Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/WQmYPEA5KHCYQnKwp8rq02Pzjjw.roa
File: WQmYPEA5KHCYQnKwp8rq02Pzjjw.roa (raw, json)
Hash identifier: IE1MdBhd39ubFGDJ8fLp8tQMRe29ApkrELaTf7r4r+I=
Subject key identifier: 59:09:98:3C:40:39:28:70:98:42:72:B0:A7:CA:EA:D3:63:F3:8E:3C
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019F2E093690847290D51166F1AAD861E8AD
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/WQmYPEA5KHCYQnKwp8rq02Pzjjw.roa
Signing time: Sat 04 Jul 2026 16:49:43 +0000
ROA not before: Sat 04 Jul 2026 16:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209179
IP address blocks: 2a03:bb80::/48 maxlen: 48
2a03:bb80:1::/48 maxlen: 48
2a03:bb80:2::/48 maxlen: 48
2a03:bb80:3::/48 maxlen: 48
2a03:bb80:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 14:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2e:09:36:90:84:72:90:d5:11:66:f1:aa:d8:61:e8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Jul 4 16:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5909983c40392870984272b0a7caead363f38e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:95:5f:f0:40:48:c9:b6:bf:1d:28:66:b7:
78:d0:bd:2f:4e:00:3c:6b:e1:ee:d6:7c:18:ba:f3:
ad:72:c2:aa:58:34:0d:b0:8a:42:c5:d7:0d:ab:4a:
6d:d0:41:89:f3:53:65:57:cd:3f:0b:9f:1e:6b:e0:
3f:64:c3:8a:8c:35:c4:42:48:6f:21:66:e2:93:1e:
f4:27:e6:75:e4:6c:5c:44:c6:61:82:ec:04:86:99:
2c:61:13:04:b2:16:0e:ff:9c:7b:ac:40:fc:d9:45:
bd:48:72:00:88:66:c0:39:4f:8a:91:f8:55:6d:3e:
73:a6:a9:2a:e9:70:8e:7c:8d:bf:09:8d:0f:1a:0e:
a0:98:9e:4c:49:ee:03:05:cd:1e:c5:3e:11:30:0c:
06:0e:f4:39:48:9c:d9:92:22:ca:fc:41:08:fb:f4:
e1:a6:55:11:bc:b3:d6:60:67:4f:37:4e:db:04:39:
fa:77:07:db:b8:eb:21:79:5e:63:02:dc:2e:7a:6f:
8e:62:3d:f3:cf:72:16:15:e4:95:1a:02:a2:c0:27:
d5:66:d9:57:b4:16:80:8b:61:2b:da:51:72:5f:3b:
fc:f9:f9:dc:d3:b0:ff:12:b9:39:b5:ec:2d:b1:0a:
09:cf:ec:e0:46:85:f7:27:2e:48:01:4b:8f:d7:04:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:98:3C:40:39:28:70:98:42:72:B0:A7:CA:EA:D3:63:F3:8E:3C
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/WQmYPEA5KHCYQnKwp8rq02Pzjjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:bb80::-2a03:bb80:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:82:a0:1a:7d:eb:11:92:11:b7:27:b2:67:be:c0:90:f3:57:
09:5c:22:ec:83:fb:c8:34:03:32:7d:3b:ee:47:e0:a7:fe:0b:
52:e6:f3:00:a3:2f:45:39:cb:e0:59:cc:16:e4:f8:ae:2b:71:
ad:d7:32:12:cf:7e:bc:fd:1d:e5:9d:75:9a:fa:b5:17:e3:7c:
99:39:d1:83:09:d1:3c:40:aa:d2:cc:2b:b7:5f:1c:8d:16:0d:
12:e3:27:a2:1b:73:e9:ee:c1:b6:3d:b8:68:27:f2:ce:f6:9e:
17:c0:3c:fb:af:1d:c4:6f:be:2e:96:b8:30:6b:ef:c3:14:9e:
b9:e9:03:d2:0c:52:ed:81:9d:86:fd:68:45:8e:0a:c4:26:52:
85:a2:46:1b:3c:e1:cf:d3:0a:0a:5e:df:3e:ca:3a:a7:cc:6f:
42:73:8a:2b:7d:98:0e:a5:f2:61:a7:87:20:53:f2:01:86:4f:
90:31:5b:3b:69:5f:54:12:54:70:a8:8c:90:7a:10:37:00:99:
05:67:38:a7:8e:fe:56:0a:c7:29:43:4f:1a:d2:0c:ff:af:ba:
f6:79:91:91:12:35:dd:fa:70:ed:e9:40:63:7e:75:17:ef:6f:
5e:9d:3a:1f:04:88:3e:a8:61:1f:a2:5f:13:7b:20:b2:91:b9:
ac:00:64:5f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8uCTaQhHKQ1RFm8arYYeitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy
NGIxOWIwHhcNMjYwNzA0MTY0OTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTA5OTgzYzQwMzkyODcwOTg0MjcyYjBhN2NhZWFkMzYzZjM4ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9SVX/BASMm2vx0oZrd40L0vTgA8
a+Hu1nwYuvOtcsKqWDQNsIpCxdcNq0pt0EGJ81NlV80/C58ea+A/ZMOKjDXEQkhv
IWbikx70J+Z15GxcRMZhguwEhpksYRMEshYO/5x7rED82UW9SHIAiGbAOU+KkfhV
bT5zpqkq6XCOfI2/CY0PGg6gmJ5MSe4DBc0exT4RMAwGDvQ5SJzZkiLK/EEI+/Th
plURvLPWYGdPN07bBDn6dwfbuOsheV5jAtwuem+OYj3zz3IWFeSVGgKiwCfVZtlX
tBaAi2Er2lFyXzv8+fnc07D/Erk5tewtsQoJz+zgRoX3Jy5IAUuP1wSA9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFkJmDxAOShwmEJysKfK6tNj8448MB8GA1UdIwQY
MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt
YTQ5N2I4Y2JmMTc3LzEvV1FtWVBFQTVLSENZUW5Ld3A4cnEwMlB6amp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3
LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBQcqA7uA
AwcAKgO7gAAEMA0GCSqGSIb3DQEBCwUAA4IBAQAggqAafesRkhG3J7JnvsCQ81cJ
XCLsg/vINAMyfTvuR+Cn/gtS5vMAoy9FOcvgWcwW5PiuK3Gt1zISz368/R3lnXWa
+rUX43yZOdGDCdE8QKrSzCu3XxyNFg0S4yeiG3Pp7sG2PbhoJ/LO9p4XwDz7rx3E
b74ulrgwa+/DFJ656QPSDFLtgZ2G/WhFjgrEJlKFokYbPOHP0woKXt8+yjqnzG9C
c4orfZgOpfJhp4cgU/IBhk+QMVs7aV9UElRwqIyQehA3AJkFZzinjv5WCscpQ08a
0gz/r7r2eZGREjXd+nDt6UBjfnUX729enTofBIg+qGEfol8TeyCykbmsAGRf
-----END CERTIFICATE-----
Generated at Mon Jul 13 17:33:47 2026 by rpki-client