Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WilEpQErdoCFjFFO7e_-FdqMf3Q.roa
File: WilEpQErdoCFjFFO7e_-FdqMf3Q.roa (raw, json)
Hash identifier: 9uEFzBrbFjXB1/KuRYxmit8IEUF9rU1wIlEF0ASubeQ=
Subject key identifier: 5A:29:44:A5:01:2B:76:80:85:8C:51:4E:ED:EF:FE:15:DA:8C:7F:74
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE893BA21E1BF45581CE32CEE0B437
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WilEpQErdoCFjFFO7e_-FdqMf3Q.roa
Signing time: Mon 14 Sep 2026 07:25:30 +0000
ROA not before: Mon 14 Sep 2026 07:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208753
IP address blocks: 2a0e:b107:384::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:89:3b:a2:1e:1b:f4:55:81:ce:32:ce:e0:b4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a2944a5012b7680858c514eedeffe15da8c7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:78:d4:6b:ad:37:33:ab:52:b7:aa:a1:fc:7a:
11:41:95:2e:4e:f5:b7:15:58:b5:33:e7:9f:4a:38:
b3:bc:05:02:55:a4:80:04:18:7b:38:18:a4:27:26:
72:4b:a6:9d:fb:0f:a8:cd:67:7a:6b:85:4f:44:d2:
e2:46:d8:ac:55:47:db:aa:67:57:f1:9e:b3:7d:3b:
bf:93:4d:ea:c3:fa:1d:46:97:83:20:82:9c:30:17:
4c:a3:9e:35:d4:4d:7f:ac:60:1a:1c:94:1f:e3:8a:
79:47:ee:8e:d5:5d:35:5c:89:39:1a:9c:28:1e:c6:
ab:dc:da:ff:17:46:b5:5f:1b:92:80:1f:e5:68:b5:
5b:0f:70:48:0e:5f:74:e1:72:0c:e1:8f:37:94:17:
9f:eb:d0:b1:51:9b:93:4e:82:42:45:bb:d2:3d:38:
fe:06:ab:7b:c2:2d:19:0c:f1:68:af:71:69:2e:d4:
c2:01:b5:3f:f5:1d:82:a9:2d:de:b3:6e:bf:c3:97:
23:87:9a:8c:3e:8a:2c:d3:ee:ea:54:9b:6b:a4:f7:
b8:20:60:3d:25:2a:71:0b:1c:af:8c:9d:62:e3:b3:
8a:97:29:1e:73:46:bd:57:a4:f9:9e:bb:51:7b:f1:
35:b6:3e:bc:e9:3d:15:08:e1:71:bc:00:93:fe:4b:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:44:A5:01:2B:76:80:85:8C:51:4E:ED:EF:FE:15:DA:8C:7F:74
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WilEpQErdoCFjFFO7e_-FdqMf3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:384::/48
Signature Algorithm: sha256WithRSAEncryption
af:5e:57:90:f9:bf:53:39:6b:05:dc:e3:b7:3c:a4:91:17:19:
b1:d6:97:06:63:85:a6:89:40:8b:f8:4f:50:7e:a9:ec:5d:99:
94:3f:d9:89:8f:0c:67:4b:b5:0b:5b:6b:d8:47:d9:6b:a9:8b:
eb:d8:1f:38:65:6e:16:ff:ee:c5:58:1f:7b:bd:8b:36:6f:74:
91:95:c0:f2:f6:42:4e:c7:10:04:81:65:96:f9:2f:a0:29:01:
04:17:98:00:2a:47:79:04:60:8d:4e:c5:34:b5:3f:a2:e5:8e:
a8:64:3d:7f:dc:a7:57:f1:1c:66:cd:b6:19:9c:89:95:d1:0f:
73:24:14:36:35:ae:04:38:8b:58:6f:4e:5e:35:c4:8d:8d:9b:
9e:24:f8:25:7f:81:63:a3:40:7b:f7:9a:39:89:fc:c7:6d:4a:
55:af:96:8f:f3:cc:8b:11:f8:e9:e6:d1:45:f6:53:63:aa:95:
30:d3:06:84:f9:6b:55:96:f6:cd:eb:16:1d:f3:d9:1d:1d:f4:
15:3f:cd:79:b8:74:42:ea:30:9b:2d:1e:8a:83:05:5f:41:83:
39:3c:32:51:93:7e:03:c9:38:5d:19:a8:e6:b3:9f:05:7d:e1:
d6:0d:3e:b6:5c:47:61:b4:9a:68:38:0c:1a:77:ed:10:51:45:
de:25:6e:dd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCezok7oh4b9FWBzjLO4LQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE0MDcyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTI5NDRhNTAxMmI3NjgwODU4YzUxNGVlZGVmZmUxNWRhOGM3Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HjUa603M6tSt6qh/HoRQZUuTvW3
FVi1M+efSjizvAUCVaSABBh7OBikJyZyS6ad+w+ozWd6a4VPRNLiRtisVUfbqmdX
8Z6zfTu/k03qw/odRpeDIIKcMBdMo5411E1/rGAaHJQf44p5R+6O1V01XIk5Gpwo
Hsar3Nr/F0a1XxuSgB/laLVbD3BIDl904XIM4Y83lBef69CxUZuTToJCRbvSPTj+
Bqt7wi0ZDPFor3FpLtTCAbU/9R2CqS3es26/w5cjh5qMPoos0+7qVJtrpPe4IGA9
JSpxCxyvjJ1i47OKlykec0a9V6T5nrtRe/E1tj686T0VCOFxvACT/kv98QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFopRKUBK3aAhYxRTu3v/hXajH90MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvV2lsRXBRRXJkb0NGakZGTzdlXy1GZHFNZjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6xBwOE
MA0GCSqGSIb3DQEBCwUAA4IBAQCvXleQ+b9TOWsF3OO3PKSRFxmx1pcGY4WmiUCL
+E9QfqnsXZmUP9mJjwxnS7ULW2vYR9lrqYvr2B84ZW4W/+7FWB97vYs2b3SRlcDy
9kJOxxAEgWWW+S+gKQEEF5gAKkd5BGCNTsU0tT+i5Y6oZD1/3KdX8RxmzbYZnImV
0Q9zJBQ2Na4EOItYb05eNcSNjZueJPglf4Fjo0B795o5ifzHbUpVr5aP88yLEfjp
5tFF9lNjqpUw0waE+WtVlvbN6xYd89kdHfQVP815uHRC6jCbLR6KgwVfQYM5PDJR
k34DyThdGajms58FfeHWDT62XEdhtJpoOAwad+0QUUXeJW7d
-----END CERTIFICATE-----
Generated at Tue Sep 15 01:22:56 2026 by rpki-client