Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/w63kKI_mBDCG21QrU3T3R9rvs6U.roa
File: w63kKI_mBDCG21QrU3T3R9rvs6U.roa (raw, json)
Hash identifier: NKAlyEgk4CaJc6ivXd4pwvDanRMUmfx/3ZaDs73TMt0=
Subject key identifier: C3:AD:E4:28:8F:E6:04:30:86:DB:54:2B:53:74:F7:47:DA:EF:B3:A5
Certificate issuer: /CN=fc9015982582f8fae2d93a071a526e57b7661564
Certificate serial: 019F236865AF92B287C30067BEF669F989D1
Authority key identifier: FC:90:15:98:25:82:F8:FA:E2:D9:3A:07:1A:52:6E:57:B7:66:15:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/w63kKI_mBDCG21QrU3T3R9rvs6U.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200844
IP address blocks: 185.94.52.0/22 maxlen: 22
185.94.55.0/24 maxlen: 24
2a04:4ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:65:af:92:b2:87:c3:00:67:be:f6:69:f9:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9015982582f8fae2d93a071a526e57b7661564
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3ade4288fe6043086db542b5374f747daefb3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:ce:d6:e8:c5:2a:30:a8:fc:65:23:d8:1b:
b5:40:a2:e1:8e:e8:c7:0c:82:87:9a:1c:2a:f6:b0:
62:e7:0f:38:fc:a6:d1:a2:b6:14:68:db:0a:93:9a:
65:6a:aa:bd:14:49:b1:0c:a9:63:f5:43:c7:25:58:
c1:9b:74:a9:28:b8:5d:79:8d:f7:41:d6:ed:a9:2e:
d5:77:53:34:33:72:b7:cf:da:da:16:82:2f:4a:db:
f7:f4:18:65:d2:3c:e9:5b:f8:22:ac:7f:8e:31:4e:
2b:85:7d:1e:b3:fa:bc:e4:13:8b:2c:24:8f:cf:3d:
b1:00:4c:8f:be:5a:34:61:af:fd:8b:35:cf:9a:78:
85:e9:b4:95:c3:80:50:72:6e:f9:3b:f6:89:70:2a:
dd:35:59:22:a7:f5:ec:99:21:10:c0:c5:0c:10:9c:
77:74:a4:b5:39:01:d1:bc:db:19:d7:a5:a3:21:76:
3b:f5:ba:9b:c2:b2:d1:74:d6:fe:f6:8e:f0:b4:0d:
c2:4c:25:c5:a9:0c:d5:da:4b:2e:72:2c:82:50:e6:
37:6e:26:ca:0b:20:ab:2a:08:64:51:f0:fb:ec:25:
b1:bd:1f:45:3b:29:32:96:a9:97:47:b7:44:20:d7:
35:9c:39:ad:0f:aa:7d:4f:21:87:82:17:ff:45:8f:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AD:E4:28:8F:E6:04:30:86:DB:54:2B:53:74:F7:47:DA:EF:B3:A5
X509v3 Authority Key Identifier:
keyid:FC:90:15:98:25:82:F8:FA:E2:D9:3A:07:1A:52:6E:57:B7:66:15:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/w63kKI_mBDCG21QrU3T3R9rvs6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1dcea9-b3a1-40f6-b6ff-cdd3e55ea4fc/1/_JAVmCWC-Pri2ToHGlJuV7dmFWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.52.0/22
IPv6:
2a04:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
69:49:17:3b:04:cf:1b:57:e5:a8:cd:01:44:3a:98:96:1d:e0:
4e:d0:50:ae:b6:8c:de:f3:cf:51:bb:50:1e:b3:23:93:26:82:
7d:f6:21:7e:23:ed:e2:ad:81:7f:f9:e5:37:3b:b7:50:85:b2:
02:c9:90:b6:ff:7c:7e:e8:98:7f:3d:f6:45:4d:c3:8c:cf:36:
93:90:02:f4:ec:96:19:04:06:d1:89:45:0c:4e:92:74:5e:c2:
e9:83:1f:85:fc:aa:3d:6f:12:c2:42:ca:73:f0:8b:ec:96:5d:
17:19:15:94:fc:59:63:95:1f:85:2c:fa:26:18:8d:31:1c:34:
af:06:45:ea:13:56:f2:72:bb:f7:89:18:12:ce:26:50:fe:e2:
78:ef:c9:67:be:f8:c6:cf:fc:a2:f7:82:8a:e0:d8:41:6d:35:
5e:c6:a6:de:e2:75:91:13:33:8a:a8:6d:3f:57:98:60:7f:7a:
00:39:10:77:8e:db:49:6d:fc:46:00:31:57:88:c1:a3:1d:18:
d0:40:b8:71:cc:39:30:0d:bb:25:96:1f:35:cb:a1:9f:9e:c1:
72:a4:bd:f8:e5:e4:64:ed:d3:83:35:78:ab:3b:f0:e2:7e:da:
6b:b2:f0:de:18:0c:e7:d5:0c:bb:0f:5e:7b:a1:ae:45:97:44:
c2:fa:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:51 2026 by rpki-client