Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa
File: WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa (raw, json)
Hash identifier: U6Td7uAG7reeHiTfQxI1PpECAeu9USD7DlfHvDW3/Ds=
Subject key identifier: 5B:1C:4C:E8:C8:11:42:E4:02:1F:06:5F:91:1B:CE:2D:6F:B7:45:43
Certificate issuer: /CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Certificate serial: 01A0904370DA14870B618C4B1D6844CF7EC4
Authority key identifier: FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa
Signing time: Fri 11 Sep 2026 11:38:54 +0000
ROA not before: Fri 11 Sep 2026 11:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50625
IP address blocks: 62.182.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:43:70:da:14:87:0b:61:8c:4b:1d:68:44:cf:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Validity
Not Before: Sep 11 11:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b1c4ce8c81142e4021f065f911bce2d6fb74543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:ae:56:46:be:75:f7:94:66:c4:da:62:99:
12:01:5b:f9:e0:f0:5b:6e:1f:58:ae:f4:4c:1c:82:
f1:cf:11:c4:87:32:ec:95:9b:c6:0c:e1:c5:ba:44:
b6:98:bb:da:1d:f0:77:86:36:95:1a:f9:5d:53:0f:
8b:06:53:86:8a:8a:cd:63:04:45:cd:64:51:50:80:
41:69:a5:49:ed:75:cc:f8:68:1b:72:a9:cf:66:e1:
ea:92:5a:86:b1:81:bf:80:f4:9f:a8:3e:c7:bb:a7:
bf:4e:ad:88:fa:28:40:ae:cd:10:50:81:8f:92:2a:
de:76:7d:b1:de:c4:9f:2f:b7:f9:85:e6:34:73:43:
7b:be:03:dd:3a:dd:82:93:60:38:cd:cc:50:54:e1:
c4:cd:c0:3d:de:38:f7:ff:4b:3d:08:9e:d3:a4:25:
b4:56:df:f6:4f:8c:0a:80:22:02:ae:65:94:02:da:
09:5c:d3:07:8d:9f:5f:c3:28:b5:2f:19:0c:2e:1f:
24:99:9b:e7:a0:7f:74:9b:13:9a:04:bd:a7:72:f6:
95:f0:00:d9:e2:1b:bd:b6:6c:83:b1:cb:6a:0b:2e:
78:bf:fb:7f:b1:62:24:77:1b:62:38:95:0b:2a:bc:
16:d0:11:ba:81:3d:23:be:dc:06:e9:a0:86:0d:88:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:4C:E8:C8:11:42:E4:02:1F:06:5F:91:1B:CE:2D:6F:B7:45:43
X509v3 Authority Key Identifier:
keyid:FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.144.0/21
Signature Algorithm: sha256WithRSAEncryption
61:0c:ec:18:ff:e8:33:bf:14:a8:cd:57:72:25:03:5e:23:6a:
85:64:18:e8:ce:e6:c6:b9:dd:2a:eb:eb:2e:01:f6:f6:21:73:
4d:4b:43:d7:23:48:80:4f:7f:a2:ac:93:b0:d8:33:3c:b3:08:
0e:ca:b1:74:7e:bc:2a:c1:e6:de:b7:52:40:15:2f:bb:81:ea:
c6:aa:be:54:aa:43:c4:1e:0e:dd:6e:a7:cf:fd:79:48:46:29:
1b:48:37:8e:45:67:cb:3d:1e:10:85:3e:df:16:6f:62:60:58:
81:8b:bf:a3:31:70:c9:13:f0:14:1a:40:84:88:ee:e6:6c:65:
32:98:52:53:68:93:b1:70:21:49:4a:26:e3:ed:24:7f:45:3b:
ab:eb:0c:1c:45:71:3f:75:23:e0:51:38:4e:8c:0e:d9:25:16:
0a:81:80:86:d1:69:cd:f3:8f:1d:50:16:22:d8:9b:c6:dd:ba:
3d:c7:f9:56:97:4c:c5:9d:dc:47:7d:19:be:30:99:70:e4:de:
6a:cb:0b:b8:70:dc:d5:e1:91:65:b5:78:e5:fc:de:7a:66:41:
07:7b:ea:06:6e:1c:e9:67:86:a9:5d:20:e5:41:8d:c4:2b:d8:
1f:38:a7:9f:1b:bc:bc:6c:25:31:70:26:61:4a:e5:b1:ea:31:
cc:a8:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:48:25 2026 by rpki-client