Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/w0kKHQgaiOLeV4y8tlRfdYd7b_A.roa
File: w0kKHQgaiOLeV4y8tlRfdYd7b_A.roa (raw, json)
Hash identifier: G7PIYqwT/StJWFaPvFWwa/lGdH9BUaYIk1/Tzn1Lzg4=
Subject key identifier: C3:49:0A:1D:08:1A:88:E2:DE:57:8C:BC:B6:54:5F:75:87:7B:6F:F0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 01A0B43DD88DD4DB91CB6E4EB5C252B10751
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/w0kKHQgaiOLeV4y8tlRfdYd7b_A.roa
Signing time: Fri 18 Sep 2026 11:19:07 +0000
ROA not before: Fri 18 Sep 2026 11:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51803
IP address blocks: 31.129.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:3d:d8:8d:d4:db:91:cb:6e:4e:b5:c2:52:b1:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Sep 18 11:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3490a1d081a88e2de578cbcb6545f75877b6ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:63:28:bb:2a:39:bd:b4:46:af:94:d3:20:
bc:38:3c:9a:31:0e:39:0b:20:b4:b8:df:58:7f:3e:
6b:2d:8e:b8:37:d1:1f:f8:ec:4e:47:6d:5a:43:8c:
01:81:58:65:e8:ba:46:e4:cc:8e:22:a4:92:24:59:
a9:4c:b7:6a:dd:a5:e0:bd:41:08:2c:96:87:bf:1f:
d3:9b:aa:7a:1f:98:de:b2:41:68:10:be:f6:0c:b2:
f2:a5:27:9b:19:60:95:e4:6c:e2:e0:b1:3e:a8:75:
5e:6d:a0:aa:7c:6b:6e:18:9f:1f:bc:b0:e9:42:fb:
95:4a:e7:50:f6:a9:1b:19:1b:96:90:9d:19:40:9a:
5a:92:4d:85:83:f8:5d:74:1e:17:cd:98:09:c7:9b:
02:52:9a:c9:2a:a2:ce:38:f4:af:50:ed:49:f1:96:
9d:c3:37:9a:0b:15:3d:6c:98:80:92:ef:4c:8d:e8:
0f:2a:d8:31:2c:36:fe:18:a9:b1:6b:58:0e:0a:82:
f4:60:99:88:ad:92:b4:22:3d:d2:11:98:37:09:18:
d8:bb:e4:47:ba:0f:a1:c0:c7:86:17:94:ea:66:dd:
20:72:66:05:8b:b6:e1:84:51:33:19:f9:e3:4c:1b:
6f:7e:25:0a:ee:e1:dc:9b:27:84:c3:4b:56:c6:d0:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:0A:1D:08:1A:88:E2:DE:57:8C:BC:B6:54:5F:75:87:7B:6F:F0
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/w0kKHQgaiOLeV4y8tlRfdYd7b_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.230.0/24
Signature Algorithm: sha256WithRSAEncryption
32:36:e4:36:45:78:a1:76:19:fb:2d:ad:4c:52:4b:5f:69:ed:
63:19:47:c8:7e:a9:43:9c:2c:7c:13:b4:0e:c0:d5:33:79:74:
50:3b:aa:70:f9:c6:4a:77:ad:13:72:f6:ab:49:73:3c:4e:0b:
e6:9c:18:d7:64:f2:9d:de:92:02:de:70:fb:e8:80:d3:1a:60:
a5:5b:60:b8:03:55:e1:cf:00:e5:18:4b:36:81:80:58:32:18:
05:8b:b0:3c:72:1f:d0:0a:3a:1e:32:80:37:4e:92:bb:bc:95:
67:9f:9e:e9:97:82:9e:f5:f4:17:d5:d4:95:27:7c:fa:65:f4:
da:ce:d7:43:cc:c7:a3:b3:86:5d:89:34:30:dd:58:4f:03:66:
e8:e7:0b:6b:50:57:0d:13:fc:fd:28:ac:a4:0f:fb:13:25:c0:
f6:0d:66:55:51:5d:df:4b:f8:a9:c8:cc:b4:7e:70:9f:8f:93:
70:db:69:48:d0:75:9c:87:e4:88:27:7e:7b:cc:c8:da:55:c6:
4c:3b:02:f2:d6:12:96:d3:ad:a2:e6:41:98:a8:3a:50:fc:8b:
77:c5:2f:2e:a7:f7:b1:48:4d:a9:fa:ca:6a:63:2b:e1:15:22:
39:7c:51:de:83:2c:41:93:9b:04:34:d2:9b:e5:53:8c:e9:15:
be:e2:0b:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC0PdiN1NuRy25OtcJSsQdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjYwOTE4MTExOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQ5MGExZDA4MWE4OGUyZGU1NzhjYmNiNjU0NWY3NTg3N2I2ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KxjKLsqOb20Rq+U0yC8ODyaMQ45
CyC0uN9Yfz5rLY64N9Ef+OxOR21aQ4wBgVhl6LpG5MyOIqSSJFmpTLdq3aXgvUEI
LJaHvx/Tm6p6H5jeskFoEL72DLLypSebGWCV5Gzi4LE+qHVebaCqfGtuGJ8fvLDp
QvuVSudQ9qkbGRuWkJ0ZQJpakk2Fg/hddB4XzZgJx5sCUprJKqLOOPSvUO1J8Zad
wzeaCxU9bJiAku9MjegPKtgxLDb+GKmxa1gOCoL0YJmIrZK0Ij3SEZg3CRjYu+RH
ug+hwMeGF5TqZt0gcmYFi7bhhFEzGfnjTBtvfiUK7uHcmyeEw0tWxtDekQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNJCh0IGoji3leMvLZUX3WHe2/wMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvdzBrS0hRZ2FpT0xlVjR5OHRsUmZkWWQ3Yl9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4HmMA0G
CSqGSIb3DQEBCwUAA4IBAQAyNuQ2RXihdhn7La1MUktfae1jGUfIfqlDnCx8E7QO
wNUzeXRQO6pw+cZKd60TcvarSXM8TgvmnBjXZPKd3pIC3nD76IDTGmClW2C4A1Xh
zwDlGEs2gYBYMhgFi7A8ch/QCjoeMoA3TpK7vJVnn57pl4Ke9fQX1dSVJ3z6ZfTa
ztdDzMejs4ZdiTQw3VhPA2bo5wtrUFcNE/z9KKykD/sTJcD2DWZVUV3fS/ipyMy0
fnCfj5Nw22lI0HWch+SIJ357zMjaVcZMOwLy1hKW062i5kGYqDpQ/It3xS8up/ex
SE2p+spqYyvhFSI5fFHegyxBk5sENNKb5VOM6RW+4gsL
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:34 2026 by rpki-client