Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/1WNswF0A8jFgKxcK6YvYk7E9HXw.roa
File: 1WNswF0A8jFgKxcK6YvYk7E9HXw.roa (raw, json)
Hash identifier: LIvwqhlz6BQHGKq1QhN6CtrW8yJuoOoFIvjhv858ep8=
Subject key identifier: D5:63:6C:C0:5D:00:F2:31:60:2B:17:0A:E9:8B:D8:93:B1:3D:1D:7C
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A7FF658F7E3BAA7024D976AF326B2DBB
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/1WNswF0A8jFgKxcK6YvYk7E9HXw.roa
Signing time: Wed 16 Sep 2026 02:15:27 +0000
ROA not before: Wed 16 Sep 2026 02:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11426
IP address blocks: 142.228.34.0/24 maxlen: 24
198.34.65.0/24 maxlen: 24
198.34.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:ff:65:8f:7e:3b:aa:70:24:d9:76:af:32:6b:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 16 02:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5636cc05d00f231602b170ae98bd893b13d1d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d0:06:df:7d:66:14:4c:f6:bd:13:67:26:ec:
80:2c:64:42:2c:13:68:52:6c:9d:d3:b9:27:de:18:
e4:1e:74:90:38:a7:b6:e5:3d:5d:2b:8c:52:88:72:
df:2e:70:82:94:d0:54:3a:39:87:30:4b:e6:9f:51:
47:09:b8:b6:bc:0e:b1:2c:bd:cc:ae:cb:9b:62:18:
96:42:ed:1f:dc:ae:12:7b:30:a4:92:cb:cf:53:3a:
c2:1f:88:48:c0:a7:ab:e1:f0:50:74:24:fd:d3:e4:
94:dc:9f:56:cb:b1:fe:c2:71:25:f3:44:f8:81:9f:
99:39:2d:71:53:4d:4c:f8:31:a9:ca:fb:57:cd:4c:
93:24:fd:ab:e7:7c:fe:98:35:c6:97:d3:5d:a1:50:
57:98:93:63:59:6a:b5:9b:91:40:96:ee:4b:e4:b3:
f7:02:c4:4f:33:28:9d:eb:db:85:8b:86:91:8a:f1:
38:f0:82:02:3e:fc:49:16:42:76:72:88:7b:62:95:
84:64:5f:af:d4:11:60:d0:7a:5d:20:cf:9e:57:06:
61:0f:52:c4:0b:e8:d2:67:e0:0b:65:a7:24:30:60:
7c:5d:6e:5f:e6:7e:a2:63:bf:f9:d3:e2:1a:78:0d:
67:be:80:23:ec:b3:79:ba:bb:f5:bd:19:0e:f5:20:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:6C:C0:5D:00:F2:31:60:2B:17:0A:E9:8B:D8:93:B1:3D:1D:7C
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/1WNswF0A8jFgKxcK6YvYk7E9HXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.34.0/24
198.34.65.0/24
198.34.221.0/24
Signature Algorithm: sha256WithRSAEncryption
93:45:da:0b:bf:87:96:4f:11:c0:b8:f7:e6:78:04:46:e7:bc:
10:be:43:ce:a0:d0:2e:6d:48:76:16:56:8a:7e:bd:d8:18:6d:
8e:1b:51:43:b9:a0:53:fe:26:2e:32:95:f0:51:75:7c:e4:04:
91:cc:ff:56:b3:0c:03:c4:c2:d1:61:87:28:b1:d0:bd:46:02:
5e:81:db:fc:ab:bd:81:d4:ae:36:e6:e6:12:5f:6b:a9:5b:ca:
e5:ac:16:c6:66:06:a9:ad:bc:ea:a0:cd:24:ca:85:27:c7:e8:
a0:80:72:aa:42:51:f7:89:b6:3f:06:80:cd:80:15:db:a4:be:
61:33:11:f0:e2:d1:50:8b:93:1c:57:22:b5:f1:c4:c0:ca:de:
91:b4:b5:44:6e:94:00:88:02:1f:5e:40:95:67:21:fe:69:65:
b7:3f:3f:ea:25:4d:06:be:b6:23:49:c4:9f:79:e3:c9:84:82:
b9:d2:cb:fd:52:4b:0e:4e:71:95:eb:24:0a:fb:7a:73:5e:11:
a4:7d:ae:16:1f:e3:ef:60:42:a9:73:d4:a8:92:91:7d:8f:82:
aa:c3:0e:4f:1e:45:b1:0e:bb:39:0a:3a:ba:c5:0b:90:38:8b:
9a:4b:a4:f1:6a:de:a0:29:84:95:80:84:47:9e:43:9c:95:51:
1d:60:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:51 2026 by rpki-client