Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/d3VInPdLirBsLVvGRzvBNOU5GVY.roa
File: d3VInPdLirBsLVvGRzvBNOU5GVY.roa (raw, json)
Hash identifier: 1H0FqCjUTy4udmz5J8jd2r4LaLaCADLPuji2yS6Osxs=
Subject key identifier: 77:75:48:9C:F7:4B:8A:B0:6C:2D:5B:C6:47:3B:C1:34:E5:39:19:56
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 01A086110757F36DD4565E6AB58CFA40D1BF
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/d3VInPdLirBsLVvGRzvBNOU5GVY.roa
Signing time: Wed 09 Sep 2026 12:07:38 +0000
ROA not before: Wed 09 Sep 2026 12:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12843
IP address blocks: 192.109.176.0/24 maxlen: 24
2001:67c:e1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:11:07:57:f3:6d:d4:56:5e:6a:b5:8c:fa:40:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Sep 9 12:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7775489cf74b8ab06c2d5bc6473bc134e5391956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:17:d4:37:6f:d1:86:af:4f:8c:4f:38:1a:
67:b7:ff:f4:69:eb:d9:64:9b:d0:bf:db:f2:8a:0b:
e3:6e:6a:63:41:fe:92:c8:dc:27:a0:f7:59:ac:fc:
f2:1d:b6:9e:11:e5:d5:3f:28:2e:f9:ef:c8:cb:2f:
2b:59:28:b3:ba:fe:41:ef:2f:a0:82:0f:21:5c:68:
b3:cf:ef:cd:00:6f:bf:31:73:6f:4d:7e:ec:ad:d4:
7b:76:07:71:b2:4f:68:d0:55:d0:fb:d3:15:d9:1d:
ef:65:3d:21:c7:ed:5f:8f:f0:80:f1:ee:79:82:31:
c5:f1:40:1b:dd:de:a3:f1:f1:b2:12:76:b2:88:96:
cd:f4:2a:c4:fe:e7:9b:53:f5:e6:c6:9b:74:6b:fe:
01:e0:7a:a7:35:34:08:f8:90:ab:7a:c7:4d:a7:12:
8b:fc:f5:5d:80:1a:47:cc:5c:38:f0:1b:a2:11:cf:
6e:9d:a7:c2:80:54:9c:79:92:03:b5:04:f7:e2:b7:
5f:07:8e:f9:d2:0e:bb:26:72:e9:46:55:18:7a:25:
76:bc:75:fc:7e:fc:16:1e:f2:21:cf:d7:19:f1:86:
52:37:6d:aa:a2:fb:5b:60:57:a0:f1:e2:ad:6e:f3:
8e:7b:ec:27:7b:7c:87:48:15:66:ee:6c:34:d8:3b:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:48:9C:F7:4B:8A:B0:6C:2D:5B:C6:47:3B:C1:34:E5:39:19:56
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/d3VInPdLirBsLVvGRzvBNOU5GVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.176.0/24
IPv6:
2001:67c:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
16:51:16:29:5b:b4:7f:e7:f3:33:12:53:69:13:73:80:0e:dd:
8b:0d:2e:d5:ee:ab:03:79:0e:66:b5:2c:a5:f3:e6:4c:0f:26:
67:54:62:31:ef:17:62:d2:63:b4:c8:3a:3e:05:ed:16:d5:72:
c3:f5:c0:45:af:66:ec:d5:89:70:40:8a:5d:8d:94:f4:0d:3a:
43:f5:2c:43:b7:c6:d0:ef:14:70:36:87:56:cb:de:5c:42:c6:
8d:d9:e4:2b:d0:5e:d5:3b:4b:48:e9:ff:52:af:9b:9f:85:21:
9a:fd:77:e8:ad:32:79:6f:6f:41:aa:38:7d:01:72:b8:9e:5b:
7a:74:69:bf:73:a3:3d:b7:6f:1b:0d:ba:60:38:c2:58:61:9d:
91:00:64:a8:a5:5b:c8:62:7f:0f:82:55:97:12:e3:41:4e:12:
47:c1:08:03:07:c6:f8:60:f7:cd:59:05:53:37:1d:d9:61:e0:
09:72:c7:ef:df:3a:f7:9f:fc:90:aa:99:81:d6:93:4a:8e:d5:
8d:ae:be:f2:f2:89:08:9c:7c:2e:73:9d:41:8b:7e:d6:a4:0e:
41:27:47:5d:0a:64:72:9f:3a:de:45:f4:09:ab:ac:a2:ab:6e:
a6:6a:03:de:62:97:c1:94:c0:63:97:0c:53:5e:c1:08:51:b6:
f1:d0:38:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:54 2026 by rpki-client