Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/i-wnSy29UuFpacFp4VCQ-x-lu-0.roa
File: i-wnSy29UuFpacFp4VCQ-x-lu-0.roa (raw, json)
Hash identifier: pem5rQOQgzEXO4+5YTlqIw87kHiUH5nmzJJWuRIIQh4=
Subject key identifier: 8B:EC:27:4B:2D:BD:52:E1:69:69:C1:69:E1:50:90:FB:1F:A5:BB:ED
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019F3368567E7C4AC5C479317306604F248E
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/i-wnSy29UuFpacFp4VCQ-x-lu-0.roa
Signing time: Sun 05 Jul 2026 17:51:43 +0000
ROA not before: Sun 05 Jul 2026 17:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 45.85.216.0/22 maxlen: 24
45.89.140.0/22 maxlen: 24
2a0e:cb80::/29 maxlen: 29
2a12:3e80:400::/48 maxlen: 48
2a12:3e80:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:68:56:7e:7c:4a:c5:c4:79:31:73:06:60:4f:24:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jul 5 17:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bec274b2dbd52e16969c169e15090fb1fa5bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:3e:35:f7:72:b0:04:dc:49:8d:93:13:e1:
28:0b:c0:a9:eb:37:e3:e2:e2:5b:5f:95:a4:ce:d9:
7c:16:89:9f:0a:fb:df:6d:ba:b3:5e:9b:c5:4f:3d:
d8:89:8f:f2:9c:05:67:1c:a8:5e:d5:2b:0f:81:ef:
ad:ac:16:66:d5:f9:ac:34:e4:9f:e3:18:bd:1d:fd:
f5:12:d0:a4:76:9e:ac:5f:e9:6d:9a:75:68:d8:70:
3f:81:38:99:bf:db:04:e4:d1:df:36:b2:43:69:ae:
d8:a4:80:ac:b5:0e:91:1a:f0:1a:39:91:7b:a9:38:
12:a7:f0:91:5d:67:32:e1:5c:fd:8d:16:fb:bc:06:
46:e2:a4:a1:de:6c:6c:8f:8e:fe:d5:2c:ea:9c:c3:
d7:10:13:d7:fa:33:bb:0d:08:7c:70:be:a4:a3:8e:
41:fb:1a:67:28:6a:bb:3b:d6:63:81:23:22:b2:d9:
7f:8c:6a:a9:43:3b:b9:a1:05:39:1b:eb:aa:3f:45:
fc:1d:c2:9e:fc:df:e2:97:28:6b:3a:2a:ba:51:d2:
0f:2f:e5:8d:61:25:69:7b:bb:98:06:f0:13:fc:67:
bb:b7:14:70:dd:15:72:81:83:0d:51:15:bc:a5:6a:
e0:13:37:05:9b:50:c4:43:fa:8d:28:a6:27:81:07:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:27:4B:2D:BD:52:E1:69:69:C1:69:E1:50:90:FB:1F:A5:BB:ED
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/i-wnSy29UuFpacFp4VCQ-x-lu-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.216.0/22
45.89.140.0/22
IPv6:
2a0e:cb80::/29
2a12:3e80:400::/48
2a12:3e80:800::/40
Signature Algorithm: sha256WithRSAEncryption
22:27:b7:0e:f6:98:e3:1f:20:c1:69:f6:3c:a7:f0:2d:70:01:
76:92:6f:0d:a3:39:45:51:c6:7b:db:d5:4b:8d:0c:12:e9:7e:
0e:81:c5:c3:ac:00:33:a1:0a:67:47:d5:92:6c:31:a6:26:b8:
f6:5c:99:98:c0:4b:83:a0:3e:b3:d8:9d:e4:a5:6b:e6:da:57:
83:a8:ba:71:e6:5c:62:80:74:e9:83:a4:bf:91:00:74:65:16:
90:6d:ec:b4:1d:42:fd:12:fa:95:1b:91:e0:1a:bd:2b:63:88:
dd:f0:24:64:1b:82:2c:2f:6a:52:a6:05:c9:2b:2f:dc:d3:9b:
e0:e8:16:84:35:7d:47:ce:d8:94:2c:67:e6:55:73:8e:d3:aa:
66:a1:43:a5:a8:56:25:73:e9:b5:a4:c8:48:35:be:8e:5f:97:
27:5a:f6:34:8b:ff:ca:73:f0:7b:92:37:26:d9:47:bd:f1:c9:
40:af:55:b7:62:64:53:c1:bd:c6:ae:66:c7:1d:bc:0b:6c:32:
3c:46:41:ec:99:67:d7:6d:a1:98:7b:2c:69:19:e8:ce:45:fc:
52:d8:02:ea:73:69:4b:4c:c9:e3:7a:6c:18:9b:42:74:11:aa:
0d:8a:0f:a2:a8:ed:ef:d3:67:86:d1:d4:fc:b9:a1:2e:81:89:
71:52:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:44 2026 by rpki-client