Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Rw14jGCSYaaARRcFMpWAzMVQqXE.roa
File: Rw14jGCSYaaARRcFMpWAzMVQqXE.roa (raw, json)
Hash identifier: OAkRsZFc3iYBn9QlhVggWlZZjeCS8NcRqTNFT69SSz8=
Subject key identifier: 47:0D:78:8C:60:92:61:A6:80:45:17:05:32:95:80:CC:C5:50:A9:71
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A01869E31AC034337CC25732420A2C9C05
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Rw14jGCSYaaARRcFMpWAzMVQqXE.roa
Signing time: Wed 19 Aug 2026 05:06:27 +0000
ROA not before: Wed 19 Aug 2026 05:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.1.40.0/24 maxlen: 24
195.170.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:69:e3:1a:c0:34:33:7c:c2:57:32:42:0a:2c:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 19 05:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=470d788c609261a680451705329580ccc550a971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:86:fb:76:f3:b7:60:fd:9e:55:46:26:d8:
35:e5:3c:cf:2d:89:3d:1c:02:09:d4:c9:b1:dc:ce:
99:de:1a:60:fd:6e:59:5d:94:06:03:ea:21:74:83:
df:4c:d9:b7:1e:c7:40:1d:f8:27:da:69:0d:ac:47:
7f:7a:37:66:e4:66:f5:82:a4:6d:f2:91:5a:c3:d2:
c5:ce:67:c9:83:eb:3c:68:99:6e:a1:d4:d1:37:11:
ed:5d:d3:4f:f1:1d:0d:0e:8e:ef:03:8d:e2:0b:31:
05:2f:40:11:83:d1:01:73:58:ef:d9:3e:df:3e:ab:
79:22:ac:68:d8:23:c2:e5:b3:f7:85:24:29:5d:ce:
9c:df:be:c0:67:68:14:31:a3:e4:f8:ba:90:7d:61:
15:2b:d3:b8:3a:16:8c:ac:c5:75:62:b0:45:f5:e9:
4e:50:13:08:a4:8b:72:9c:12:9b:16:97:0b:44:db:
8c:24:9c:c0:98:6a:6c:96:fc:14:5f:a7:a3:0b:35:
6b:69:b4:ed:21:96:da:75:ec:f7:bb:5a:0a:a6:91:
55:94:07:b5:10:e1:a7:57:8d:69:b6:31:eb:60:1f:
a6:5a:32:e3:3b:cf:ee:20:3f:6d:f9:69:38:7c:78:
8e:37:a9:c2:84:db:c9:a6:e6:c6:79:40:d8:52:00:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:78:8C:60:92:61:A6:80:45:17:05:32:95:80:CC:C5:50:A9:71
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Rw14jGCSYaaARRcFMpWAzMVQqXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c7:bd:c8:ce:8c:54:f0:82:e5:c2:c7:6b:db:b0:8a:4e:95:
fe:17:fa:10:1c:55:7e:0e:03:ae:3d:e3:10:96:b5:db:5d:2f:
47:7d:56:1a:c5:07:fb:54:66:62:a5:74:86:11:04:62:d8:7f:
e1:4f:b2:75:47:b8:1b:f3:fe:af:c3:29:a2:18:3e:40:36:96:
a8:4d:72:50:d1:fc:74:23:11:d2:56:a1:57:e3:fd:87:e6:5c:
6f:e7:69:91:d5:b0:02:57:b4:7f:41:e4:95:c5:eb:26:8a:69:
63:df:65:c9:46:fc:30:f2:7e:4a:16:7e:e9:4d:4b:84:30:10:
02:26:bf:83:4b:b3:ca:8e:ad:46:f7:38:d4:1f:bf:69:e9:e1:
ab:b5:e4:20:ff:ee:2a:01:f7:c4:f8:30:bf:f3:ea:e9:9f:09:
84:84:17:6b:72:d3:d0:2d:c8:45:46:dc:66:ff:62:41:64:9e:
fc:d7:95:2a:77:87:dc:40:e6:b9:90:10:45:40:49:5c:d0:40:
82:ec:2b:ef:c8:fd:2d:5b:65:e0:a5:ff:08:a1:8e:19:07:99:
d9:90:9b:cd:d5:d5:dd:0c:a4:5c:a5:61:36:24:cd:73:f3:eb:
c1:02:13:c0:64:c8:af:d9:40:ea:1f:46:38:1a:61:70:80:33:
58:08:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:09:59 2026 by rpki-client