Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa
File: WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa (raw, json)
Hash identifier: k6+/vKAPaJ0sFipUMk81Re8Qm/yMiMqYphPb+MhZOZY=
Subject key identifier: 5A:10:3A:17:AC:01:BB:77:7C:78:A4:96:C5:64:47:BF:D7:2E:1C:90
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE28CF0767456557DC8C05EFD373D
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa
Signing time: Tue 15 Sep 2026 21:49:29 +0000
ROA not before: Tue 15 Sep 2026 21:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19437
IP address blocks: 142.228.238.0/24 maxlen: 24
198.33.137.0/24 maxlen: 24
198.34.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e2:8c:f0:76:74:56:55:7d:c8:c0:5e:fd:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a103a17ac01bb777c78a496c56447bfd72e1c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:3a:37:fc:52:04:c5:e2:b5:3c:08:c5:56:
f0:cf:7d:bb:e8:9a:20:f2:ba:1a:ed:c4:d7:d7:85:
37:90:19:60:ee:42:6f:c2:5a:45:d8:81:c7:df:7f:
e2:75:1c:a2:b1:15:68:8c:4a:07:ab:e7:90:b0:b2:
57:eb:93:0a:30:62:af:c2:a9:2f:c3:ad:28:b2:b9:
14:c7:3d:64:47:e9:a6:a5:6e:c3:5c:2f:d7:6f:51:
52:7e:4a:8d:dd:dd:dd:37:05:d3:47:6d:e7:61:80:
33:7a:10:38:6f:2e:db:a3:0d:ca:7a:a9:0c:1e:fe:
85:c6:9f:af:e1:61:69:bb:17:f9:ff:cf:00:4c:87:
a0:0e:98:6c:5f:89:b2:09:55:28:c8:43:66:71:3a:
8c:d4:64:63:ea:46:57:04:95:cd:ef:e4:68:33:fa:
a9:e6:34:ac:81:bd:3b:08:0e:89:9f:57:b5:51:93:
4e:ff:11:07:2e:2e:f4:93:80:ec:e9:42:1b:0c:fd:
2c:99:a5:dd:86:ca:f9:37:68:66:1c:b8:72:49:f3:
04:5f:64:e2:d8:d5:b6:f8:cc:b1:95:ce:47:92:f1:
ab:b1:39:b0:64:05:b5:37:72:87:8d:f4:b5:90:60:
fd:8c:b9:f3:d2:30:d9:4f:9c:89:1d:a7:0e:78:b5:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:10:3A:17:AC:01:BB:77:7C:78:A4:96:C5:64:47:BF:D7:2E:1C:90
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/WhA6F6wBu3d8eKSWxWRHv9cuHJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.238.0/24
198.33.137.0/24
198.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
88:73:dd:68:55:01:8d:fc:66:bd:67:32:db:c7:f5:82:8b:91:
70:e5:b0:42:b8:8f:21:0f:ce:16:8f:a7:28:c5:68:4c:45:42:
da:be:4b:a6:46:7c:e0:43:97:0c:5f:b4:ca:bf:17:8d:eb:f0:
b0:45:14:b1:6d:c1:be:24:ad:2d:7b:e8:d8:29:d9:7c:01:a5:
3d:71:25:45:72:37:f3:b3:ff:eb:ea:33:6f:e4:ae:e5:bc:77:
34:d7:df:d3:fd:b2:d0:6e:8d:4e:32:f1:61:1d:35:07:40:92:
18:81:d8:2c:5e:ab:c4:41:84:de:26:63:55:7f:a8:fd:c4:60:
bf:2c:ba:4e:74:3d:8d:c0:fa:06:be:3d:75:61:bf:ac:ac:4c:
08:84:64:7a:8e:1d:d1:b4:b2:d7:2c:fc:16:5c:34:bc:59:c1:
d3:1f:5c:a0:9f:97:04:60:a5:c9:87:45:a5:45:b7:33:87:e2:
04:b8:0f:f3:65:4f:51:9f:88:d8:76:f9:b9:54:57:c9:2b:65:
8b:58:b4:fe:11:f4:13:1f:f7:f6:15:f9:38:36:97:22:12:69:
6f:f4:bc:9b:82:ee:28:87:76:8d:01:f2:e6:a0:a6:7e:28:f9:
e2:fc:5b:6a:c3:f2:f2:3c:75:85:0b:2c:ae:d1:9d:3f:9f:9c:
fd:5e:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:45 2026 by rpki-client