Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/0weFom61y6ukwuaaCPh9keZNymY.roa
File: 0weFom61y6ukwuaaCPh9keZNymY.roa (raw, json)
Hash identifier: yDwilPZpweiSitbY35q+TNB81hVv9Y1/hq17yUBdaBE=
Subject key identifier: D3:07:85:A2:6E:B5:CB:AB:A4:C2:E6:9A:08:F8:7D:91:E6:4D:CA:66
Certificate issuer: /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial: 01A0D7E3A4C4B099428AA1A8BE4073053D55
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/0weFom61y6ukwuaaCPh9keZNymY.roa
Signing time: Fri 25 Sep 2026 09:26:55 +0000
ROA not before: Fri 25 Sep 2026 09:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:e3:a4:c4:b0:99:42:8a:a1:a8:be:40:73:05:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Validity
Not Before: Sep 25 09:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d30785a26eb5cbaba4c2e69a08f87d91e64dca66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:f0:3e:9e:eb:be:6b:3e:30:42:1f:0f:97:
17:61:a3:eb:1e:93:4c:0b:e9:a7:72:5c:74:14:d1:
be:1b:75:55:eb:c4:d8:ca:3d:ab:ca:40:e3:21:5b:
9b:70:e4:9e:e8:ad:df:bd:c8:b9:2e:eb:8d:fa:40:
ad:9a:0c:13:bd:28:8c:3f:83:d7:a7:96:31:52:c4:
5e:6a:21:4b:66:f4:e1:9f:39:1a:f1:c7:6d:af:3e:
e0:2c:db:39:a9:e0:b3:d0:0f:77:ea:84:c6:39:1e:
1b:17:a5:51:89:c5:7b:57:24:1b:0f:e2:1f:12:bf:
98:b3:5a:a3:15:83:e0:2c:55:06:8c:e6:2f:55:ee:
9e:7b:bf:38:57:11:f9:82:2c:47:bc:00:62:1d:ee:
f5:a9:27:fe:f9:1f:ad:7e:e5:6f:ad:09:db:04:fb:
78:37:ec:20:b4:24:26:4c:89:9d:9d:fb:84:b4:58:
ee:db:25:92:dc:6e:ed:c9:ed:6a:ea:f0:61:00:0d:
90:ae:85:2e:03:32:80:4b:c2:f3:1d:5d:ae:0e:3e:
51:28:1e:4a:b7:d1:ef:6e:fa:df:12:37:ae:e2:1f:
f7:ba:3e:8a:99:ad:59:bb:fb:42:3f:c1:9f:08:18:
47:da:0c:ac:ec:bc:03:28:f6:3f:6b:ba:3a:1c:1b:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:07:85:A2:6E:B5:CB:AB:A4:C2:E6:9A:08:F8:7D:91:E6:4D:CA:66
X509v3 Authority Key Identifier:
keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/0weFom61y6ukwuaaCPh9keZNymY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
28:60:7b:69:0e:24:e3:58:be:03:40:f9:d2:b6:df:59:86:6e:
82:4f:df:55:51:ff:0a:06:d8:52:36:23:7f:1e:bb:c4:1f:45:
96:8f:30:b3:5c:d3:de:fc:a3:9c:9d:05:9b:ef:dd:69:7d:0e:
c3:93:ae:b8:50:8c:53:f5:63:19:83:0a:39:c7:1c:c0:99:ab:
4a:40:d7:94:45:0a:af:92:9f:7e:0f:9b:85:11:db:9d:f4:2f:
56:29:a1:69:12:73:4d:93:6b:74:0a:c4:a0:d5:9e:fd:44:ff:
7a:34:cb:db:ba:c1:ad:00:c5:24:f1:64:b2:db:85:52:aa:d4:
35:ca:df:2f:0b:de:97:e1:9c:e7:1c:40:d3:8e:11:09:f4:1c:
36:fa:50:a2:95:56:52:b2:b7:3b:4e:a0:de:d8:e9:43:e8:d4:
3c:97:ae:b4:9e:05:1c:b0:9e:5d:b1:97:97:63:95:27:d9:ac:
1f:43:aa:08:38:b4:0a:5d:81:3f:f1:2f:30:84:aa:a1:12:de:
d6:08:ca:81:bd:70:28:9e:ac:a1:04:33:80:73:22:76:e3:89:
cc:27:83:cc:5f:9f:82:9a:5a:86:39:3b:b7:51:9c:bb:ab:2e:
6f:d6:70:70:5a:e7:19:2d:f0:02:3b:46:a0:48:40:f3:26:2e:
4f:d9:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:55 2026 by rpki-client