Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o5Wsg4siqOQAMErJNWMe7zLJp7I.roa
File: o5Wsg4siqOQAMErJNWMe7zLJp7I.roa (raw, json)
Hash identifier: 2yvV6ahub2ug8311gJTOGJY3WDPvZfi12idbZBLq/Fo=
Subject key identifier: A3:95:AC:83:8B:22:A8:E4:00:30:4A:C9:35:63:1E:EF:32:C9:A7:B2
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F236876B45B09428EF0F6BB548A2A2004
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o5Wsg4siqOQAMErJNWMe7zLJp7I.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 213.220.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:b4:5b:09:42:8e:f0:f6:bb:54:8a:2a:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a395ac838b22a8e400304ac935631eef32c9a7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:d7:59:14:c3:9c:59:1c:cc:1b:21:6e:8f:
20:1a:d2:d8:ed:bd:60:6b:2b:51:ba:75:76:a6:c2:
7d:59:b0:62:69:af:50:ff:eb:89:53:ff:39:0c:96:
b5:b3:ab:68:98:5b:4b:91:60:96:6b:8f:80:33:d6:
aa:b7:e7:b1:67:b9:0d:7c:58:c2:a3:a2:92:f6:07:
be:2b:7f:03:b8:6f:59:8b:a2:58:4e:6a:1c:3f:55:
3d:60:ba:b3:bd:91:01:9a:86:ed:ee:d5:b5:d1:d2:
c4:84:4c:a5:65:be:aa:63:52:71:39:99:a5:d8:3a:
e9:79:64:b2:a1:29:e4:15:78:7d:42:d2:b7:0c:9b:
3e:a7:a4:39:91:85:79:b5:60:0f:5d:43:9a:80:e3:
3e:2d:d5:1b:68:f7:e8:4d:c7:fa:f5:47:d9:15:8c:
00:1a:fd:8c:fb:59:6d:4d:fd:4a:a4:2f:e6:fc:86:
58:cc:5d:5f:7d:a8:ed:cd:11:47:7d:25:8e:93:34:
e4:40:31:fd:e0:d2:0e:70:c5:58:57:dd:ab:61:9f:
21:ac:69:01:bb:ce:7e:2e:06:02:b8:79:f8:1c:f5:
3f:3b:4d:8f:28:ea:94:5c:fa:92:7e:53:1b:34:e6:
f4:6d:b6:57:d9:01:5c:4a:36:1b:12:2f:9a:a1:16:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:95:AC:83:8B:22:A8:E4:00:30:4A:C9:35:63:1E:EF:32:C9:A7:B2
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/o5Wsg4siqOQAMErJNWMe7zLJp7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d1:e6:1d:40:f1:0a:67:93:bd:fe:78:f7:94:23:07:b5:00:
69:d5:e8:03:ae:09:ec:af:f2:08:df:55:ca:22:e7:e4:3e:9e:
e7:78:d6:e2:e9:ab:95:a0:8a:d5:1d:20:aa:08:85:78:ae:ff:
e3:31:76:32:96:3b:e8:1b:78:ea:aa:af:e7:5a:38:70:0e:0a:
e1:f9:bc:85:34:c6:b6:cd:58:e2:f5:33:19:f8:47:ad:49:4c:
7e:08:1b:ce:79:fe:c7:93:39:f8:18:66:99:19:fc:ac:ec:25:
67:cc:b9:50:0c:3b:f1:75:41:63:b2:03:e6:bb:9e:b4:52:91:
04:28:f4:a6:26:cf:dc:a1:98:37:b4:7d:ec:33:0f:df:1d:df:
2a:e1:eb:d1:0b:74:b7:99:35:9e:d0:c8:29:3f:da:de:38:a4:
81:c4:16:c3:19:34:f5:b9:2a:a9:64:65:a6:a2:f5:6a:0b:18:
ed:ea:f7:64:7c:fc:b7:77:b8:a1:a7:44:5b:44:ea:86:2b:82:
f3:6c:cd:95:7a:6c:96:4d:f7:d3:49:51:b5:aa:e9:db:c6:73:
0a:da:cc:3d:49:2e:55:44:77:81:be:b6:fb:85:b9:93:4e:4d:
9b:cf:13:e2:d8:8b:94:59:d7:d2:67:46:72:db:2c:0d:a8:cb:
30:8b:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 21:50:00 2026 by rpki-client