Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Womqs8hRzBpV-8c1UdFZPz9rwww.roa
File: Womqs8hRzBpV-8c1UdFZPz9rwww.roa (raw, json)
Hash identifier: 8SJVuc9PEi8xt0Bu8RTXHnw6EGorHBSDoF1T1n9ubis=
Subject key identifier: 5A:89:AA:B3:C8:51:CC:1A:55:FB:C7:35:51:D1:59:3F:3F:6B:C3:0C
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D9A012B28F2B44ED4DF9BEC9FBB429ABB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Womqs8hRzBpV-8c1UdFZPz9rwww.roa
Signing time: Fri 17 Apr 2026 05:54:20 +0000
ROA not before: Fri 17 Apr 2026 05:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:01:2b:28:f2:b4:4e:d4:df:9b:ec:9f:bb:42:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 17 05:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a89aab3c851cc1a55fbc73551d1593f3f6bc30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:f5:29:85:3d:ab:e7:f1:14:c6:9d:ae:a6:
d8:ba:71:01:b2:9c:3e:89:c3:a1:2a:4c:c8:b0:a8:
75:42:73:fc:73:90:d5:58:03:e2:88:ff:fb:c5:d5:
6d:02:07:fc:90:2b:38:ea:69:5e:82:d9:a1:ec:b8:
69:10:64:a5:46:a1:0a:84:2c:81:56:4a:74:b9:96:
69:bb:ff:90:89:11:ac:c8:7c:28:04:21:20:27:37:
1d:a9:15:cc:36:29:71:11:27:c4:02:14:9c:c1:f0:
18:ab:26:d6:0a:fc:eb:b9:a7:29:32:20:4c:2c:a7:
48:83:35:a7:67:7f:1b:51:e9:0f:22:90:d2:50:cc:
df:6a:8e:c2:59:69:78:5a:f5:8b:1d:4e:13:0f:20:
8e:6e:9d:d3:77:93:f0:57:27:41:e6:47:6a:2e:b3:
81:9a:43:1d:26:41:1d:41:e2:f1:b1:af:bd:f1:20:
10:77:57:8a:f7:17:41:87:a6:11:8a:8d:12:8e:ae:
15:7b:d3:0b:ef:e0:2a:9a:46:cb:cb:fd:bc:3f:94:
77:c7:90:62:56:64:d1:59:13:8c:df:67:70:da:13:
4b:7a:ae:1f:a9:97:3f:8c:ef:46:4d:af:2e:d0:a9:
72:33:3a:76:3f:eb:09:d8:3a:c9:cd:10:3f:31:78:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:AA:B3:C8:51:CC:1A:55:FB:C7:35:51:D1:59:3F:3F:6B:C3:0C
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Womqs8hRzBpV-8c1UdFZPz9rwww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b1:ee:12:7a:b3:d9:99:0a:19:b9:4e:b6:c8:0e:fe:14:e6:
b8:e5:1e:0a:50:98:5d:48:9d:b4:f8:f4:c1:bf:3c:65:76:2d:
d8:93:a5:38:80:95:80:d4:96:2a:68:b0:b3:67:e2:39:3b:d7:
2e:53:a0:06:85:38:5e:35:d5:c4:ca:9e:9a:f1:75:50:54:e2:
bc:4b:01:ff:60:b7:92:fc:79:cf:2a:aa:3f:0c:7a:b1:8e:76:
88:1b:0a:0f:61:58:8b:af:f0:3b:cc:0e:2f:cd:9d:1e:19:d5:
53:39:c8:94:89:80:04:0c:f9:f0:b5:97:8d:f3:58:6c:f7:27:
e2:bb:e8:ac:21:e5:44:ec:86:d9:9b:c0:7a:fa:01:f7:97:aa:
c2:e6:3d:fc:0d:78:a9:74:49:09:22:0f:5f:96:a5:90:5b:1e:
ec:37:4a:7a:a3:2c:99:f5:e9:c0:ea:04:fc:7d:40:d7:1c:3c:
de:08:55:ab:6d:e8:ef:51:b7:5b:ee:44:bd:82:8b:ff:7b:a2:
38:96:35:68:86:36:40:63:86:f5:f5:02:7d:8c:fb:af:e0:1f:
4e:ff:44:72:51:1a:35:e4:87:fa:97:b6:20:a6:05:a6:17:cd:
7b:b8:1d:a5:1d:da:05:d9:59:a0:77:1d:7d:c8:08:9a:e8:5f:
e7:12:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:28 2026 by rpki-client