Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0W6WQIzjDcN2QynfAKLOrpSzOkM.roa
File: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (raw, json)
Hash identifier: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=
Subject key identifier: D1:6E:96:40:8C:E3:0D:C3:76:43:29:DF:00:A2:CE:AE:94:B3:3A:43
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0A09AFFE6BB12A9113F41E494BDBDA791
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0W6WQIzjDcN2QynfAKLOrpSzOkM.roa
Signing time: Mon 14 Sep 2026 15:48:27 +0000
ROA not before: Mon 14 Sep 2026 15:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216147
IP address blocks: 45.143.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:9a:ff:e6:bb:12:a9:11:3f:41:e4:94:bd:bd:a7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 14 15:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d16e96408ce30dc3764329df00a2ceae94b33a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:05:2f:44:4b:3c:0b:3a:9a:a4:63:08:68:
c8:5e:e3:1a:19:c7:91:b2:4f:36:93:7f:67:02:68:
06:3c:af:58:b3:fe:b9:b7:3e:d0:81:05:de:fb:3d:
cb:17:eb:9e:dc:f5:d5:33:bf:53:d6:a1:96:aa:df:
d1:a4:de:b3:76:a9:76:6f:7e:1d:0e:8e:8f:2e:02:
37:d6:72:14:aa:bc:8e:f3:75:05:b5:71:40:f6:ae:
27:43:33:58:e0:9d:3d:40:49:2c:d0:2e:e6:bd:96:
7a:13:c5:32:f8:7e:dc:7e:96:66:96:41:09:7d:0a:
b5:8e:1c:94:8f:4b:80:5f:17:84:af:f6:3d:f0:d5:
39:c8:cb:2c:ff:4f:f7:97:eb:35:ac:7f:91:e9:42:
a7:ca:e5:7f:bd:e3:06:1d:d4:5a:c9:dd:a0:bb:af:
85:0e:82:39:a6:4c:88:9f:7a:04:ef:94:6e:b1:62:
73:42:39:c0:e9:01:7e:51:1c:99:d4:cd:33:21:e0:
1a:81:78:29:ee:17:0a:0b:3b:89:8c:0a:c3:52:f3:
16:1f:86:7f:3d:42:86:e2:4f:0b:98:fe:b3:9f:a9:
4d:54:91:d0:22:5e:92:a1:ad:08:e2:b4:ee:af:30:
7f:52:0a:7d:af:07:61:4b:92:31:e3:02:7b:37:9d:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:96:40:8C:E3:0D:C3:76:43:29:DF:00:A2:CE:AE:94:B3:3A:43
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/0W6WQIzjDcN2QynfAKLOrpSzOkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:51:7a:68:12:4f:02:53:bb:cc:f4:09:c6:9f:d5:a8:83:b5:
40:91:10:16:7f:8b:db:dc:7a:5e:8f:2e:9a:f3:c5:3c:4e:c2:
59:f9:03:22:e3:34:10:14:24:9b:54:4b:a4:e5:d2:3f:46:32:
b7:38:a4:8a:90:b9:4f:86:e6:d3:c4:a2:a7:39:9b:29:e1:9f:
c4:6f:9d:0a:ab:37:15:59:7c:65:53:7a:f6:de:fd:31:b7:c8:
6f:ad:96:3c:6b:9b:2e:2b:ec:f7:5a:71:69:00:45:d2:fe:f9:
05:ce:8c:f9:9e:de:b2:5a:52:43:fa:1c:e1:46:14:b1:b2:cf:
7a:19:6d:fe:0a:7a:88:85:ce:98:52:38:ad:13:03:7d:26:b8:
1f:11:ec:8f:e8:38:08:d5:fe:5c:a9:11:66:f7:27:e1:4f:31:
46:5c:64:8e:77:45:82:0a:2f:57:10:85:ac:e1:51:a3:d8:0d:
67:93:fe:a3:f7:8f:ed:97:b3:a7:a3:ad:ea:0c:18:56:08:d9:
e2:d3:b9:42:63:34:e8:36:bd:0a:e8:5c:c4:5e:44:8d:9a:31:
24:59:af:a4:9c:8f:cf:a4:17:4d:c5:61:ca:26:eb:a8:8d:65:
67:21:b3:16:a6:61:2e:4e:6f:91:dd:b6:9e:9c:ce:77:40:97:
58:5a:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:48 2026 by rpki-client