Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/W9qey5baqBHma2r8fwFEZR9-Ldg.roa
File: W9qey5baqBHma2r8fwFEZR9-Ldg.roa (raw, json)
Hash identifier: SLfqUOdbocOr5Q5po7pEM7KSA8EWeYDYOcBra5k0Jbo=
Subject key identifier: 5B:DA:9E:CB:96:DA:A8:11:E6:6B:6A:FC:7F:01:44:65:1F:7E:2D:D8
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01A13A6D7104DDE638439D3F0B4E62BDF8F4
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/W9qey5baqBHma2r8fwFEZR9-Ldg.roa
Signing time: Wed 14 Oct 2026 12:40:13 +0000
ROA not before: Wed 14 Oct 2026 12:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51088
IP address blocks: 46.175.131.0/24 maxlen: 24
93.190.124.0/24 maxlen: 24
146.19.192.0/24 maxlen: 24
185.46.173.0/24 maxlen: 24
185.218.207.0/24 maxlen: 24
193.110.189.0/24 maxlen: 24
2a12:4180::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:6d:71:04:dd:e6:38:43:9d:3f:0b:4e:62:bd:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Oct 14 12:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bda9ecb96daa811e66b6afc7f0144651f7e2dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:e3:ae:57:8c:86:ff:8c:6e:0c:7f:e9:9a:
f3:57:eb:de:73:ee:ae:6d:55:7f:13:62:6c:9f:41:
b3:c3:de:67:56:5e:45:bf:fe:40:69:f3:75:47:65:
43:71:ed:cd:5d:86:57:ec:1a:78:72:d2:38:38:20:
40:f3:09:ac:3a:16:82:f0:6e:6b:9f:c7:c4:9d:a3:
81:63:56:e8:8d:bd:0b:be:af:42:2f:f7:e6:c2:6d:
2f:1e:55:2d:c8:62:fa:f1:e5:28:20:5a:2e:8a:29:
84:f5:09:1f:d0:55:64:a7:f5:68:41:b6:86:66:b3:
28:4e:6f:c0:2a:1c:a7:45:51:cc:3c:c1:fa:eb:3d:
71:45:00:be:51:1d:7f:99:a3:89:bd:49:63:32:05:
02:83:d6:bc:54:ed:30:48:13:7f:a5:06:89:21:98:
45:e8:5d:b4:7a:3e:ec:72:9e:88:8f:8a:48:df:29:
9a:a4:65:37:7b:d9:fa:ca:60:70:3d:af:4b:c5:f7:
be:64:dc:6a:03:7a:2f:3a:df:02:00:cf:12:ae:2a:
88:c6:ad:d7:5b:fd:0c:14:76:24:c2:2a:55:87:a5:
75:de:b7:35:b1:41:a2:e3:8e:6f:e8:f8:c7:39:9e:
91:d0:1a:cc:2a:7a:86:27:4b:41:f5:99:02:25:ff:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:9E:CB:96:DA:A8:11:E6:6B:6A:FC:7F:01:44:65:1F:7E:2D:D8
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/W9qey5baqBHma2r8fwFEZR9-Ldg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.131.0/24
93.190.124.0/24
146.19.192.0/24
185.46.173.0/24
185.218.207.0/24
193.110.189.0/24
IPv6:
2a12:4180::/29
Signature Algorithm: sha256WithRSAEncryption
37:2a:94:a8:57:03:a5:c0:52:8e:a1:f9:57:fa:cd:83:c5:e6:
41:f8:89:96:73:9d:45:2c:76:91:88:b7:8b:fc:51:50:d4:5f:
6f:e1:21:51:3d:56:36:54:58:a9:5e:85:91:1f:d2:4f:4f:e5:
70:5e:61:83:a8:e2:6b:6b:2d:5f:4d:ac:30:91:e3:c1:0b:fb:
cb:f9:ca:da:0c:f3:af:5f:b0:67:0b:c3:15:63:f6:fc:72:8e:
38:7a:4b:86:50:ec:66:89:4d:ba:90:5d:0b:c8:37:22:c9:b1:
79:1b:b5:10:53:bc:e7:82:e1:45:7f:06:7c:66:1f:d0:fd:63:
f6:78:d1:cd:98:7e:e2:de:75:82:59:d7:1b:5f:1d:ca:0c:dd:
b4:99:b6:53:1d:1c:3d:50:62:6d:27:d1:ce:48:a4:a9:38:57:
2f:80:e2:0f:26:a8:d0:88:5a:7e:d4:8b:70:ba:67:70:55:27:
d0:7d:9a:25:7d:2f:d8:52:da:a5:cd:db:c8:d7:ef:a0:a7:b6:
87:dd:ed:b0:57:15:58:04:a0:30:23:8f:6c:61:8c:80:c3:c3:
82:9d:29:7c:63:03:19:74:90:d3:b3:b3:60:82:71:7f:4f:ab:
14:d6:82:2b:8f:d8:49:6b:8a:aa:d8:4e:7a:1c:bb:f7:27:19:
e1:21:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:32 2026 by rpki-client