Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa
File: sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa (raw, json)
Hash identifier: ZVA4MvGdgvPLSJ8Vi9YqZCQSkNRcAKBUxh0NO1bCuj0=
Subject key identifier: B1:6B:A1:62:88:92:98:0E:AD:9E:E8:D0:B1:89:E4:67:93:00:84:09
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019CCE21CB6C0AB4B24E1A22FA54F2601EF0
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa
Signing time: Sun 08 Mar 2026 15:47:27 +0000
ROA not before: Sun 08 Mar 2026 15:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212996
IP address blocks: 176.10.89.0/24 maxlen: 24
2a13:d8c1::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ce:21:cb:6c:0a:b4:b2:4e:1a:22:fa:54:f2:60:1e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Mar 8 15:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16ba1628892980ead9ee8d0b189e46793008409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:b6:4c:73:99:06:12:27:01:5f:2c:14:dc:
3a:5c:8d:77:04:8f:b9:b0:84:6a:75:24:9f:53:d3:
6d:0d:77:ca:9c:77:34:05:90:60:df:7c:e1:f3:9f:
61:32:c0:db:19:6d:6b:0f:1c:12:db:4a:7f:b2:22:
6d:be:a4:98:ba:6e:ea:fa:ff:99:f5:51:a0:dc:12:
2a:d1:0b:26:28:3a:14:6e:9b:e5:68:61:92:d6:c0:
75:95:81:41:53:e8:82:00:de:e9:e0:2b:10:c1:c2:
59:62:2c:ce:03:b4:2e:7a:9b:8b:ec:40:32:d9:3e:
a8:6a:a1:5c:e5:df:1d:29:c6:2f:ee:8f:77:b3:f5:
9c:4a:ae:14:5f:a4:10:44:8a:97:87:f9:9f:9d:16:
25:0e:84:ef:39:b8:40:ad:a1:f1:2a:ac:70:c8:47:
8b:b7:65:0d:88:9b:84:96:f4:26:f8:33:80:3d:fc:
56:8e:59:b8:ad:c7:55:d0:e1:83:3b:d9:36:18:dd:
4c:bc:3f:84:4b:61:e5:f2:59:79:4a:a8:e1:48:3c:
e0:3b:63:2c:1a:14:be:7b:58:19:16:a2:44:6a:fe:
7e:05:97:04:7a:e0:dd:18:b5:35:a5:3e:7e:48:f1:
33:09:60:df:b5:ef:5c:dd:bf:51:eb:0b:97:1a:de:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:A1:62:88:92:98:0E:AD:9E:E8:D0:B1:89:E4:67:93:00:84:09
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/sWuhYoiSmA6tnujQsYnkZ5MAhAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.89.0/24
IPv6:
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:66:b4:2c:84:06:0b:4c:cd:74:f9:74:2b:21:4a:cc:8e:73:
de:56:a1:80:c8:9f:94:1b:12:63:06:8c:d2:1d:8f:e3:df:84:
09:f3:82:da:33:3a:6f:80:77:a6:d4:c6:b3:db:ff:4a:ec:1b:
2a:d3:d8:fd:e1:56:77:b7:08:a3:f4:93:da:63:b7:45:65:08:
b1:dd:88:7f:fc:9b:2f:8d:a7:c3:5d:b4:32:ff:02:17:fd:bc:
4d:6e:85:8f:b0:82:da:3a:39:3f:5f:2a:20:c9:53:97:9f:3f:
69:07:76:85:74:c1:da:50:64:73:22:c3:68:80:d1:9b:01:5f:
46:32:36:3e:b4:a1:ba:57:ed:84:f8:32:a6:3c:0f:2f:63:a3:
d0:3a:fa:5c:ce:6a:f0:30:ea:99:e4:42:9d:c9:c2:8f:4d:61:
6b:13:c6:20:b4:4b:19:81:fb:48:ce:1b:b4:9d:cb:b2:0a:c2:
3b:7a:a4:c8:c6:9b:0a:6b:17:ff:6d:39:c2:81:41:7e:ac:99:
52:17:4d:31:bb:90:f0:77:23:77:37:f4:c0:8e:31:1b:ba:ac:
e1:e3:be:49:ec:61:56:cd:2b:3b:2f:52:a8:a6:bf:86:e2:b6:
e9:16:1f:63:bb:6c:e4:43:44:af:cd:4d:a6:5b:45:78:51:cc:
1c:3f:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 17:41:13 2026 by rpki-client