Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/WvN9m9jlQV3QOvR_BDmw5su4v70.roa
File: WvN9m9jlQV3QOvR_BDmw5su4v70.roa (raw, json)
Hash identifier: 3kJrx0v3D2CdAiLaByR3bormMHVnb3w73QqMYr5hrSE=
Subject key identifier: 5A:F3:7D:9B:D8:E5:41:5D:D0:3A:F4:7F:04:39:B0:E6:CB:B8:BF:BD
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F67E7A3BEA70D49C51718D79E5813C72
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/WvN9m9jlQV3QOvR_BDmw5su4v70.roa
Signing time: Thu 01 Oct 2026 08:04:39 +0000
ROA not before: Thu 01 Oct 2026 08:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61270
IP address blocks: 82.144.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7e:7a:3b:ea:70:d4:9c:51:71:8d:79:e5:81:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5af37d9bd8e5415dd03af47f0439b0e6cbb8bfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:19:fe:7c:74:ad:f3:86:65:80:a3:bb:39:
5a:8c:87:e7:b4:8f:7c:4b:ba:9c:4e:86:fe:a2:03:
7a:25:78:c9:6f:98:0f:10:3d:b8:d4:6e:10:98:7c:
75:f4:83:68:ac:26:be:14:4f:24:75:88:10:79:8c:
fc:99:d2:ae:f5:d3:eb:58:fc:a9:3c:9d:26:af:36:
21:0c:89:85:5a:52:c2:81:57:7f:6c:23:b5:d7:36:
bc:8e:61:06:99:59:a9:ac:a3:d1:58:d6:ea:7a:de:
bc:53:8a:5a:27:14:31:48:d6:fb:ab:7a:86:a1:9b:
5d:7b:1f:d0:65:56:52:56:4f:86:29:4f:af:93:d0:
60:79:e1:f6:e7:37:2e:73:f1:e7:a4:35:ed:d2:0c:
fc:60:25:5f:4f:9a:af:c3:7b:1c:48:92:b0:81:81:
e9:88:a3:61:23:61:9a:55:50:d7:08:c1:83:7c:85:
18:09:1a:78:b7:73:b0:51:e6:4b:dc:a5:c5:00:84:
b4:24:0e:3b:da:ac:09:e7:8e:e9:ea:a7:ac:02:47:
2c:34:eb:0c:86:2b:2e:5a:9d:88:da:6f:c5:da:24:
d9:09:85:d9:2e:0f:e3:86:76:8a:ec:5d:09:b7:33:
f7:83:f0:8f:7c:93:a9:58:8d:71:36:ed:c2:2a:ed:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F3:7D:9B:D8:E5:41:5D:D0:3A:F4:7F:04:39:B0:E6:CB:B8:BF:BD
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/WvN9m9jlQV3QOvR_BDmw5su4v70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:77:9a:f1:74:6e:8e:48:8a:74:66:cd:8c:db:7a:66:fb:3a:
90:ad:8a:3c:35:c5:d1:ec:28:f3:05:97:b2:4d:2d:6b:2a:92:
20:66:0b:2b:74:14:b7:0b:37:aa:39:dd:ce:7a:1b:25:de:05:
7a:ed:cd:37:d7:a8:28:be:3e:cd:32:de:77:aa:be:bc:16:ff:
34:94:82:31:98:b9:e1:36:97:08:ec:3a:f6:83:bb:85:ef:21:
6b:9d:fd:69:04:5c:49:5f:94:14:b2:a2:51:95:f9:e6:da:78:
46:d3:da:b9:30:db:17:b9:cd:6c:52:75:d8:0c:8a:e6:a0:4f:
fe:6d:01:56:eb:60:41:ed:57:ee:60:c0:b5:3f:25:29:e6:c4:
96:e5:74:17:09:a1:5e:52:1d:68:d1:0b:68:20:62:d8:45:4f:
20:90:d3:5b:83:06:2a:44:e6:a6:71:67:67:f9:f0:ca:3f:ff:
68:27:2e:2c:9d:7e:26:04:e8:83:02:df:d5:d1:8b:de:a7:9b:
73:4e:72:7e:18:f9:80:aa:a8:7e:8c:49:8c:e9:9f:8a:32:ab:
eb:a2:b4:8c:af:8a:bf:a3:ba:50:a4:92:68:68:02:c9:38:f4:
14:58:f8:80:14:1d:e8:7d:be:10:33:95:d2:17:d0:60:39:05:
e5:a1:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:44:07 2026 by rpki-client