Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/1WjvRzOKhnD2a533QX-zWGhy6mU.roa
File: 1WjvRzOKhnD2a533QX-zWGhy6mU.roa (raw, json)
Hash identifier: H5qbHbDAL7jdx9T9KEl6Xakz8nWIjJ0cE1oQa7xKVLA=
Subject key identifier: D5:68:EF:47:33:8A:86:70:F6:6B:9D:F7:41:7F:B3:58:68:72:EA:65
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A07C1D27BAA7D4696CEA9B40FC57A94E43
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/1WjvRzOKhnD2a533QX-zWGhy6mU.roa
Signing time: Mon 07 Sep 2026 13:44:40 +0000
ROA not before: Mon 07 Sep 2026 13:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 207.89.19.0/24 maxlen: 24
2a14:a086::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:1d:27:ba:a7:d4:69:6c:ea:9b:40:fc:57:a9:4e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 7 13:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d568ef47338a8670f66b9df7417fb3586872ea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:71:d5:bd:e3:e1:21:39:a2:3c:fd:9d:f5:
7e:75:5f:8b:44:49:ad:fa:77:aa:c4:4d:71:65:fd:
a5:f9:d6:ca:b6:cb:b6:5d:56:f6:10:4e:16:fa:49:
43:2d:19:4d:36:d4:0b:3c:1c:88:56:c9:f3:d4:5f:
e2:11:8e:2e:49:35:d7:f8:b7:da:66:94:96:20:77:
18:68:70:a2:b5:ee:5e:02:de:e7:ef:1c:3e:f7:cc:
bd:be:8f:72:45:70:92:dd:bd:d1:6c:bc:73:e2:48:
14:eb:44:cb:70:00:5f:fc:14:a2:09:3d:b9:7f:4e:
15:06:63:90:99:9b:f0:61:c6:cd:ee:ec:a2:e8:1c:
c8:9e:38:fc:66:d6:72:a1:b1:53:72:72:92:38:27:
4a:da:43:17:71:41:31:f9:64:a5:b5:a0:d9:10:fd:
51:0c:a7:f1:75:2d:97:cc:4a:a1:ff:ef:66:02:b2:
bf:a8:4b:5f:b3:9c:cd:9d:59:e7:90:2f:10:25:75:
fd:8c:de:88:51:be:da:ff:0b:69:a1:22:1a:03:e0:
a9:62:d6:30:68:d3:20:a4:93:10:d0:e6:fe:a7:aa:
a3:24:85:ed:a8:fb:01:cc:11:e7:25:28:fb:de:95:
48:4a:3c:a9:0a:0d:2d:69:01:b4:74:d6:f0:e3:e6:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:EF:47:33:8A:86:70:F6:6B:9D:F7:41:7F:B3:58:68:72:EA:65
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/1WjvRzOKhnD2a533QX-zWGhy6mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.89.19.0/24
IPv6:
2a14:a086::/32
Signature Algorithm: sha256WithRSAEncryption
58:bc:e0:40:58:e3:01:4b:fe:a4:70:71:ee:33:51:bf:58:c3:
a1:c8:d0:f4:f2:f0:a0:79:0c:bd:3c:dd:bd:5f:2d:6f:28:df:
7e:8d:15:4f:c7:94:f7:3e:ff:1b:a0:83:20:48:a4:7d:c2:3c:
4c:f6:8c:3e:d1:f5:d0:62:21:85:07:bf:a2:3d:d0:b5:89:62:
a6:98:87:81:ba:01:9e:49:bc:aa:38:ac:61:ef:de:ba:36:f1:
f9:61:d3:d0:d2:c2:35:f4:fe:9e:d0:6f:c9:dc:34:88:68:b2:
e3:75:5e:2b:28:12:70:91:66:33:31:c4:c9:95:83:4a:fd:68:
8b:41:04:e1:43:08:82:5c:e6:84:a5:85:ce:c3:24:73:69:ab:
9f:45:78:81:33:56:b8:bd:d8:45:a5:c4:79:93:71:63:ba:e6:
5e:ca:a7:ba:80:0e:0f:f6:06:77:ce:65:d9:4c:ef:54:a0:ea:
df:7e:ff:5a:2e:a0:96:82:7c:c2:80:28:77:7f:32:bc:90:24:
af:25:00:f8:c7:0b:77:36:b8:0f:0c:24:c2:af:23:fb:f1:8c:
eb:fd:bf:d5:12:7a:8d:b9:be:e3:26:8f:c7:85:64:17:9e:08:
db:fe:3e:ce:a5:05:a3:61:4c:d3:59:ad:cb:40:61:97:b8:7b:
a8:f4:4a:73
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaB8HSe6p9RpbOqbQPxXqU5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0
YTdjZGMwHhcNMjYwOTA3MTM0NDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTY4ZWY0NzMzOGE4NjcwZjY2YjlkZjc0MTdmYjM1ODY4NzJlYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ9x1b3j4SE5ojz9nfV+dV+LREmt
+neqxE1xZf2l+dbKtsu2XVb2EE4W+klDLRlNNtQLPByIVsnz1F/iEY4uSTXX+Lfa
ZpSWIHcYaHCite5eAt7n7xw+98y9vo9yRXCS3b3RbLxz4kgU60TLcABf/BSiCT25
f04VBmOQmZvwYcbN7uyi6BzInjj8ZtZyobFTcnKSOCdK2kMXcUEx+WSltaDZEP1R
DKfxdS2XzEqh/+9mArK/qEtfs5zNnVnnkC8QJXX9jN6IUb7a/wtpoSIaA+CpYtYw
aNMgpJMQ0Ob+p6qjJIXtqPsBzBHnJSj73pVISjypCg0taQG0dNbw4+ZYWwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNVo70czioZw9mud90F/s1hocuplMB8GA1UdIwQY
MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt
MmUyOGI5NjQ5OGE5LzEvMVdqdlJ6T0tobkQyYTUzM1FYLXpXR2h5Nm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5
LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAz1kTMA0E
AgACMAcDBQAqFKCGMA0GCSqGSIb3DQEBCwUAA4IBAQBYvOBAWOMBS/6kcHHuM1G/
WMOhyND08vCgeQy9PN29Xy1vKN9+jRVPx5T3Pv8boIMgSKR9wjxM9ow+0fXQYiGF
B7+iPdC1iWKmmIeBugGeSbyqOKxh7966NvH5YdPQ0sI19P6e0G/J3DSIaLLjdV4r
KBJwkWYzMcTJlYNK/WiLQQThQwiCXOaEpYXOwyRzaaufRXiBM1a4vdhFpcR5k3Fj
uuZeyqe6gA4P9gZ3zmXZTO9UoOrffv9aLqCWgnzCgCh3fzK8kCSvJQD4xwt3NrgP
DCTCryP78Yzr/b/VEnqNub7jJo/HhWQXngjb/j7OpQWjYUzTWa3LQGGXuHuo9Epz
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:58:54 2026 by rpki-client