Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/WNpoM_9TRA0--_eHYGjUYS0J8xM.roa
File: WNpoM_9TRA0--_eHYGjUYS0J8xM.roa (raw, json)
Hash identifier: RQF/j0/Ki2kosqe9ApgvfaA+6h825b3sARyaKVjjEvU=
Subject key identifier: 58:DA:68:33:FF:53:44:0D:3E:FB:F7:87:60:68:D4:61:2D:09:F3:13
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A3D2F974E02A369C77F6EC218DFAAAC2
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/WNpoM_9TRA0--_eHYGjUYS0J8xM.roa
Signing time: Tue 15 Sep 2026 06:48:27 +0000
ROA not before: Tue 15 Sep 2026 06:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402976
IP address blocks: 109.66.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:d2:f9:74:e0:2a:36:9c:77:f6:ec:21:8d:fa:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 06:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58da6833ff53440d3efbf7876068d4612d09f313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:7b:1c:e8:0f:3c:f3:fa:05:1d:40:dd:19:
7e:ca:18:a3:fb:e4:72:64:a5:d9:16:27:6e:6f:75:
2a:fb:af:b4:a7:8c:e7:c5:f7:bb:77:f7:b8:d3:c8:
96:c0:c0:3b:4d:59:3e:67:5e:34:8b:22:72:2d:48:
13:41:e8:f7:06:f8:81:6b:50:f5:0f:36:d5:1f:9a:
08:56:5c:f0:ea:1e:10:b6:da:8b:4c:8e:c6:64:71:
44:57:bf:90:e8:eb:2b:8a:2e:84:25:59:aa:71:93:
12:84:cf:b6:af:38:16:bc:52:51:2a:28:96:98:dc:
3f:84:b7:56:74:95:29:3f:3d:50:81:a8:af:6e:bb:
9a:26:a6:c2:65:35:6e:cb:63:b1:63:b3:7c:23:93:
75:69:09:cc:c0:1f:73:6f:bb:6c:76:1f:e3:3c:f2:
0b:20:f2:88:dc:6e:e2:07:3d:e9:b3:ff:7c:a9:90:
9a:20:a0:84:8c:a0:9b:1b:44:04:37:c7:8b:dd:d9:
aa:67:96:1f:42:0b:9c:e2:e7:d1:fd:87:12:cf:44:
c4:58:05:4f:ba:58:3e:57:72:3d:c2:2d:54:5e:34:
3d:ff:2f:a8:02:89:c9:07:dd:44:e0:2d:0f:51:ed:
bd:96:bc:35:c8:a6:b7:b6:b0:48:f0:a3:5a:0c:25:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:68:33:FF:53:44:0D:3E:FB:F7:87:60:68:D4:61:2D:09:F3:13
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/WNpoM_9TRA0--_eHYGjUYS0J8xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.44.0/24
Signature Algorithm: sha256WithRSAEncryption
55:13:c1:6c:60:1c:49:6a:6a:72:e6:0e:b4:3b:57:75:5c:24:
d4:92:1c:4a:c6:18:3f:9e:49:d6:14:00:eb:a3:b3:05:c0:17:
78:bd:04:27:86:a0:51:4a:bf:0e:69:46:9a:36:73:cf:a1:94:
b9:e9:53:87:1f:c9:f4:d4:97:57:8a:9e:f1:9a:15:8e:3b:66:
11:88:fe:70:cb:a7:f0:6d:b7:b7:c9:b3:03:0f:1a:1f:ea:d5:
a1:d0:eb:f5:4a:ec:a6:77:a2:1d:a8:15:75:87:3c:52:c5:bf:
9b:be:39:17:d2:6a:4b:8c:44:be:fa:0d:87:f3:78:5c:51:e5:
26:ef:75:e3:61:f7:5b:cb:3e:d6:86:a8:7c:bf:c6:3d:27:d1:
d3:a8:94:86:42:35:52:63:ce:de:b5:bf:f3:a8:54:bd:53:fc:
f9:a4:04:d0:1d:67:cb:59:35:9d:e5:e2:45:bf:73:03:fb:c8:
ee:af:69:23:3f:71:e6:39:30:11:27:4f:34:22:bd:e2:ce:33:
69:c8:39:45:8b:3e:db:a9:80:21:75:50:db:c4:b0:16:c6:7c:
64:1d:cf:f4:ec:7b:70:b8:ac:6d:44:b9:4d:2b:54:2e:20:e3:
d9:b7:73:8e:36:0c:0a:1a:e9:88:1d:8c:9f:2a:2a:60:83:42:
4d:06:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:07:47 2026 by rpki-client