Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/19NgTNWedKeP_sdHc2nIqL91iOY.roa
File: 19NgTNWedKeP_sdHc2nIqL91iOY.roa (raw, json)
Hash identifier: Y6ZNBC7CHF0l6wLAvNLom5T3QEeM7r39TKtQnga5FLg=
Subject key identifier: D7:D3:60:4C:D5:9E:74:A7:8F:FE:C7:47:73:69:C8:A8:BF:75:88:E6
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0F7575C4E5113B321C86D46E1BB96FE84
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/19NgTNWedKeP_sdHc2nIqL91iOY.roa
Signing time: Thu 01 Oct 2026 12:01:32 +0000
ROA not before: Thu 01 Oct 2026 12:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:57:5c:4e:51:13:b3:21:c8:6d:46:e1:bb:96:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Oct 1 12:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7d3604cd59e74a78ffec7477369c8a8bf7588e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:22:aa:fb:63:bf:0c:1e:0f:cb:11:1c:1a:
8c:8f:7e:04:cf:fe:a4:69:36:25:e9:bc:e4:bd:7a:
a0:30:74:df:e2:8c:21:db:2f:2e:96:1f:41:52:f5:
38:9d:97:a5:7e:1f:ba:50:97:49:39:49:eb:d3:ec:
6b:51:82:33:89:a2:7e:4b:13:67:3a:75:56:df:3b:
36:cb:5e:70:a6:18:37:ff:f9:ea:ab:b6:9a:d5:89:
1e:cc:12:7d:02:8b:f0:f4:30:71:1a:87:6f:6c:ab:
63:8e:79:6b:2f:ac:93:4c:3a:97:10:45:00:0c:a4:
3a:4b:65:93:d9:b4:37:d6:15:3b:5a:64:f9:59:48:
8f:c2:ad:40:e4:86:31:a4:37:04:5b:35:ee:82:94:
bf:c0:b3:e6:4c:a8:19:20:f7:bd:9e:7e:94:b3:6d:
a3:61:4a:9b:41:4f:cc:e0:f9:2e:d1:5b:1d:23:bd:
6a:fc:aa:0d:73:de:2c:f1:96:ab:2d:49:9d:68:fc:
29:d8:c6:19:d7:e7:a5:8c:28:b2:1c:7c:3a:11:66:
ae:fd:14:6e:9e:58:df:0c:c9:85:a9:c5:87:18:b5:
08:23:4d:3c:3b:e5:d3:7a:67:d8:9e:e5:7c:e1:9f:
da:8f:ef:ac:e7:cf:ad:7a:65:17:e6:06:54:13:4f:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:60:4C:D5:9E:74:A7:8F:FE:C7:47:73:69:C8:A8:BF:75:88:E6
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/19NgTNWedKeP_sdHc2nIqL91iOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
45:14:b0:6a:fd:50:5e:a4:c8:d1:91:d0:ba:e3:4d:e0:5c:89:
19:ac:4c:55:14:f3:ec:e3:3e:a6:5c:de:1e:8e:4b:9e:6a:e7:
71:16:a7:75:36:21:3d:52:fd:0c:8e:04:63:ac:33:a9:c5:91:
0f:f3:86:37:b9:16:63:1e:4c:75:19:3b:b4:30:97:d4:1c:2e:
d7:72:b8:c6:eb:83:40:30:c6:66:43:1c:14:45:c7:d5:f4:77:
f3:5d:7b:ed:d6:c1:e2:d5:b9:90:1c:ef:9c:90:01:c8:71:0d:
ef:9f:26:68:b9:55:fc:8c:bb:bc:ae:13:ac:39:37:39:08:ee:
cf:9e:ab:dc:5e:4d:1b:2a:25:b3:9b:a1:ab:19:b8:ed:d7:8d:
93:3f:15:97:30:d7:3d:b9:b6:a1:cb:c1:d1:ca:88:bb:74:98:
a5:09:62:e0:ed:f9:7c:9f:62:7d:2c:a7:fd:43:9d:ed:b5:42:
63:5b:cb:63:7a:bc:35:f8:8c:2a:97:15:34:5d:c5:0a:46:e6:
69:8b:47:a6:ec:82:23:96:25:b7:c1:3f:c7:95:ca:bd:7e:7a:
35:03:0e:e1:96:cb:c9:8b:40:1b:71:dc:3e:47:02:75:47:71:
91:5c:f2:74:88:2d:3b:e7:5e:ce:71:ea:93:ce:b9:f0:8f:a5:
28:a1:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:24 2026 by rpki-client