Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/W0JnqG_1catAnHEXGycEO8oq48k.roa
File: W0JnqG_1catAnHEXGycEO8oq48k.roa (raw, json)
Hash identifier: A6AJQgQl743BUazqkp43vOKzFjK/bipy9CgPiB+KG6U=
Subject key identifier: 5B:42:67:A8:6F:F5:71:AB:40:9C:71:17:1B:27:04:3B:CA:2A:E3:C9
Certificate issuer: /CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Certificate serial: 01A08673BE52E6B328156081AAA718F0391C
Authority key identifier: 80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/W0JnqG_1catAnHEXGycEO8oq48k.roa
Signing time: Wed 09 Sep 2026 13:55:27 +0000
ROA not before: Wed 09 Sep 2026 13:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 2a14:e900:9001::/48 maxlen: 48
2a14:e900:9002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:73:be:52:e6:b3:28:15:60:81:aa:a7:18:f0:39:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ffd9df456adbe3b1e661ee15626865fe1688c8
Validity
Not Before: Sep 9 13:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b4267a86ff571ab409c71171b27043bca2ae3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:3c:94:9d:eb:79:49:39:f3:be:74:6b:d2:
b0:7f:67:61:36:96:f1:57:f3:d9:49:8f:de:af:9c:
14:c2:ac:ba:ef:ac:3f:72:59:a4:90:6a:88:54:1f:
f8:fe:c7:83:72:34:bf:c9:c4:0e:37:37:5a:51:42:
c1:55:24:ea:c5:d0:6f:52:d5:db:00:0c:f5:77:74:
b4:02:9b:23:8d:45:e2:6e:ef:6b:fe:34:53:c8:5b:
97:e5:08:9c:25:cf:6f:be:fe:37:de:1f:55:40:84:
ea:89:43:01:fa:ca:8b:fe:d7:69:d5:a4:3a:b3:e0:
4c:a4:8e:28:cd:c2:31:63:18:56:9c:7a:14:01:0b:
0e:da:99:ab:f5:1e:64:94:05:21:cb:29:91:a8:ef:
38:e6:f6:21:17:7a:dd:74:6d:46:49:82:82:da:6d:
65:54:e7:6e:cd:fb:90:ce:b2:ab:38:c5:49:7d:46:
e2:15:53:09:ab:fd:0f:42:36:d2:95:fb:ab:3c:66:
b6:a6:2f:08:0f:2a:6b:89:a4:1d:36:1a:14:59:d3:
4d:03:23:18:5d:4d:68:1e:cd:57:f0:ff:36:18:c6:
eb:69:98:24:b0:41:51:cb:60:1d:56:59:cd:0e:05:
9e:bd:b3:cc:c6:b9:b8:69:b1:a2:b5:92:f3:05:8f:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:67:A8:6F:F5:71:AB:40:9C:71:17:1B:27:04:3B:CA:2A:E3:C9
X509v3 Authority Key Identifier:
keyid:80:FF:D9:DF:45:6A:DB:E3:B1:E6:61:EE:15:62:68:65:FE:16:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/W0JnqG_1catAnHEXGycEO8oq48k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/900cef-6481-4ff8-8e04-3cb8d817e027/1/gP_Z30Vq2-Ox5mHuFWJoZf4WiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e900:9001::-2a14:e900:9002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:7a:06:39:c8:fc:fc:24:d6:54:1e:57:ef:09:1e:78:c1:1d:
b9:ea:89:94:c5:6e:63:06:a7:74:15:33:1e:07:46:64:7a:e8:
02:d5:9f:70:b1:36:84:a7:a1:8f:73:ba:bd:df:6b:74:b4:04:
85:10:68:d5:b4:c3:47:80:70:98:b6:06:05:c6:a4:69:60:51:
8d:71:50:38:49:c4:d0:59:6f:d6:c6:6a:0c:9e:5e:fd:41:62:
79:85:4e:36:93:78:08:ae:32:12:43:c5:dd:f5:95:8b:fe:eb:
40:54:29:a2:97:41:fe:35:1d:3a:e2:72:d7:86:ba:48:88:91:
02:8d:92:25:30:98:7a:83:e4:89:8c:ce:43:16:e5:8d:93:99:
1c:32:19:77:4a:e2:f1:a4:51:5e:58:22:13:6c:85:ce:8e:70:
5c:b3:a6:b4:cc:f7:77:25:ab:45:41:f8:29:b8:ba:6c:0e:31:
5a:38:ac:cc:1e:81:11:4c:49:34:18:31:b9:37:72:a6:d2:38:
05:b4:7e:86:99:41:1e:c6:a5:25:f2:88:49:ae:59:fd:63:78:
a0:58:d1:de:0d:e4:90:6e:8d:13:96:5b:6d:cc:bb:f6:3b:93:
60:e2:e1:38:1b:78:18:35:cf:53:6e:e6:51:72:58:87:b7:e9:
bc:4e:6b:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:14:00 2026 by rpki-client