Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rWwnHDv9221Es5Vy-RpzWKtyobE.roa
File: rWwnHDv9221Es5Vy-RpzWKtyobE.roa (raw, json)
Hash identifier: EoM2nmdYForwmLBzTjSg8MrNHegq4JNZWfL9/ZmSTKQ=
Subject key identifier: AD:6C:27:1C:3B:FD:DB:6D:44:B3:95:72:F9:1A:73:58:AB:72:A1:B1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A11518C07E7C99F7899F2E8BFCFDC4B1BA
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rWwnHDv9221Es5Vy-RpzWKtyobE.roa
Signing time: Wed 07 Oct 2026 06:41:45 +0000
ROA not before: Wed 07 Oct 2026 06:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7922
IP address blocks: 77.111.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:18:c0:7e:7c:99:f7:89:9f:2e:8b:fc:fd:c4:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 7 06:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad6c271c3bfddb6d44b39572f91a7358ab72a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:1b:25:35:69:a8:30:33:79:9a:3c:a9:54:
00:2d:28:81:cc:aa:1d:42:7b:06:1c:61:d5:12:08:
ed:b4:41:b4:67:9f:25:b1:94:21:4a:2e:fa:4a:f9:
c6:8c:96:5b:ba:1d:56:b9:5a:73:0e:54:9c:a1:99:
35:7d:7d:21:de:0e:70:ae:98:6e:b9:26:d0:71:ee:
86:6c:a3:e5:2a:aa:df:25:df:7e:d3:6a:55:00:d5:
4b:6e:39:73:0d:68:46:25:5f:6c:12:6c:a8:77:58:
15:43:3d:3b:fb:52:47:20:d4:3c:95:0a:d2:8e:6b:
ce:09:41:84:13:0e:4c:7b:0f:d0:e3:7d:0c:1f:39:
c4:34:03:ec:89:40:14:55:34:30:35:14:9d:f1:31:
a4:62:77:c1:34:32:d5:66:ff:7e:a6:ec:22:dc:6c:
1b:41:0d:33:3d:62:de:38:a3:b6:09:7e:be:23:d3:
88:08:e6:53:dd:ee:c3:07:8d:1c:01:a2:55:0e:4e:
10:dd:03:38:e5:a9:8b:bc:ca:4d:d4:de:03:62:76:
7e:5f:70:26:04:a5:3f:81:85:fd:1b:74:b3:dd:c2:
ff:51:ea:6c:d8:4e:c0:0b:cf:ff:74:32:f0:fc:27:
c5:ea:d8:4b:02:04:77:29:8b:5b:53:ef:07:aa:ca:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:27:1C:3B:FD:DB:6D:44:B3:95:72:F9:1A:73:58:AB:72:A1:B1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rWwnHDv9221Es5Vy-RpzWKtyobE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:09:ca:30:dd:4b:60:8e:f2:8b:a9:66:b1:53:a9:69:fa:7e:
d8:9a:d5:6a:33:b1:6f:1a:2e:f2:c9:32:35:b4:e1:3a:a1:22:
71:58:d0:6b:46:7c:8d:81:2e:16:9a:2d:66:50:c6:55:cf:90:
5b:38:93:7d:26:2e:50:92:ac:6a:b6:04:54:90:30:b0:0e:10:
10:98:90:ed:66:bd:56:d4:28:1a:b1:ba:2d:9c:cb:7d:99:2e:
47:a3:7c:72:66:c8:ba:6d:fe:16:53:93:87:71:27:43:86:67:
0f:09:c5:ae:0e:66:97:33:6c:88:c2:1c:d0:66:cb:2d:68:60:
64:a8:cb:68:d0:44:48:9a:3f:96:c5:da:87:1e:ac:bc:7d:f2:
ba:59:af:5f:bf:c1:55:da:d5:38:74:ec:2b:29:b6:1b:68:d9:
2d:38:67:2f:5f:53:a3:d3:54:e6:8c:35:a6:3e:50:a7:58:3a:
84:ac:b5:bc:b7:9a:1c:97:f9:0c:41:6e:47:37:e6:ca:6a:3f:
39:85:c5:7a:3e:0f:81:ed:aa:62:40:69:b8:b5:2b:9e:1d:3b:
ec:f3:6d:b4:52:d2:ef:2d:ef:45:bb:4b:6f:04:23:b3:13:7d:
b8:9f:ca:3f:f2:47:2b:db:3a:3e:9b:08:e8:e5:5c:ef:c8:c8:
52:99:6b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:47 2026 by rpki-client