Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W8SPneO_551imodkLzkju3IamNQ.roa
File: W8SPneO_551imodkLzkju3IamNQ.roa (raw, json)
Hash identifier: VJSSA69uZPkJnFaD212PByi6OUg0M98AoO2mNNP7fbo=
Subject key identifier: 5B:C4:8F:9D:E3:BF:E7:9D:62:9A:87:64:2F:39:23:BB:72:1A:98:D4
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 01A15839BABE31D53D9C5D549260A64AE58D
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W8SPneO_551imodkLzkju3IamNQ.roa
Signing time: Tue 20 Oct 2026 07:32:20 +0000
ROA not before: Tue 20 Oct 2026 07:32:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 152.89.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:39:ba:be:31:d5:3d:9c:5d:54:92:60:a6:4a:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Oct 20 07:32:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bc48f9de3bfe79d629a87642f3923bb721a98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:b7:a5:74:30:3d:78:b4:29:3d:be:de:35:
d9:1e:2b:26:99:7c:9d:22:d4:3c:90:10:17:d5:6d:
58:b2:47:22:06:41:67:65:98:36:23:b6:12:d1:4f:
1a:33:82:97:bd:85:51:80:18:d7:a0:da:d1:10:db:
f1:3d:61:96:00:ac:8a:60:b3:8a:8d:5e:77:33:0f:
d8:66:43:c7:84:f1:fa:08:03:e0:6d:ca:99:0e:f5:
d0:f5:3c:a4:09:3a:5c:1b:31:03:46:13:76:27:ed:
45:7a:f3:c5:69:4a:84:3a:a0:15:c2:3c:4a:09:21:
0f:18:a1:5a:e3:de:c0:cc:5b:5a:5e:9b:df:3e:21:
db:32:49:90:31:08:f1:dc:fb:3b:7d:a1:88:e7:d5:
0e:85:ba:bc:3b:fc:b8:86:dd:4f:ca:d4:bf:5a:4f:
9b:e3:96:aa:1b:13:d7:05:ad:e0:54:0c:9d:39:b7:
b6:1e:30:dc:64:5b:71:0b:1b:b9:61:7a:76:dd:3b:
a5:bf:4c:aa:50:ef:eb:41:44:3b:04:31:30:78:10:
56:b2:e3:5e:fc:14:d0:cf:79:45:f4:31:8c:ca:a8:
a1:13:5e:5f:5b:08:ca:40:bc:bf:d0:71:06:0a:cd:
c5:69:2c:25:f6:92:70:e9:75:e9:ca:c4:af:70:a7:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C4:8F:9D:E3:BF:E7:9D:62:9A:87:64:2F:39:23:BB:72:1A:98:D4
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/W8SPneO_551imodkLzkju3IamNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:18:03:46:9c:d6:1f:4f:5f:cc:03:05:12:ac:3a:ff:15:15:
92:f5:66:89:7e:41:be:69:9e:04:1b:c0:2b:9a:2b:a9:c3:d1:
ad:eb:7d:1a:6d:6b:fb:7a:99:65:a0:9f:f1:77:9f:3d:98:40:
68:55:fb:cc:1d:db:e6:e4:84:0e:38:39:3e:fa:71:77:34:13:
ca:82:6a:97:e6:7f:a3:26:3e:ff:7a:6c:3b:cf:8e:6c:fb:a9:
c4:58:31:fc:db:4b:d9:48:90:bc:5a:28:19:1a:e9:a4:00:d9:
8d:f0:c3:11:78:9c:df:f9:5e:f0:ee:01:4e:4b:8a:4c:82:fe:
b4:44:ac:ac:4a:61:6b:2b:cf:fa:fb:22:59:1b:39:d3:78:5f:
26:a1:c7:49:2f:ec:3d:b4:8c:7d:09:ad:e2:44:07:43:52:28:
66:5b:09:dc:00:34:45:42:3e:7d:fd:f0:05:85:55:d7:76:de:
63:c2:83:43:eb:84:16:cb:69:89:78:7a:fa:f5:9d:10:77:3c:
25:78:91:e4:f3:57:69:7d:00:89:b5:43:e6:32:7c:0d:df:a4:
54:75:c9:56:e6:28:32:36:85:0c:17:bf:81:30:69:e6:46:98:
d6:c8:84:e9:48:e9:7a:48:9a:c7:34:c8:11:e6:62:0e:73:99:
4a:30:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:07 2026 by rpki-client