Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wGrINioR6X2FUiMHjlgjVqq5Hzo.roa
File: wGrINioR6X2FUiMHjlgjVqq5Hzo.roa (raw, json)
Hash identifier: DUXxwFV9SOsVpSAFxqSd+t/xEAp9wD2KTeFjD6DN9HE=
Subject key identifier: C0:6A:C8:36:2A:11:E9:7D:85:52:23:07:8E:58:23:56:AA:B9:1F:3A
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019D727F530EB474A920EEF477AC09C80A2A
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wGrINioR6X2FUiMHjlgjVqq5Hzo.roa
Signing time: Thu 09 Apr 2026 13:47:20 +0000
ROA not before: Thu 09 Apr 2026 13:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199742
IP address blocks: 2a0d:d940:120::/44 maxlen: 44
2a0d:d940:120::/48 maxlen: 48
2a0d:d940:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:7f:53:0e:b4:74:a9:20:ee:f4:77:ac:09:c8:0a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Apr 9 13:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c06ac8362a11e97d855223078e582356aab91f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:bf:08:38:34:b3:ca:58:bf:64:8a:40:60:
4a:dc:23:a0:37:f2:08:7e:ad:af:46:25:db:71:0f:
8d:23:ef:5c:77:c8:36:6c:81:fd:6b:e5:b0:7f:53:
95:44:d4:e1:ea:5a:41:ae:be:22:80:9d:a0:74:a8:
c4:23:d2:7c:ef:f8:e5:25:86:d6:04:64:30:65:04:
99:af:0e:22:15:e6:96:30:3c:88:ca:ef:61:d6:e5:
c4:f9:87:a7:a2:4f:3c:60:3f:ae:e7:e0:5f:d9:6e:
e2:b6:42:11:a5:9d:61:b3:c9:c4:3e:03:c8:cd:59:
d8:df:00:56:d7:50:02:66:6a:1b:70:f7:78:bc:78:
d5:f5:eb:23:92:7b:4d:21:ac:70:86:06:28:24:35:
10:0f:83:6d:79:83:58:6f:88:3d:44:38:ce:5f:b6:
bc:2b:fe:33:ea:60:b1:87:5e:5e:a9:c2:a6:66:f4:
59:42:bd:cd:58:07:6f:c6:b0:d2:b1:88:00:b5:d1:
0f:77:31:4c:41:94:4b:c1:75:9a:d6:5e:f3:cc:b8:
7a:f7:0c:f5:ff:e3:2c:ff:d9:0d:a2:0f:af:47:a1:
f8:6a:04:e8:e2:ac:de:30:13:ee:c9:b4:d5:1c:b7:
e1:26:87:92:c5:e3:bf:fa:c1:2c:d2:8b:b7:b8:b8:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6A:C8:36:2A:11:E9:7D:85:52:23:07:8E:58:23:56:AA:B9:1F:3A
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/wGrINioR6X2FUiMHjlgjVqq5Hzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:120::/44
Signature Algorithm: sha256WithRSAEncryption
9e:af:59:43:5d:1b:7a:3f:10:55:cd:c1:cb:7b:55:06:98:da:
46:79:8f:cf:40:c8:1a:ec:d3:31:c8:3f:ef:3a:55:02:c1:28:
32:c5:0e:51:8a:63:35:d2:64:ac:13:76:7e:09:14:14:67:bd:
1b:85:35:f8:4d:c5:0f:01:79:96:9c:90:b5:d8:60:df:74:ee:
94:3d:cc:3b:60:28:4a:d7:9b:ee:c0:7a:66:e9:8b:5c:34:ed:
9f:20:35:94:f3:ee:87:b3:95:07:d1:f3:0c:22:6a:e2:66:b6:
d7:93:29:f8:0f:a3:96:d7:08:a0:b0:c3:ed:47:50:62:1d:a3:
46:90:59:c1:8f:72:22:ea:81:92:96:a2:04:d2:e5:bf:2f:5d:
39:12:6c:3a:20:9b:ae:24:81:10:8e:a6:a5:3d:b1:04:a6:16:
cb:78:9f:ad:83:9b:27:d6:19:51:37:dd:9a:cd:73:90:56:07:
21:be:9c:cc:62:29:90:1b:3f:a1:19:c3:6c:93:9b:e0:d6:f8:
d4:6c:a8:4f:48:cc:56:70:3c:e8:88:54:a6:be:bd:88:ae:7e:
35:23:7a:35:91:19:01:9c:6b:33:94:c6:28:01:41:d5:8a:f5:
64:35:34:fc:8c:c0:69:fa:f1:6b:83:04:e7:1d:e2:1c:a9:55:
8f:3b:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:00 2026 by rpki-client