Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/WNDY6KQEmCekzKTUecXhAaUDfno.roa
File: WNDY6KQEmCekzKTUecXhAaUDfno.roa (raw, json)
Hash identifier: TN9B+pjXoQM+lbUIR+xcxQrRVxbGqMqK54UEBJexWow=
Subject key identifier: 58:D0:D8:E8:A4:04:98:27:A4:CC:A4:D4:79:C5:E1:01:A5:03:7E:7A
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01A13A1E5B10944DE6797DCD6C56852FBB86
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/WNDY6KQEmCekzKTUecXhAaUDfno.roa
Signing time: Wed 14 Oct 2026 11:13:50 +0000
ROA not before: Wed 14 Oct 2026 11:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49182
IP address blocks: 2001:740::/48 maxlen: 48
2001:740:1::/48 maxlen: 48
2001:740:2::/48 maxlen: 48
2001:740:3::/48 maxlen: 48
2001:740:4::/48 maxlen: 48
2001:740:5::/48 maxlen: 48
2001:740:6::/48 maxlen: 48
2001:740:7::/48 maxlen: 48
2001:740:8::/48 maxlen: 48
2001:740:9::/48 maxlen: 48
2001:740:a::/48 maxlen: 48
2001:740:b::/48 maxlen: 48
2001:740:c::/48 maxlen: 48
2001:740:d::/48 maxlen: 48
2001:740:e::/48 maxlen: 48
2001:740:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:1e:5b:10:94:4d:e6:79:7d:cd:6c:56:85:2f:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Oct 14 11:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58d0d8e8a4049827a4cca4d479c5e101a5037e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:0b:cc:2f:28:ce:51:e6:78:71:5d:dd:e5:
c4:3c:1f:6b:c3:54:74:f1:ef:11:1d:33:44:b7:96:
4a:b5:ff:ca:4f:cc:fe:fd:ea:d9:fb:47:c8:84:7c:
6a:d5:5d:57:69:ed:f7:90:06:30:75:fd:1a:ec:5d:
f7:9f:72:ba:d3:67:30:db:fc:f5:a0:97:d5:60:39:
76:49:ad:eb:a9:9d:3c:5e:f7:7a:64:99:7d:32:ff:
6f:e5:d8:eb:9b:74:51:9e:1d:1d:a0:7c:13:ab:38:
4d:d6:0d:b9:0b:4e:b4:94:75:2f:60:02:6b:f3:ba:
4e:5a:8d:4c:63:aa:a1:f2:13:74:1e:53:70:90:5d:
6c:5c:21:22:8c:b0:88:f8:04:c2:05:4b:55:40:f7:
eb:83:42:78:b8:73:68:09:d9:7c:27:f0:7d:a9:bf:
a4:3f:77:70:08:f5:3e:ba:8b:d9:76:14:78:4c:bc:
0b:38:33:aa:c7:76:1e:41:f0:b6:88:d2:34:21:59:
53:9b:2d:fe:a4:c1:11:7d:39:94:7b:45:6a:75:af:
f8:80:11:c6:c4:90:2b:7c:29:ce:3e:70:2d:70:d5:
c3:f2:29:7e:dc:cb:27:00:01:66:69:09:fd:50:b5:
ec:63:c4:39:63:f8:d3:65:00:80:be:e6:bc:ca:03:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:D8:E8:A4:04:98:27:A4:CC:A4:D4:79:C5:E1:01:A5:03:7E:7A
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/WNDY6KQEmCekzKTUecXhAaUDfno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:740::/44
Signature Algorithm: sha256WithRSAEncryption
42:8e:cf:c9:e1:e8:1b:a4:54:64:08:0f:6d:e1:b2:f3:7f:68:
f1:29:01:63:82:da:fa:04:f4:dd:d3:68:d9:92:15:1a:a4:36:
f7:22:e7:bd:8e:e3:35:9a:9b:8c:e6:05:cd:c5:02:98:1b:12:
98:8a:9d:fe:8d:c4:91:d6:6f:70:30:1b:c4:b1:da:f6:7a:34:
bb:c9:88:2f:fa:fc:f9:6d:7f:ee:0d:2d:a7:d5:06:c5:f0:de:
75:6d:3a:38:d8:33:dd:07:8d:43:15:3e:20:d0:77:29:93:68:
83:6f:35:9f:07:b5:42:e0:f2:d6:ff:5a:c0:ba:9d:e7:ae:21:
83:c0:38:bc:c7:ba:57:c0:51:72:a4:7c:1f:63:b1:46:ef:d6:
c2:3d:35:e5:89:6d:23:af:65:74:de:43:d8:14:f3:78:95:49:
d7:43:ef:46:f2:e7:8c:7b:07:51:09:e6:2a:c1:3f:2a:1f:0d:
88:b4:bb:76:c9:ee:17:a2:d2:94:fd:fc:2a:dc:07:6b:a0:1e:
15:1f:fd:fe:ee:62:6c:9f:66:63:80:b6:8c:93:ba:e8:62:f0:
42:25:75:9c:c9:97:28:ee:75:db:9a:79:7e:d0:26:7f:48:c3:
fb:e4:e0:ce:45:80:44:59:4f:fa:26:db:b3:e5:a6:19:08:fc:
8c:70:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:54 2026 by rpki-client