Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/wGcdIhwPZifk9b5KwZGniOVO1zo.roa
File: wGcdIhwPZifk9b5KwZGniOVO1zo.roa (raw, json)
Hash identifier: UMDT/HLq1qMrunLYwsmcqNpWQGNS7EvqfPtBAOKrN8s=
Subject key identifier: C0:67:1D:22:1C:0F:66:27:E4:F5:BE:4A:C1:91:A7:88:E5:4E:D7:3A
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 019E68647FC6F5774FA054BA12CB858A6E2A
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/wGcdIhwPZifk9b5KwZGniOVO1zo.roa
Signing time: Wed 27 May 2026 07:44:37 +0000
ROA not before: Wed 27 May 2026 07:44:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 91.135.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:64:7f:c6:f5:77:4f:a0:54:ba:12:cb:85:8a:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: May 27 07:44:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0671d221c0f6627e4f5be4ac191a788e54ed73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:a6:0f:7d:64:b7:df:64:02:77:5b:5c:19:
18:0b:a7:22:a7:ba:a8:c8:63:76:9e:74:29:f3:30:
57:0a:19:70:ae:86:13:e0:0d:38:ee:46:a0:0d:af:
bb:a6:97:48:65:64:a1:bc:e3:9d:09:39:d2:d8:11:
0c:d8:88:c8:2b:bf:9b:2f:cd:ec:00:a6:a3:6a:39:
08:6a:a2:82:b1:de:d1:ef:6c:e7:64:66:4d:bf:73:
3f:58:f3:ff:79:f1:2f:c0:79:b6:6a:d3:9d:7c:d8:
58:3e:74:13:6c:cf:44:ca:b2:c2:fa:f1:20:4e:a3:
23:30:61:44:36:32:e6:0c:bd:c7:4a:db:af:79:47:
bc:10:37:1e:d9:4f:a1:5f:08:18:5b:bb:ff:ff:d6:
79:e0:af:34:90:16:b1:7c:ba:de:36:87:d8:74:6a:
5c:21:e7:bf:46:12:01:ee:41:8f:df:97:5f:aa:28:
af:b9:94:5d:9f:e6:7f:5c:51:f2:eb:25:72:57:0c:
4a:5d:4e:d7:e9:b1:90:11:8e:03:c0:9b:45:37:99:
95:e3:14:6d:78:65:82:47:c1:66:18:7c:3b:3d:04:
13:43:72:c6:d2:f8:80:7b:5c:17:7c:5f:31:84:ff:
1f:04:f3:b7:1c:8f:b7:77:2a:e1:ed:74:f4:c2:d4:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:1D:22:1C:0F:66:27:E4:F5:BE:4A:C1:91:A7:88:E5:4E:D7:3A
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/wGcdIhwPZifk9b5KwZGniOVO1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b8:41:1c:29:4b:a8:db:e9:10:2c:0e:18:f0:a6:88:60:75:
10:be:bc:0c:48:0d:71:84:37:d1:e8:4d:f4:13:e3:c3:47:1b:
b6:17:d7:c7:f3:93:84:ed:8e:23:df:ab:ee:32:b4:f2:7f:0a:
1f:f9:04:a3:c5:6f:b0:04:16:fe:45:fa:15:a9:77:9c:b3:b3:
de:47:24:61:f6:4d:e4:8c:ac:9f:4c:ee:43:2c:0d:8f:2b:3c:
20:dc:d7:ff:04:6d:03:c0:90:60:81:a8:6f:6e:f4:5b:3d:6a:
0c:33:9f:39:c1:55:5f:db:93:3c:ad:15:72:76:30:17:6a:b8:
e5:23:3d:ab:ef:74:d3:c1:d1:cf:fe:61:27:eb:5a:cf:89:68:
dc:1a:57:cd:70:6a:05:39:60:c0:7c:49:05:3d:d5:ef:97:14:
4d:2a:f0:50:a5:94:3f:d5:ed:bd:59:fe:69:a8:de:c5:66:19:
c1:24:6e:0c:75:4e:c5:1a:bb:f6:96:2e:f8:0d:68:df:63:09:
52:54:f3:c8:b3:b4:c3:17:9c:b8:08:fa:bc:7a:bd:d1:9a:31:
09:6c:af:7b:a0:f3:52:d5:0d:e0:b6:77:a5:f8:1e:af:80:7c:
f9:bd:99:7d:e3:e3:03:a8:5e:1a:50:0e:76:9e:af:56:e6:6f:
f8:d8:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 22:08:07 2026 by rpki-client