Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Wn6K-rS224ssiVh33JRa2juJsp0.roa
File: Wn6K-rS224ssiVh33JRa2juJsp0.roa (raw, json)
Hash identifier: STrVLlnjxMJr/uRNeZWBoGGw6traeIPKDAKeQZh/5Mc=
Subject key identifier: 5A:7E:8A:FA:B4:B6:DB:8B:2C:89:58:77:DC:94:5A:DA:3B:89:B2:9D
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01A1536BD80D7F6CA33A89AEBF825759BA34
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Wn6K-rS224ssiVh33JRa2juJsp0.roa
Signing time: Mon 19 Oct 2026 09:08:58 +0000
ROA not before: Mon 19 Oct 2026 09:08:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 213.21.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:6b:d8:0d:7f:6c:a3:3a:89:ae:bf:82:57:59:ba:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 19 09:08:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a7e8afab4b6db8b2c895877dc945ada3b89b29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:1f:9f:33:e0:95:36:45:12:78:a1:12:b9:
34:7e:b6:b8:d7:34:fa:95:3e:20:e6:85:97:07:ad:
ff:15:e5:32:a4:64:fe:d1:b7:fd:8d:a6:1b:d3:91:
ae:f6:d9:ed:eb:c5:f7:dc:43:aa:86:46:ff:9a:f9:
4c:a5:6b:f5:69:31:ce:0a:fe:2c:aa:a3:f9:55:3e:
b0:83:13:53:c5:c2:e1:49:cc:8a:d7:08:15:11:5d:
d5:da:d4:4c:31:06:09:e1:1c:ca:7f:ee:64:86:4e:
6f:20:fc:8d:24:b9:69:6d:e8:77:38:02:35:04:dc:
23:23:c2:42:29:09:dd:26:e2:27:59:57:72:b3:3e:
25:c9:9c:9c:f8:28:c9:07:0f:d3:8c:30:f1:ba:3d:
1a:a1:2f:21:6e:60:27:c2:dd:90:de:55:a3:28:5f:
66:2c:85:7c:d9:3a:cc:e7:c5:03:50:56:05:9e:63:
5f:f9:fb:5b:fe:c7:42:23:ce:86:ae:70:8d:1d:f3:
65:c3:fb:ce:44:3e:15:90:ed:55:1e:a3:35:93:40:
f5:b6:9c:87:8b:ff:d1:fd:a9:21:e5:ae:d7:5b:67:
dd:6b:31:02:69:06:97:f6:aa:b1:a1:4d:fc:f7:28:
a5:56:3d:1b:b7:2b:2a:bf:7d:d3:10:0d:43:f8:5a:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:8A:FA:B4:B6:DB:8B:2C:89:58:77:DC:94:5A:DA:3B:89:B2:9D
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Wn6K-rS224ssiVh33JRa2juJsp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
67:fc:40:a8:89:08:ce:f0:b6:79:2e:d0:5b:87:fc:c1:a8:25:
2c:79:15:f5:58:f7:a8:de:dc:03:76:ca:d1:70:99:ca:db:bc:
d0:33:3c:02:94:43:46:a4:ad:1b:2b:e7:f0:7c:4c:41:38:73:
17:a6:e5:c4:f8:bb:61:5c:28:76:cc:63:ab:a3:2e:56:25:58:
4e:e7:72:64:58:db:b4:7f:07:f0:a1:fd:e7:24:7d:a6:53:a0:
71:ec:b1:54:e3:8e:d3:68:91:78:ef:4a:5b:c7:03:5c:f4:54:
12:85:d4:30:f4:92:9f:bb:51:07:f2:18:b3:bd:44:74:9b:e6:
0a:9a:df:a2:47:47:49:69:da:c1:4e:5e:88:eb:ec:7e:59:f6:
d1:73:d4:6e:7f:b8:f0:28:af:09:de:81:77:2a:09:c8:64:7f:
5d:e2:c9:ff:83:3d:ee:fe:b1:df:b0:d2:41:e6:1e:14:5f:45:
8d:73:16:a9:71:7f:94:48:da:c4:f7:69:2f:e8:d8:ac:f9:83:
e9:bb:54:34:18:1a:fe:35:bc:13:ba:26:04:1e:4a:51:a5:6a:
7d:90:57:f3:6e:8d:67:21:d5:f7:38:59:3e:e1:58:19:04:c5:
69:81:98:ca:e2:99:66:95:46:3a:9a:b9:7f:9b:5d:32:dd:1c:
52:cc:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:15:46 2026 by rpki-client