Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa
File: w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa (raw, json)
Hash identifier: NfeOWBwkuTv2O7eYqPzr/8E7DBvsLk+YN3z1wBrs2GE=
Subject key identifier: C3:8A:4E:4B:4D:3E:59:3F:1E:93:C1:B6:31:DA:FE:60:43:D3:3C:F5
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A0142CFD35A30DE5978095D95699DD45B4
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa
Signing time: Tue 18 Aug 2026 09:21:27 +0000
ROA not before: Tue 18 Aug 2026 09:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 46.20.96.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:2c:fd:35:a3:0d:e5:97:80:95:d9:56:99:dd:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 18 09:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c38a4e4b4d3e593f1e93c1b631dafe6043d33cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:c1:38:1f:32:cf:1a:48:90:26:0d:9c:91:
af:68:17:a0:28:da:8b:72:88:95:78:d5:bb:d8:d1:
d9:44:a7:f0:98:38:bf:75:1d:37:bc:73:d4:f1:a7:
c6:b8:81:2e:e2:d2:26:ad:cc:5f:91:28:dc:ae:d9:
ea:72:f5:be:96:7b:2a:cc:92:5c:08:c0:97:17:cc:
fc:f8:8b:49:bf:72:35:d8:5b:a9:48:62:fb:20:d1:
17:1e:aa:54:a1:df:ad:57:ea:22:d0:2b:f2:3b:6b:
a3:37:69:1d:99:9f:67:07:46:ee:89:55:4e:8a:a2:
cf:98:4f:56:9d:20:6b:c2:f1:4e:bc:19:e5:b8:2e:
b4:a7:f5:16:28:62:0d:ed:00:43:36:fb:15:98:a9:
f0:ea:5d:a2:f9:e6:18:02:75:4f:71:25:c9:75:12:
b3:8d:20:30:b3:20:0b:08:84:ff:48:c4:72:72:59:
82:31:df:80:8d:ff:81:73:7e:41:7d:81:12:23:bd:
15:30:7e:a6:55:ab:f2:32:1b:50:ba:d0:3e:fe:b5:
cf:c2:02:91:46:da:14:53:f9:6a:27:92:42:34:b9:
e4:23:31:b3:dd:e9:66:83:98:01:77:8c:c9:c5:88:
1e:2d:7d:81:22:3e:2f:d0:53:df:d5:10:5a:42:c2:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8A:4E:4B:4D:3E:59:3F:1E:93:C1:B6:31:DA:FE:60:43:D3:3C:F5
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/w4pOS00-WT8ek8G2Mdr-YEPTPPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
46.20.98.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f4:3e:48:07:24:74:f9:2e:41:f5:3c:a9:b3:9c:38:86:28:
38:56:25:5c:86:43:11:7c:5c:b0:84:b5:ee:68:06:0a:1c:09:
b1:9a:7f:ed:ad:41:34:a5:41:5f:57:3c:9e:4b:0d:28:45:4a:
ac:57:4d:d1:30:67:6a:1b:4d:d9:c9:f9:c2:e5:b3:4a:31:47:
cc:aa:e4:70:c2:65:d5:11:ca:fb:88:67:33:63:97:1c:b2:1b:
c7:99:d8:2f:6a:33:e6:32:c2:54:e8:fe:65:a4:3f:f7:5a:d1:
fe:50:fa:54:26:aa:5d:89:83:48:af:b8:63:0f:8f:73:72:50:
3a:e5:b0:c9:58:1f:5c:7d:9e:b5:3a:d1:a2:46:cb:15:a7:44:
6f:9a:ff:b7:b6:7e:e5:0d:7c:0c:66:b0:57:05:38:b1:26:c4:
7a:09:42:46:7f:36:10:99:d7:03:ce:14:79:cd:1f:99:c9:50:
9a:2e:a9:3c:68:5e:72:81:48:25:e2:28:03:62:c2:40:3e:b0:
f4:7e:32:27:0f:d7:e9:b2:74:70:aa:45:15:9b:45:16:7f:15:
db:c8:bc:83:fa:8c:65:0a:ba:f6:25:f1:22:14:cd:47:61:db:
fd:d7:f1:f9:36:ea:27:cb:f3:96:b2:f2:3c:45:cd:cb:94:a7:
a5:a1:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:17 2026 by rpki-client