Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wo7HMWTKzL4KQH_XmOyP9W3quYk.roa
File: wo7HMWTKzL4KQH_XmOyP9W3quYk.roa (raw, json)
Hash identifier: 6SRDl+MUI69wFuXIlfVF5E1JYaN4fy+QYftcn1Ok0k0=
Subject key identifier: C2:8E:C7:31:64:CA:CC:BE:0A:40:7F:D7:98:EC:8F:F5:6D:EA:B9:89
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019E99EA4EBFBF6A38B536407A4AC33CC560
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wo7HMWTKzL4KQH_XmOyP9W3quYk.roa
Signing time: Fri 05 Jun 2026 22:32:10 +0000
ROA not before: Fri 05 Jun 2026 22:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 9.233.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:ea:4e:bf:bf:6a:38:b5:36:40:7a:4a:c3:3c:c5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jun 5 22:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c28ec73164caccbe0a407fd798ec8ff56deab989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:d6:ac:a8:68:df:75:f9:12:2b:53:a5:c3:
b7:11:38:37:18:c0:c3:99:61:e1:46:50:14:1f:61:
dc:7f:e0:eb:a0:95:99:73:a4:9c:43:ad:9a:42:22:
7f:de:b0:c1:c6:a9:17:04:2f:77:8e:7c:e4:b5:26:
73:c1:76:a6:43:50:37:3b:0e:29:11:2a:c7:fa:69:
1d:25:ab:c1:b7:d5:64:79:fa:e7:6e:25:ae:d9:22:
99:02:70:22:ec:34:85:b0:02:41:fe:a7:1c:9a:ff:
a2:73:65:3f:d6:ff:ac:4c:29:7f:4d:ac:38:7b:66:
3d:d0:b4:3d:60:1d:8c:be:5b:3b:bf:43:fe:97:08:
6b:1f:d0:a4:56:af:92:23:09:80:4b:a6:5f:e4:69:
28:c6:68:78:73:b7:1b:4c:d3:5f:8f:8a:79:db:21:
15:8a:eb:d1:83:f8:6d:0e:a2:55:7d:ec:2a:60:5d:
9c:8f:e0:6c:f8:d1:9d:5f:9c:5a:05:d6:7a:1a:70:
53:22:4a:5e:9a:7a:d5:ed:ed:ba:11:25:7c:0f:37:
dd:3e:46:94:17:57:4c:33:60:dc:cd:78:78:1a:ac:
2c:7b:5c:03:ba:67:5c:ed:bb:07:03:8e:1c:c3:f4:
38:7d:d6:55:35:04:6b:19:02:dc:09:c8:01:9b:95:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:C7:31:64:CA:CC:BE:0A:40:7F:D7:98:EC:8F:F5:6D:EA:B9:89
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/wo7HMWTKzL4KQH_XmOyP9W3quYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.233.32.0/20
Signature Algorithm: sha256WithRSAEncryption
86:a4:6a:ec:3b:b8:90:57:fc:25:36:50:85:1a:c2:d1:38:79:
d4:1f:d4:69:00:d5:5a:fa:2a:b1:93:e8:3e:7d:75:4b:0f:ab:
8b:0f:b0:96:dd:d2:51:44:ce:9a:c4:0b:ee:a9:f5:69:9c:03:
a3:a7:7c:96:28:17:89:ce:d2:c2:75:43:83:4c:b9:85:f0:98:
62:30:cc:56:a6:19:44:50:c9:6a:48:53:50:00:ec:d2:79:bd:
84:34:e1:9c:e0:d9:cc:03:3e:15:66:a0:1b:1d:33:27:14:0d:
a0:de:24:da:a3:66:35:75:8f:b5:86:0f:79:82:fb:9c:e8:27:
55:a6:96:2e:9d:e5:ce:9f:4c:26:34:3e:50:a9:f5:ca:bc:7e:
c4:ce:ab:e2:3f:df:1b:c7:ec:3d:c7:be:3d:12:04:ea:b8:65:
5a:bf:e3:24:8d:43:a7:a9:fb:03:00:a2:32:ef:fc:9e:44:33:
a8:57:38:c6:3e:7c:44:ef:3c:0e:a0:1c:cf:64:91:29:11:8b:
b8:81:1e:94:f5:59:57:fa:2a:b2:59:1b:56:1f:d2:cb:04:a2:
5c:5f:5b:3d:b2:16:ba:a3:32:68:7f:5e:8f:fc:68:e3:03:b8:
6e:2c:4e:c4:1f:a5:65:5e:9b:7b:42:23:a3:38:73:1a:f2:c7:
61:e5:e9:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6Z6k6/v2o4tTZAekrDPMVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwNjA1MjIzMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjhlYzczMTY0Y2FjY2JlMGE0MDdmZDc5OGVjOGZmNTZkZWFiOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf3WrKho33X5EitTpcO3ETg3GMDD
mWHhRlAUH2Hcf+DroJWZc6ScQ62aQiJ/3rDBxqkXBC93jnzktSZzwXamQ1A3Ow4p
ESrH+mkdJavBt9VkefrnbiWu2SKZAnAi7DSFsAJB/qccmv+ic2U/1v+sTCl/Taw4
e2Y90LQ9YB2Mvls7v0P+lwhrH9CkVq+SIwmAS6Zf5Gkoxmh4c7cbTNNfj4p52yEV
iuvRg/htDqJVfewqYF2cj+Bs+NGdX5xaBdZ6GnBTIkpemnrV7e26ESV8DzfdPkaU
F1dMM2DczXh4Gqwse1wDumdc7bsHA44cw/Q4fdZVNQRrGQLcCcgBm5WI2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKOxzFkysy+CkB/15jsj/Vt6rmJMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvd283SE1XVEt6TDRLUUhfWG1PeVA5VzNxdVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQECekgMA0G
CSqGSIb3DQEBCwUAA4IBAQCGpGrsO7iQV/wlNlCFGsLROHnUH9RpANVa+iqxk+g+
fXVLD6uLD7CW3dJRRM6axAvuqfVpnAOjp3yWKBeJztLCdUODTLmF8JhiMMxWphlE
UMlqSFNQAOzSeb2ENOGc4NnMAz4VZqAbHTMnFA2g3iTao2Y1dY+1hg95gvuc6CdV
ppYuneXOn0wmND5QqfXKvH7EzqviP98bx+w9x749EgTquGVav+MkjUOnqfsDAKIy
7/yeRDOoVzjGPnxE7zwOoBzPZJEpEYu4gR6U9VlX+iqyWRtWH9LLBKJcX1s9sha6
ozJof16P/GjjA7huLE7EH6VlXpt7QiOjOHMa8sdh5ekT
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:17:11 2026 by rpki-client