Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa
File: RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa (raw, json)
Hash identifier: aQYj/VaPaTrTWbQj2KnQY8a0Wb0mkyzzVVekX0QBd2M=
Subject key identifier: 44:CF:60:72:1E:9F:17:A7:53:52:06:B8:06:3E:DC:F9:94:28:52:D3
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 01A0A585D7C01920C5BFBD1DE5C170535325
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa
Signing time: Tue 15 Sep 2026 14:43:27 +0000
ROA not before: Tue 15 Sep 2026 14:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15372
IP address blocks: 141.76.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:85:d7:c0:19:20:c5:bf:bd:1d:e5:c1:70:53:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Sep 15 14:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44cf60721e9f17a7535206b8063edcf9942852d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:9c:9a:1b:f8:88:d5:09:61:af:f6:7e:38:
3f:54:db:fa:12:e8:94:20:8f:57:87:66:ac:13:a2:
18:61:25:ed:ec:88:02:6c:75:1d:c4:93:ad:52:80:
c8:27:cf:73:f8:83:fa:b8:63:b3:66:50:f6:f7:b7:
81:78:59:ac:19:a9:71:c1:84:74:78:2d:76:0d:c6:
58:2f:ac:7d:14:f8:89:04:2d:7d:84:8a:43:80:21:
c1:ee:b2:05:33:20:ac:e2:f3:0a:89:30:69:2a:4b:
01:92:34:3d:d7:cf:45:37:60:18:25:7e:f9:78:bd:
fc:08:97:32:06:26:96:a3:62:23:fe:64:6a:b5:4d:
db:b4:0a:1a:c6:43:18:1e:82:56:04:3f:a7:c0:4c:
94:0e:19:ec:64:7f:e6:92:e2:c1:64:67:8c:ab:b1:
a7:95:76:88:9f:6f:90:9d:78:47:b4:cc:01:a6:8e:
10:54:b8:32:d5:44:0a:1a:45:d8:fb:f1:88:4a:84:
1e:47:a6:78:4b:de:b3:a4:1c:6e:c6:15:4a:71:46:
cc:2f:88:a6:f8:f5:9c:7c:ef:e5:56:e2:22:99:2d:
ac:8f:ae:f6:47:74:e1:bd:4d:fd:b4:54:17:b0:ad:
7d:ec:2e:30:af:14:73:d4:3a:ec:34:8b:16:48:1a:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:60:72:1E:9F:17:A7:53:52:06:B8:06:3E:DC:F9:94:28:52:D3
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/RM9gch6fF6dTUga4Bj7c-ZQoUtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.76.202.0/24
Signature Algorithm: sha256WithRSAEncryption
30:43:a0:50:ba:1c:ac:45:cc:49:e4:f6:db:3c:dc:8d:cf:8b:
22:01:0c:5b:56:ff:55:a6:dd:13:aa:14:2d:d0:68:f3:22:2e:
c0:ff:24:c6:46:f5:82:da:14:35:94:37:1a:1c:e0:89:16:71:
07:cd:4a:46:34:26:14:f8:54:78:14:c4:68:e0:cd:6d:15:d6:
da:be:f9:bf:26:c3:38:9a:d7:35:3e:2b:40:20:99:f3:5e:cd:
56:c9:8b:ba:3d:c3:95:f6:ae:db:db:8b:bc:48:67:cb:0f:27:
22:28:02:95:17:25:0d:2f:84:51:23:4e:09:45:eb:c5:84:b8:
d0:8f:da:3b:fc:ef:76:f2:9d:74:fb:bf:31:9d:0b:43:bb:48:
e8:51:8e:af:23:39:68:4e:da:cd:8d:a1:30:60:28:00:9d:ea:
f1:b6:87:bb:12:9e:56:b2:27:e7:61:f9:0f:60:f1:57:7f:b4:
37:d3:a8:df:9f:e5:b6:b3:ef:a0:88:a9:fb:a4:c2:88:db:d3:
ab:7b:d9:c5:c0:36:c3:f2:7a:29:84:81:33:46:86:f0:6f:d1:
de:c8:3e:9c:b9:ce:d0:33:83:a8:54:fd:b4:72:cc:e8:d7:f3:
44:c3:a7:db:e5:35:dd:d3:ee:e3:22:7e:ae:ec:16:9a:76:e2:
12:56:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:13 2026 by rpki-client