Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/RWe6i-Qv49bqcb6RZi-CLCwj3HY.roa
File: RWe6i-Qv49bqcb6RZi-CLCwj3HY.roa (raw, json)
Hash identifier: IAsCRcrNfl36HxqP4OK+c8W8gr6kQGmxpXJ06yNbYFE=
Subject key identifier: 45:67:BA:8B:E4:2F:E3:D6:EA:71:BE:91:66:2F:82:2C:2C:23:DC:76
Certificate issuer: /CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Certificate serial: 01A1077A5EC10AB362902A8A5B1A956D1FCF
Authority key identifier: 92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/RWe6i-Qv49bqcb6RZi-CLCwj3HY.roa
Signing time: Sun 04 Oct 2026 15:13:42 +0000
ROA not before: Sun 04 Oct 2026 15:13:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218653
IP address blocks: 188.241.38.0/24 maxlen: 24
2a0e:6240::/29 maxlen: 48
2a0e:6240::/44 maxlen: 44
2a0e:6240:10::/44 maxlen: 44
2a0e:6240:20::/44 maxlen: 44
2a0e:6240:30::/44 maxlen: 44
2a0e:6240:e000::/44 maxlen: 44
2a0e:6240:fffe::/48 maxlen: 48
2a0e:6240:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:7a:5e:c1:0a:b3:62:90:2a:8a:5b:1a:95:6d:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921e3c927e3962fe5726edb3f246b2dbd9257716
Validity
Not Before: Oct 4 15:13:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4567ba8be42fe3d6ea71be91662f822c2c23dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:9a:bc:40:7a:ad:03:21:3c:d2:f0:49:b5:
38:6d:27:11:f4:e6:7f:53:11:38:bd:d8:67:a7:a6:
c4:d2:97:61:8b:84:56:c4:d6:1e:dd:69:a9:35:fd:
c1:8d:46:51:4d:b6:7d:83:09:5a:eb:ea:f6:00:7f:
c9:f8:e8:12:19:60:77:c7:26:07:31:19:ec:d3:3f:
24:7e:f4:c9:d7:ff:b2:5d:6e:6b:3b:c0:19:c1:fb:
ff:79:61:aa:89:5d:f1:bc:e5:4c:bd:83:c0:1b:bf:
c2:f0:2f:29:7a:08:a9:86:8b:39:a3:3e:44:2d:d6:
f7:77:7a:b1:7e:d0:2a:48:eb:d4:cf:e0:04:f0:ab:
bb:03:2f:27:cc:9c:5c:2e:63:cf:46:c8:03:d8:89:
13:3e:f5:0b:63:1c:bb:1e:35:f3:95:34:f6:ef:96:
b7:15:1f:ef:0a:b7:fb:2e:e0:a9:a8:8c:ed:43:71:
d6:7f:c6:c5:0c:7e:e3:92:db:ee:97:96:cf:1e:30:
2b:98:47:df:d4:60:f8:2e:90:cb:17:e3:ec:97:7c:
85:f2:07:28:a6:ae:9e:96:ff:d5:1b:af:b3:a9:6b:
af:3e:0f:8b:fd:1e:4a:53:8c:8c:8f:f0:4c:f9:67:
32:d4:64:02:93:56:6e:af:9f:43:1a:c8:09:72:a9:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:BA:8B:E4:2F:E3:D6:EA:71:BE:91:66:2F:82:2C:2C:23:DC:76
X509v3 Authority Key Identifier:
keyid:92:1E:3C:92:7E:39:62:FE:57:26:ED:B3:F2:46:B2:DB:D9:25:77:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kh48kn45Yv5XJu2z8kay29kldxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/RWe6i-Qv49bqcb6RZi-CLCwj3HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/878a6c-9d6f-49d1-bef3-ff0c5b156927/1/kh48kn45Yv5XJu2z8kay29kldxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.38.0/24
IPv6:
2a0e:6240::/29
Signature Algorithm: sha256WithRSAEncryption
92:37:94:6c:ae:63:c0:25:ce:15:d8:ab:11:99:16:ab:b8:53:
de:a5:16:40:70:b9:3a:0f:f9:f1:5d:77:28:e0:79:a1:fa:c6:
e2:76:88:d7:5b:d6:27:70:6b:c5:dc:a9:34:8b:d7:50:c3:c0:
a3:49:05:94:7b:d2:3f:5b:48:34:5b:4b:e1:e7:16:10:49:ad:
c4:23:0c:a8:75:9b:65:28:e9:ee:a3:91:0d:5b:64:4f:ef:bf:
79:b9:cc:21:d8:db:fc:4b:f3:44:01:43:9a:eb:0b:8c:5b:3b:
b4:53:83:03:71:74:4a:8f:8a:9e:de:b0:a2:04:76:b3:d8:df:
1f:c7:85:f6:4f:c2:09:7a:4b:02:c0:e6:0f:a9:09:85:e4:8f:
cf:a5:0f:a6:60:e6:10:d9:80:16:2e:f5:cf:e4:4e:80:21:c8:
13:43:9b:9d:49:c9:55:74:63:14:d1:13:dd:aa:c7:99:aa:a6:
77:9a:06:0a:05:86:8e:5b:40:2c:6f:9b:00:a0:d1:a3:29:34:
05:27:15:c0:4c:dd:c7:b0:d2:c4:ca:5f:94:a0:55:54:2f:b3:
08:e1:fc:0b:77:15:db:e0:f3:bd:6a:17:df:10:cf:84:69:1f:
44:71:24:4f:13:fd:aa:85:44:8d:15:1f:b1:ce:32:55:cd:f7:
62:0e:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:13:39 2026 by rpki-client