Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W16xmLErxPDDZuAkpXsmTDvXhKo.roa
File: W16xmLErxPDDZuAkpXsmTDvXhKo.roa (raw, json)
Hash identifier: ZZMh5yS+zh9z7B0QaTGmfn6lspQ+YRQASiUwjCDNxLk=
Subject key identifier: 5B:5E:B1:98:B1:2B:C4:F0:C3:66:E0:24:A5:7B:26:4C:3B:D7:84:AA
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A082B9C42673F3C88540E32AEFB75899CA
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W16xmLErxPDDZuAkpXsmTDvXhKo.roa
Signing time: Tue 08 Sep 2026 20:33:27 +0000
ROA not before: Tue 08 Sep 2026 20:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.98.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:b9:c4:26:73:f3:c8:85:40:e3:2a:ef:b7:58:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 8 20:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b5eb198b12bc4f0c366e024a57b264c3bd784aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:87:5e:8b:f4:14:fd:47:73:5c:45:10:0a:
3f:90:1f:87:cf:da:24:42:4a:10:69:a0:d5:cb:00:
90:1b:35:5d:e2:3f:3b:6a:7a:77:26:f0:e0:ed:13:
18:c6:69:af:96:15:12:2e:bc:e7:6b:14:91:aa:5f:
33:da:7a:6a:8b:99:61:e1:cd:06:fa:d6:36:8a:be:
4a:8b:0d:9e:eb:a8:96:c4:06:61:fc:fb:57:12:51:
f5:65:a5:0c:2d:13:39:41:0d:36:88:48:7f:00:a3:
70:b7:6f:32:70:09:42:77:1e:ae:04:40:7f:dd:f0:
d9:ac:88:49:ca:b7:aa:b7:25:57:fd:99:29:68:c0:
07:89:c1:5b:5c:84:f7:49:84:ae:00:12:c2:5c:4b:
be:0b:54:b8:c9:c4:ab:2a:56:22:8c:7e:13:d6:45:
65:41:89:97:e9:65:a8:ab:ef:6b:e9:df:00:b0:d5:
91:ab:dd:e7:a0:03:f9:47:bf:0d:3c:3e:5a:00:84:
d0:41:89:75:4b:a9:1c:5b:f4:e9:fc:6e:81:77:af:
68:ff:62:0f:40:cb:37:a4:2c:fd:c1:51:a7:55:0f:
f8:c7:52:bb:05:a5:b9:1c:8c:e9:eb:64:bf:c5:54:
58:7c:5b:ff:56:9c:88:8c:ff:80:7a:a4:7b:ae:f5:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5E:B1:98:B1:2B:C4:F0:C3:66:E0:24:A5:7B:26:4C:3B:D7:84:AA
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/W16xmLErxPDDZuAkpXsmTDvXhKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.149.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:fc:08:4b:65:05:f9:b2:68:b6:44:3d:20:16:90:51:a6:82:
7c:4f:2b:c9:b9:79:15:1a:e5:16:67:35:e0:1f:52:cb:29:75:
27:d0:8d:48:53:17:f1:3a:c0:69:88:63:90:82:2c:34:e1:42:
5a:37:30:86:1d:c0:ca:c0:4e:a0:dc:d9:20:ec:b5:a1:ef:b0:
46:e3:59:17:d0:28:44:8a:f0:35:46:59:ab:e8:3d:c2:e1:11:
c3:28:86:c3:fe:38:aa:e5:66:4b:50:ee:87:37:fe:1d:4d:2f:
4c:f4:c1:75:00:60:d1:f0:b7:f6:72:49:4e:4a:2f:b1:e7:2b:
39:13:14:3a:0e:08:65:17:e7:71:a9:ce:85:73:0a:af:bb:7b:
04:f6:25:e4:91:ed:e5:ae:45:dd:ce:e7:fa:28:ca:2e:ef:47:
ad:16:d2:5a:32:9c:98:c5:e1:03:ac:4b:a3:24:9e:41:3f:cb:
4f:ec:c6:80:7e:36:2b:07:fc:ad:1e:5b:54:fb:dd:03:ed:95:
cb:52:a6:5f:dd:61:8a:0f:e7:17:9c:57:84:d4:45:30:80:a5:
62:7e:43:47:93:73:04:e6:89:bc:d5:cc:2a:68:a2:e9:2c:ae:
a2:b5:9a:0a:ca:41:b2:c3:da:88:12:c1:42:2b:d1:25:9e:79:
f7:79:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:30:49 2026 by rpki-client