Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RIWe3A9HpFM4IrNz6TvLpGxmwas.roa
File: RIWe3A9HpFM4IrNz6TvLpGxmwas.roa (raw, json)
Hash identifier: n/U9aeKY6Kj/7DhIcr7eQNejsNrorng6d6nCsEVR0G4=
Subject key identifier: 44:85:9E:DC:0F:47:A4:53:38:22:B3:73:E9:3B:CB:A4:6C:66:C1:AB
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A1C500F4E3FF1C08F0FAA18EC8E93730E4
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RIWe3A9HpFM4IrNz6TvLpGxmwas.roa
Signing time: Tue 10 Nov 2026 10:28:56 +0000
ROA not before: Tue 10 Nov 2026 10:28:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.98.149.0/24 maxlen: 24
212.66.48.0/24 maxlen: 24
212.66.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:00:f4:e3:ff:1c:08:f0:fa:a1:8e:c8:e9:37:30:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Nov 10 10:28:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44859edc0f47a4533822b373e93bcba46c66c1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:38:76:dd:28:bc:aa:8d:e6:fe:be:ab:e2:
af:a7:8b:5b:4d:48:86:b3:b6:7f:70:b1:db:7b:80:
1c:b3:86:d2:33:13:b2:31:0f:9f:3a:23:6b:58:c8:
7d:c3:91:78:b9:fe:45:38:f3:29:e8:6f:38:f3:42:
4d:3e:40:78:59:de:32:02:7e:15:d7:4d:b2:bf:24:
37:c5:a5:03:98:f3:0d:3d:80:f6:94:44:bb:8c:58:
50:b4:1a:86:d3:46:be:71:dd:fe:9f:66:e2:17:fd:
44:67:2c:b7:22:d6:a8:f6:e0:17:5c:8d:4e:b0:f5:
8d:df:3b:aa:69:c1:f1:48:f2:a0:4b:04:47:c2:8a:
65:c4:0b:81:ac:ba:d8:9c:e0:4d:17:47:fe:9e:ab:
a5:7f:03:c2:ed:09:f6:49:d1:7e:bd:8c:41:26:58:
c7:2a:bb:df:2d:a1:d3:59:08:09:a7:7e:52:6d:24:
52:c0:4e:64:11:ce:d7:5e:04:4c:ed:21:73:93:76:
e1:dd:28:b3:9f:87:40:29:e5:6b:c2:bf:c1:31:c0:
8b:f7:53:7d:7e:16:9f:98:a3:1e:e7:f3:f3:61:ce:
88:4c:51:30:e9:a1:fd:b4:07:9f:2e:12:bf:4d:a6:
25:b7:78:ec:d4:13:3c:4e:d7:a5:67:67:c1:53:b9:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:9E:DC:0F:47:A4:53:38:22:B3:73:E9:3B:CB:A4:6C:66:C1:AB
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/RIWe3A9HpFM4IrNz6TvLpGxmwas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.149.0/24
212.66.48.0/24
212.66.53.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d8:5f:d9:1e:12:80:d5:1b:02:ad:b5:8e:dc:ae:d7:2b:e5:
e9:35:67:2a:eb:45:c6:65:72:d2:b6:26:c8:20:61:16:9d:d1:
e5:45:7d:67:b4:7d:03:ac:9c:d4:5c:88:fc:64:25:c4:3a:77:
37:2a:2c:8b:44:88:77:06:f4:c3:68:33:4b:a5:73:fd:d3:c2:
35:a9:01:29:7f:ba:7a:f4:10:53:fe:74:0b:32:3a:bb:3a:34:
f1:6a:b6:58:d5:30:29:35:ce:37:b1:74:89:05:76:de:29:80:
8b:23:88:48:59:08:18:3c:ce:a2:16:99:1a:e2:3a:ef:52:07:
06:9b:93:b3:9d:30:28:6c:c6:99:2d:c1:62:37:2a:4f:ae:8d:
3b:38:eb:e0:2e:c2:17:f0:8e:23:96:c3:f3:37:a5:02:92:e0:
79:93:0d:ba:3d:e0:2f:50:1f:0e:eb:4d:e6:7b:7a:2f:c6:ae:
6d:a1:61:52:1f:f9:ea:6a:70:fd:e7:05:4b:13:ea:30:80:41:
29:4b:d3:ae:f2:09:43:d0:59:a3:96:75:48:b7:10:4c:60:04:
23:4d:33:d0:df:73:a4:38:c5:1d:53:d8:8e:fe:13:c8:ea:f3:
57:26:5e:c4:2c:88:12:6d:dd:e3:7d:d1:ac:48:10:27:73:b2:
45:27:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:46:45 2026 by rpki-client