Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WvYlOKWf-Grz0ncJULea3Pyh9g0.roa
File: WvYlOKWf-Grz0ncJULea3Pyh9g0.roa (raw, json)
Hash identifier: jf66j2xdHTAQoNDEsykgaC1LeDfhgXjyTieOaLTZS/8=
Subject key identifier: 5A:F6:25:38:A5:9F:F8:6A:F3:D2:77:09:50:B7:9A:DC:FC:A1:F6:0D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019C660954C641B7233910C1B43FACFD6034
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WvYlOKWf-Grz0ncJULea3Pyh9g0.roa
Signing time: Mon 16 Feb 2026 10:40:13 +0000
ROA not before: Mon 16 Feb 2026 10:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214965
IP address blocks: 2a0c:9a40:9700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:09:54:c6:41:b7:23:39:10:c1:b4:3f:ac:fd:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Feb 16 10:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5af62538a59ff86af3d2770950b79adcfca1f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:9f:f4:8c:53:48:18:e8:de:d8:dd:3d:1f:
75:2b:d8:a2:49:ec:f6:20:ea:41:ea:fd:5e:95:e4:
53:52:a6:a2:86:f0:00:68:03:57:1a:25:4b:de:b1:
02:f3:c3:bf:ec:9a:51:7f:1f:ce:de:79:dd:b7:d7:
63:8b:2a:b2:2f:29:67:09:d0:8a:4c:4c:3e:5d:cd:
95:4b:b0:7c:64:b4:f6:1d:00:c7:29:8a:1c:8d:a1:
81:31:ac:3e:67:77:7d:5d:46:37:88:05:8d:e2:02:
5c:f6:22:87:6a:23:65:11:7a:c1:8a:94:ab:0d:0b:
06:77:bf:e8:7f:70:e7:36:73:83:3b:0e:74:f3:16:
59:4f:bd:67:d7:a7:2a:db:73:4a:45:e7:a3:ad:13:
9b:6d:81:d8:11:0a:ea:08:80:27:36:7f:9c:8a:d6:
b9:54:dd:e7:05:0b:c0:01:cd:e1:39:3a:86:1d:39:
9e:18:d0:20:d3:f9:be:f2:51:98:d1:80:1b:3c:5d:
cb:80:61:78:22:c1:b1:22:3f:e3:4c:f3:c8:78:23:
bb:00:85:a0:0a:a0:68:8c:92:e5:76:e2:b4:a5:da:
a9:f0:64:1e:81:b4:49:bc:fe:91:67:16:bd:8a:18:
3b:8f:5d:4b:86:02:53:44:e5:b6:bd:9b:8f:5a:a8:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:25:38:A5:9F:F8:6A:F3:D2:77:09:50:B7:9A:DC:FC:A1:F6:0D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WvYlOKWf-Grz0ncJULea3Pyh9g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9700::/40
Signature Algorithm: sha256WithRSAEncryption
03:c4:1b:2b:5e:b1:22:33:e9:07:28:4a:fb:85:29:87:b2:08:
fa:00:87:96:30:64:13:cf:09:13:ab:cc:89:82:c2:b5:3f:b4:
ef:c3:82:fc:aa:29:2c:71:fd:35:2f:bb:0e:8b:fb:75:e9:07:
2d:43:cc:ab:64:64:6a:88:db:a5:f0:2e:f2:d6:74:99:af:69:
90:2b:b9:c4:4e:29:75:0b:45:39:56:42:b0:1b:3f:c5:b8:27:
32:bf:a9:55:84:f2:c4:6f:73:61:96:89:5e:f2:b4:eb:d9:d6:
5a:0e:45:57:22:43:8f:97:33:99:b5:f1:93:33:16:0a:c5:de:
81:01:ba:6b:97:57:55:25:db:56:f9:bd:f8:30:c5:b7:20:83:
17:49:e6:1e:54:f5:1c:db:72:3b:43:93:8f:0a:0a:1b:c8:ce:
ab:67:e8:19:1d:50:1b:7b:6c:1c:52:12:e3:40:ad:f9:5d:af:
5a:15:26:d6:0d:93:a2:1b:ae:6b:91:bc:45:5f:41:36:d3:fe:
24:94:33:0c:ce:82:e2:c3:35:c4:56:a6:3e:c9:07:2f:59:d3:
c9:c1:a7:f8:ca:83:c7:87:55:13:27:7f:86:ad:cc:f5:66:f9:
a4:5a:0d:f1:f8:0b:af:93:7a:79:96:44:11:16:b0:36:11:cf:
b1:da:95:c4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZxmCVTGQbcjORDBtD+s/WA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwMjE2MTA0MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWY2MjUzOGE1OWZmODZhZjNkMjc3MDk1MGI3OWFkY2ZjYTFmNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP6f9IxTSBjo3tjdPR91K9iiSez2
IOpB6v1eleRTUqaihvAAaANXGiVL3rEC88O/7JpRfx/O3nndt9djiyqyLylnCdCK
TEw+Xc2VS7B8ZLT2HQDHKYocjaGBMaw+Z3d9XUY3iAWN4gJc9iKHaiNlEXrBipSr
DQsGd7/of3DnNnODOw508xZZT71n16cq23NKReejrRObbYHYEQrqCIAnNn+cita5
VN3nBQvAAc3hOTqGHTmeGNAg0/m+8lGY0YAbPF3LgGF4IsGxIj/jTPPIeCO7AIWg
CqBojJLlduK0pdqp8GQegbRJvP6RZxa9ihg7j11LhgJTROW2vZuPWqgz8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFr2JTiln/hq89J3CVC3mtz8ofYNMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvV3ZZbE9LV2YtR3J6MG5jSlVMZWEzUHloOWcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaQJcw
DQYJKoZIhvcNAQELBQADggEBAAPEGytesSIz6QcoSvuFKYeyCPoAh5YwZBPPCROr
zImCwrU/tO/DgvyqKSxx/TUvuw6L+3XpBy1DzKtkZGqI26XwLvLWdJmvaZArucRO
KXULRTlWQrAbP8W4JzK/qVWE8sRvc2GWiV7ytOvZ1loORVciQ4+XM5m18ZMzFgrF
3oEBumuXV1Ul21b5vfgwxbcggxdJ5h5U9RzbcjtDk48KChvIzqtn6BkdUBt7bBxS
EuNArfldr1oVJtYNk6IbrmuRvEVfQTbT/iSUMwzOguLDNcRWpj7JBy9Z08nBp/jK
g8eHVRMnf4atzPVm+aRaDfH4C6+TenmWRBEWsDYRz7HalcQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:49 2026 by rpki-client