Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/dwClVTFnGbjR7R5pMvtxezd_4PI.roa
File: dwClVTFnGbjR7R5pMvtxezd_4PI.roa (raw, json)
Hash identifier: KUWgcD7L1mhB0Dl0zJGhLCYpqe3MeHBScDAVK3E2gf4=
Subject key identifier: 77:00:A5:55:31:67:19:B8:D1:ED:1E:69:32:FB:71:7B:37:7F:E0:F2
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019DC34F9819AB5EA1D21D3E7BFDC818F593
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/dwClVTFnGbjR7R5pMvtxezd_4PI.roa
Signing time: Sat 25 Apr 2026 06:24:26 +0000
ROA not before: Sat 25 Apr 2026 06:24:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54113
IP address blocks: 2a00:8c40:f000::/44 maxlen: 44
2a00:8c40:f010::/44 maxlen: 44
2a00:8c40:f020::/44 maxlen: 44
2a00:8c40:f030::/44 maxlen: 44
2a00:8c40:f040::/44 maxlen: 44
2a00:8c40:f050::/44 maxlen: 44
2a00:8c40:f060::/44 maxlen: 44
2a00:8c40:f070::/44 maxlen: 44
2a00:8c40:f080::/44 maxlen: 44
2a00:8c40:f090::/44 maxlen: 44
2a00:8c40:f0a0::/44 maxlen: 44
2a00:8c40:f0b0::/44 maxlen: 44
2a00:8c40:f0c0::/44 maxlen: 44
2a00:8c40:f0d0::/44 maxlen: 44
2a00:8c40:f0e0::/44 maxlen: 44
2a00:8c40:f0f0::/44 maxlen: 44
2a00:8c40:f100::/44 maxlen: 44
2a00:8c40:f110::/44 maxlen: 44
2a00:8c40:f120::/44 maxlen: 44
2a00:8c40:f130::/44 maxlen: 44
2a00:8c40:f140::/44 maxlen: 44
2a00:8c40:f150::/44 maxlen: 44
2a00:8c40:f160::/44 maxlen: 44
2a00:8c40:f170::/44 maxlen: 44
2a00:8c40:f180::/44 maxlen: 44
2a00:8c40:f190::/44 maxlen: 44
2a00:8c40:f1a0::/44 maxlen: 44
2a00:8c40:f1b0::/44 maxlen: 44
2a00:8c40:f1c0::/44 maxlen: 44
2a00:8c40:f1d0::/44 maxlen: 44
2a00:8c40:f1e0::/44 maxlen: 44
2a00:8c40:f1f0::/44 maxlen: 44
2a00:8c40:f200::/44 maxlen: 44
2a00:8c40:f210::/44 maxlen: 44
2a00:8c40:f220::/44 maxlen: 44
2a00:8c40:f230::/44 maxlen: 44
2a00:8c40:f240::/44 maxlen: 44
2a00:8c40:f250::/44 maxlen: 44
2a00:8c40:f260::/44 maxlen: 44
2a00:8c40:f270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:4f:98:19:ab:5e:a1:d2:1d:3e:7b:fd:c8:18:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Apr 25 06:24:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7700a555316719b8d1ed1e6932fb717b377fe0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:ba:49:6e:82:51:84:4a:3d:4f:df:97:eb:
29:b5:7c:94:39:db:c6:fb:db:ed:7f:3f:24:50:79:
4c:87:2b:08:ae:f3:02:7e:7a:3a:40:ab:8f:88:fe:
38:db:25:37:dd:36:a1:db:41:85:ce:95:58:66:a9:
68:3b:59:12:6e:a1:ba:32:95:6c:e3:89:1a:89:f1:
b6:4c:d9:90:0c:fb:42:11:d0:1a:db:34:bd:d3:71:
03:c9:58:af:bc:80:7d:9b:68:97:be:58:69:e1:a3:
c7:eb:b2:42:86:42:8e:63:fb:59:d4:03:9e:93:d4:
42:79:37:a7:09:7b:ca:26:d1:f3:84:c0:db:9e:fc:
63:c7:5b:89:82:d4:eb:07:05:6f:d7:50:fd:89:b1:
a8:8e:32:d2:8d:69:f4:e3:3c:05:eb:d6:6b:bb:e7:
33:b4:7f:a2:f6:5b:e8:da:e2:ff:1e:f9:ab:c8:e4:
2f:8f:6d:6c:a4:2a:a4:02:ce:da:66:4b:1e:ba:b2:
76:72:5b:3d:b1:f0:54:f7:f0:53:3a:ce:96:d4:2a:
89:64:cf:af:45:e4:8a:58:a5:78:16:b3:5b:9b:48:
f1:06:03:a3:18:25:7c:90:59:4c:27:3e:a1:cc:8f:
35:62:fc:f0:ab:e8:d4:5b:f4:98:cf:0d:da:22:2b:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:A5:55:31:67:19:B8:D1:ED:1E:69:32:FB:71:7B:37:7F:E0:F2
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/dwClVTFnGbjR7R5pMvtxezd_4PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8c40:f000::-2a00:8c40:f27f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:ac:60:73:3e:af:83:c8:cd:e6:f6:d9:79:b7:71:c7:ed:5d:
85:b2:1e:84:04:f3:71:c1:f9:24:5b:28:22:ae:1d:ea:a4:14:
d1:0e:9e:cb:a2:bc:de:8c:0a:09:29:df:44:b2:4f:d5:b2:57:
27:81:eb:65:84:6a:fa:a5:27:16:a5:c4:2d:f6:40:04:6c:ad:
fb:8f:c8:51:65:b8:d5:d0:77:19:30:18:1a:c6:4f:82:54:13:
0d:25:47:0a:74:58:2a:09:f8:8d:08:ee:80:3c:b6:58:07:55:
0c:6b:5b:f3:db:c7:61:7d:df:31:f6:de:ec:43:e7:6f:b8:30:
a9:08:d4:47:b3:c0:af:72:5b:c8:6c:f7:b7:8a:f5:93:60:2b:
95:3a:0e:2f:02:f3:90:e0:4f:07:a4:b8:05:20:b7:cb:4e:f3:
af:c2:ba:ee:d7:13:5a:29:f6:7c:3e:c1:27:79:8a:0a:2b:c4:
a9:7c:e0:ee:13:fe:70:e0:0b:04:f3:16:d8:70:4e:be:a7:0b:
68:fc:34:2b:1b:8c:4a:80:49:ba:c3:52:13:59:4c:1f:ca:3b:
4d:df:48:8b:ff:c3:e0:95:48:42:2d:24:d8:30:16:30:17:e4:
a2:d0:62:1f:45:f7:47:15:29:22:50:c0:11:58:b4:df:1d:c0:
9d:6f:60:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 3 17:50:02 2026 by rpki-client