:f2:5f:d7:
42:7a:cf:52:81:07:d1:76:27:81:d4:62:13:08:49:
08:9f:4d:f5:d3:f3:21:72:cb:da:53:c7:58:39:51:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7A:29:74:0C:0E:AC:33:7A:CB:FD:54:F3:DD:20:F3:35:0F:B2:EE
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/WnopdAwOrDN6y_1U890g8zUPsu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.19.0/24
213.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
08:60:a4:89:f9:8f:b5:c0:09:ef:93:1b:71:e2:c9:a7:2a:26:
cf:37:66:8a:aa:eb:b9:cb:4b:82:8a:14:69:a4:12:62:d5:d7:
cd:12:b8:ce:0f:64:cf:cc:66:62:bb:f4:3b:5b:10:ad:5b:3e:
52:bb:a7:f7:99:a1:a4:9c:ea:00:ef:6d:2f:ff:24:9c:40:55:
1d:28:a4:cd:b3:b6:17:23:7e:40:02:d6:15:a8:10:ce:1c:9b:
e5:b0:ea:f4:0d:2c:61:ff:5a:44:08:5b:bb:73:5f:4f:37:47:
b2:5d:96:71:ee:56:49:39:d9:f1:99:e8:ff:fb:7b:d4:64:e8:
77:43:84:9e:43:49:87:8c:31:86:12:c3:4d:ca:30:4f:45:68:
56:d3:32:56:bc:1b:c6:00:ee:2c:84:0e:81:4d:e9:e7:84:30:
d1:a9:f2:07:37:1b:ab:09:a0:18:33:b5:be:7d:f7:d1:67:f1:
3b:ae:4c:10:b0:ce:76:04:e0:b5:49:17:48:72:5c:43:de:e2:
20:85:d3:2a:bc:a9:9c:37:55:35:a2:83:26:75:b3:76:6b:87:
1a:d2:d5:b1:38:e5:74:95:91:05:ea:9a:38:85:ad:75:78:db:
1c:f6:b1:63:c9:0b:44:3e:2a:78:c5:77:17:96:ab:c2:6d:38:
24:aa:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:30:46 2026 by rpki-client