Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6WMK9I3DnHTXYoRzy1IbDgxnYNY.roa
File: 6WMK9I3DnHTXYoRzy1IbDgxnYNY.roa (raw, json)
Hash identifier: XQheycBstYDE+5x+URUBuFcOUSJvoN70Z8ujQ9Hilis=
Subject key identifier: E9:63:0A:F4:8D:C3:9C:74:D7:62:84:73:CB:52:1B:0E:0C:67:60:D6
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019FFFCF1054574FECA0E6C115F65A6052A1
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6WMK9I3DnHTXYoRzy1IbDgxnYNY.roa
Signing time: Fri 14 Aug 2026 10:26:27 +0000
ROA not before: Fri 14 Aug 2026 10:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402865
IP address blocks: 91.109.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:cf:10:54:57:4f:ec:a0:e6:c1:15:f6:5a:60:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 14 10:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9630af48dc39c74d7628473cb521b0e0c6760d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:38:70:78:be:76:00:ab:a3:8e:ac:e1:96:96:
f9:cb:00:82:0c:d0:55:54:e7:db:6e:2c:ed:97:61:
e4:0e:45:ac:a6:3c:42:2a:e5:36:ad:be:8f:b2:29:
69:5b:83:4c:9f:8e:37:89:e0:8f:0e:c9:99:43:14:
40:8a:41:b5:3e:ff:eb:ee:91:81:38:63:ca:29:de:
78:10:c0:59:08:76:6b:ae:01:c3:9b:0e:04:75:89:
21:48:8a:9c:d4:75:45:76:74:7f:7a:3f:13:3e:ab:
23:3f:7b:d3:3d:bc:3e:71:c5:41:f0:95:6a:b9:a7:
20:d2:21:41:cd:68:7c:70:46:c6:b7:70:e9:50:f7:
f3:a4:d0:30:5c:e8:45:b3:f3:83:2f:77:d2:c4:d6:
6e:96:aa:7d:cd:0c:f2:65:35:69:6c:fb:12:38:88:
d2:0e:d2:2e:74:77:4a:0b:4a:5f:b3:5c:ac:ca:7d:
44:2c:6f:38:88:21:71:8d:a6:99:e2:c4:1a:57:a4:
51:fb:74:72:bc:53:cb:7f:e2:ba:f6:40:18:66:b5:
5a:42:be:39:2c:f4:b0:ed:3b:f1:66:39:d3:dd:be:
e2:a1:d3:2a:f8:1b:1d:4c:ce:31:d2:80:1b:1f:ba:
b4:17:3f:2a:9e:a4:7d:bb:40:3b:db:8b:94:5d:31:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:0A:F4:8D:C3:9C:74:D7:62:84:73:CB:52:1B:0E:0C:67:60:D6
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/6WMK9I3DnHTXYoRzy1IbDgxnYNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d1:54:de:45:01:b7:46:f5:cc:f5:2a:97:f0:83:f5:0f:a0:
3f:b4:d1:ee:ff:0b:0b:a7:b7:2c:0b:ef:c7:32:82:a0:c6:a8:
d1:7a:6e:11:27:81:8e:e9:03:0e:fd:3c:75:cc:33:5e:f3:cb:
13:67:fa:eb:2c:4b:d3:3c:0d:76:c7:ea:cb:08:e2:e1:52:70:
42:7b:df:57:cd:e1:2d:c5:2f:12:29:dd:2b:2b:2c:b1:c9:ea:
fa:4c:89:a8:83:68:e2:37:1d:8c:79:eb:99:aa:a8:6c:9a:76:
9a:bc:ff:69:2b:8b:5f:39:c8:48:83:22:53:0a:26:37:20:2c:
9e:ad:2e:e5:aa:81:bf:34:38:7d:6e:86:c7:a0:50:7e:29:90:
80:e1:b8:5e:55:af:e4:55:ab:1d:6b:9f:b7:d3:0f:05:7c:58:
c7:42:10:a5:53:b9:35:3e:61:a0:c8:32:0e:6f:b4:81:6c:47:
e5:e5:8d:e8:a9:df:7d:89:63:a1:91:ef:b0:cf:ea:09:96:ad:
ee:84:2d:a6:73:37:60:0b:3a:de:3b:8b:8d:89:ce:fb:f6:be:
58:72:76:69:02:f1:94:52:d8:2d:9a:9a:73:8a:fe:2a:88:31:
80:e1:9f:5e:59:47:c9:1c:a8:7c:09:ab:da:97:b1:72:5a:9c:
71:a5:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:00:35 2026 by rpki-client