Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/WVpSnVD2XbbHskptNMohrIQV0mQ.roa
File: WVpSnVD2XbbHskptNMohrIQV0mQ.roa (raw, json)
Hash identifier: ekTZwonJWta0T5gYa1GrQIkkLaJSP+32NHWlky3tYhI=
Subject key identifier: 59:5A:52:9D:50:F6:5D:B6:C7:B2:4A:6D:34:CA:21:AC:84:15:D2:64
Certificate issuer: /CN=dbc92025adb368cb9532098986077079b01c1655
Certificate serial: 01A0F415BA9FB9E56C0A4D8B614206FF7FE8
Authority key identifier: DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/WVpSnVD2XbbHskptNMohrIQV0mQ.roa
Signing time: Wed 30 Sep 2026 20:50:59 +0000
ROA not before: Wed 30 Sep 2026 20:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a07:347::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:15:ba:9f:b9:e5:6c:0a:4d:8b:61:42:06:ff:7f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc92025adb368cb9532098986077079b01c1655
Validity
Not Before: Sep 30 20:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=595a529d50f65db6c7b24a6d34ca21ac8415d264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:5e:b4:2c:f4:86:20:d7:ea:19:b9:29:e3:
50:31:52:11:25:f3:36:cd:a3:9b:25:21:ec:3f:da:
3c:46:ab:0a:69:c2:65:cd:3d:75:55:70:36:8f:19:
d9:20:50:05:d0:3a:f1:75:29:f2:22:b0:17:ce:d8:
77:25:5a:6c:6c:2e:8b:26:ee:b0:26:1a:b4:70:5b:
cd:47:fd:6c:a8:68:52:85:f5:ca:14:27:1a:6d:2b:
65:f7:b5:2b:0d:a8:45:22:37:1a:a1:eb:c4:3c:b0:
fc:29:3c:9f:6b:57:8a:61:a0:b2:73:d2:48:e0:9b:
ba:0b:0e:82:ef:bc:cd:82:77:35:b7:ab:df:53:0e:
ba:64:65:ca:e0:dd:e0:82:c5:e1:f8:a0:83:36:e5:
39:e6:e0:e2:b0:f5:f2:00:39:ed:8a:81:da:7d:b5:
27:72:9c:ca:16:56:c2:49:43:d0:24:e9:d3:6d:96:
66:bf:ad:27:fb:53:24:60:3b:66:83:6b:ff:44:a3:
2a:6e:5b:6c:51:46:48:15:9c:36:c7:a8:2c:62:6f:
a5:88:4d:6d:7d:1b:b5:e1:7f:d0:0c:8a:4d:b2:d8:
9f:35:2b:7e:6a:7a:fd:10:53:1f:3c:c3:69:fb:b1:
3d:f2:ac:41:7b:42:a6:cb:99:d7:6c:7b:36:e6:d5:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5A:52:9D:50:F6:5D:B6:C7:B2:4A:6D:34:CA:21:AC:84:15:D2:64
X509v3 Authority Key Identifier:
keyid:DB:C9:20:25:AD:B3:68:CB:95:32:09:89:86:07:70:79:B0:1C:16:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28kgJa2zaMuVMgmJhgdwebAcFlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/WVpSnVD2XbbHskptNMohrIQV0mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/000d6b-0ffc-46de-a2a6-fac16ed10a4a/1/28kgJa2zaMuVMgmJhgdwebAcFlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:347::/32
Signature Algorithm: sha256WithRSAEncryption
06:6e:72:67:32:e5:8c:57:81:aa:4b:9e:9a:dd:95:17:ec:48:
