Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1wCmT1IS3a1us8DcUmoOVIkFSg8.roa
File: 1wCmT1IS3a1us8DcUmoOVIkFSg8.roa (raw, json)
Hash identifier: EXytnx0XqERcz+GskCmk6gzJBp0TdjpyBxSN2abosn8=
Subject key identifier: D7:00:A6:4F:52:12:DD:AD:6E:B3:C0:DC:52:6A:0E:54:89:05:4A:0F
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A159227A3E5B26E79CDB61B97710D66E13
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1wCmT1IS3a1us8DcUmoOVIkFSg8.roa
Signing time: Tue 20 Oct 2026 11:46:34 +0000
ROA not before: Tue 20 Oct 2026 11:46:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42602
IP address blocks: 91.92.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:22:7a:3e:5b:26:e7:9c:db:61:b9:77:10:d6:6e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Oct 20 11:46:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d700a64f5212ddad6eb3c0dc526a0e5489054a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:d8:75:d6:18:98:2d:b0:15:5e:a8:db:e9:
77:10:7f:e2:ff:a4:d7:cd:c5:de:36:11:d9:1e:f1:
f2:0d:65:26:25:33:27:18:8e:b1:53:19:6e:0d:44:
8d:e8:1c:85:48:7d:48:fd:f1:bb:f3:9a:d4:ba:47:
74:31:3d:80:fd:34:f0:cc:88:01:a4:21:5b:39:c6:
e6:66:87:e3:8a:2b:62:e7:97:f9:9c:0f:4d:47:cc:
29:34:6c:12:26:d4:b8:db:de:05:4f:ac:6a:b2:f9:
da:bc:14:ad:40:54:0c:d7:08:e4:b6:f2:2e:30:51:
20:cc:61:f5:ea:8b:ff:98:2f:77:d8:06:dc:4c:e0:
4f:05:ac:83:4f:ff:43:d5:ed:02:18:71:8e:84:72:
c0:06:b3:35:69:ce:c8:a3:99:9b:e6:82:47:9b:09:
8b:f9:0c:cb:cb:30:63:31:74:79:fe:78:e7:cc:db:
be:ba:a4:58:0b:71:77:85:52:b1:af:1b:dd:53:ab:
d6:68:a1:c2:12:75:97:91:77:40:a0:28:fa:84:27:
be:0c:54:b3:61:fc:f8:5e:ba:bf:7f:16:fc:6a:05:
d4:ca:df:2f:7b:43:73:89:d7:e1:b3:b9:9a:da:9f:
e3:6b:61:ef:c0:71:4d:25:e6:94:3f:ad:ac:b0:3a:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:A6:4F:52:12:DD:AD:6E:B3:C0:DC:52:6A:0E:54:89:05:4A:0F
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1wCmT1IS3a1us8DcUmoOVIkFSg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:aa:b5:c0:2e:47:e0:7f:10:02:3a:32:89:b4:1e:f7:da:df:
43:08:d9:03:2f:54:2a:0a:d2:28:11:78:d1:d8:86:e5:16:ee:
11:38:69:81:b1:7d:70:40:9e:51:63:ef:84:43:3a:f1:e7:ba:
a1:3e:34:1e:83:f9:32:9d:d4:34:67:82:e2:86:d3:1f:55:77:
31:5f:1c:c7:17:22:e3:bc:36:3b:1b:20:54:bd:47:64:0a:c0:
ad:f8:b9:0d:c0:2f:b9:7e:98:9f:bb:af:e9:0c:d7:09:de:88:
3c:d1:ef:4f:12:d9:27:34:38:97:67:1a:66:5e:ad:29:a9:99:
cc:bd:4c:ef:af:42:e8:67:80:95:5f:6a:8e:63:68:0c:1a:77:
2f:72:2e:7d:20:6d:f5:7b:3c:3c:8e:b7:7c:45:be:2f:d7:96:
f2:5f:38:c2:48:ed:06:a7:e5:cc:c2:53:cc:e7:c8:7a:9b:75:
46:bc:e5:ab:31:92:bd:a2:c7:f0:b0:60:45:bd:86:90:93:9d:
bd:3c:ae:ee:4b:f7:22:20:41:b9:ae:13:77:2d:e1:7e:7d:b2:
63:a0:cd:32:3f:70:f9:d8:c2:ec:ac:19:3e:e9:1d:17:c7:7b:
91:f2:61:c1:fa:7f:b8:4f:c7:9e:10:70:e8:bc:1a:d2:61:fa:
66:3b:7d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:23 2026 by rpki-client