0a:4a:ea:35:64:4b:6c:84:4c:20:83:7d:e6:59:37:4d:a8:17:
de:4d:61:14:8a:57:6a:e4:d2:35:da:52:7c:11:6f:3b:ab:1a:
48:15:5c:3a:29:00:b5:c7:6b:0e:f6:74:72:b2:54:82:38:f2:
92:ca:84:22:b8:a3:fb:6d:ab:46:4e:fe:8c:b9:4c:0f:56:14:
32:f1:59:96:6c:3d:43:16:e1:af:87:8e:45:60:54:72:1c:dd:
e6:6d:fd:ed:3c:1c:ba:04:70:a2:ae:f6:33:6a:08:20:94:b8:
a9:e0:0f:1a:b3:2c:1e:75:9b:02:44:3c:23:2a:68:ed:88:c0:
be:f8:62:af:83:c5:a8:f4:53:0e:80:19:d7:fb:74:b1:f3:e3:
cd:a6:bb:04:13:1f:5f:68:d4:7d:30:cf:2d:9a:d1:88:e4:ec:
d7:cb:8a:be:9b:69:13:12:d0:04:29:30:30:c3:81:4c:6d:00:
b4:45:5a:8f:43:08:51:84:bb:25:e0:60:d1:f6:e2:26:b3:18:
27:a1:41:93:0e:ad:a6:69:9d:16:fe:c6:e2:de:ca:6a:b2:94:
43:b8:ce:68:6a:39:70:ce:d7:ae:78:92:48:5d:ab:f3:42:3e:
de:35:19:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaD0FbqfueVsCk2LYUIG/3/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzkyMDI1YWRiMzY4Y2I5NTMyMDk4OTg2MDc3MDc5YjAx
YzE2NTUwHhcNMjYwOTMwMjA1MDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTVhNTI5ZDUwZjY1ZGI2YzdiMjRhNmQzNGNhMjFhYzg0MTVkMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSdetCz0hiDX6hm5KeNQMVIRJfM2
zaObJSHsP9o8RqsKacJlzT11VXA2jxnZIFAF0DrxdSnyIrAXzth3JVpsbC6LJu6w
Jhq0cFvNR/1sqGhShfXKFCcabStl97UrDahFIjcaoevEPLD8KTyfa1eKYaCyc9JI
4Ju6Cw6C77zNgnc1t6vfUw66ZGXK4N3ggsXh+KCDNuU55uDisPXyADntioHafbUn
cpzKFlbCSUPQJOnTbZZmv60n+1MkYDtmg2v/RKMqbltsUUZIFZw2x6gsYm+liE1t
fRu14X/QDIpNstifNSt+anr9EFMfPMNp+7E98qxBe0Kmy5nXbHs25tUPMQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFlaUp1Q9l22x7JKbTTKIayEFdJkMB8GA1UdIwQY
MBaAFNvJICWts2jLlTIJiYYHcHmwHBZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhrZ0phMnphTXVWTWdtSmhnZHdlYkFjRmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMDBkNmItMGZmYy00NmRlLWEyYTYt
ZmFjMTZlZDEwYTRhLzEvV1ZwU25WRDJYYmJIc2twdE5Nb2hySVFWMG1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMDBkNmItMGZmYy00NmRlLWEyYTYtZmFjMTZlZDEwYTRh
LzEvMjhrZ0phMnphTXVWTWdtSmhnZHdlYkFjRmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgcDRzAN
BgkqhkiG9w0BAQsFAAOCAQEABm5yZzLljFeBqkuemt2VF+xICkrqNWRLbIRMIIN9
5lk3TagX3k1hFIpXauTSNdpSfBFvO6saSBVcOikAtcdrDvZ0crJUgjjyksqEIrij
+22rRk7+jLlMD1YUMvFZlmw9Qxbhr4eORWBUchzd5m397TwcugRwoq72M2oIIJS4
qeAPGrMsHnWbAkQ8Iypo7YjAvvhir4PFqPRTDoAZ1/t0sfPjzaa7BBMfX2jUfTDP
LZrRiOTs18uKvptpExLQBCkwMMOBTG0AtEVaj0MIUYS7JeBg0fbiJrMYJ6FBkw6t
pmmdFv7G4t7KarKUQ7jOaGo5cM7XrniSSF2r80I+3jUZjg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:11 2026 by rpki-client