Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/wtolA6HMGVvPA6gYljfUXhGgO9w.roa
File: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (raw, json)
Hash identifier: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=
Subject key identifier: C2:DA:25:03:A1:CC:19:5B:CF:03:A8:18:96:37:D4:5E:11:A0:3B:DC
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019C9EBF0DB3F5D33011345A43F53A1B3A44
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/wtolA6HMGVvPA6gYljfUXhGgO9w.roa
Signing time: Fri 27 Feb 2026 10:57:26 +0000
ROA not before: Fri 27 Feb 2026 10:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212628
IP address blocks: 2a13:aac4:f050::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:bf:0d:b3:f5:d3:30:11:34:5a:43:f5:3a:1b:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Feb 27 10:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2da2503a1cc195bcf03a8189637d45e11a03bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:5a:24:d5:c5:06:28:4d:9b:0a:cf:27:9d:
fb:57:2f:bd:72:0a:ad:0f:79:e9:df:8b:e3:ad:c4:
87:ff:56:cd:b8:2f:0c:a6:44:39:62:c1:91:a4:f3:
36:5d:16:15:9d:1b:f0:b9:08:c8:04:ce:8f:13:43:
0e:e2:f6:44:6a:77:52:bf:26:fd:7e:09:5b:be:57:
49:71:ff:d9:25:66:d2:97:97:0a:21:5d:15:69:1c:
60:08:42:bf:51:30:21:7b:32:5a:6f:c5:44:dc:aa:
f4:2c:5e:13:c2:86:24:8e:d4:d2:3e:22:b8:70:da:
98:82:35:e0:0e:bd:fc:69:85:39:10:31:5d:8b:f6:
7c:68:6b:b9:6d:e9:f9:38:aa:9b:fb:6f:09:17:11:
e8:bb:b9:c4:48:17:6a:bc:1c:81:14:08:d2:18:94:
99:cd:ac:80:49:21:7d:95:72:2b:4f:0e:11:e4:b5:
44:92:d3:a7:f3:cd:46:2b:0e:46:09:d5:4a:24:d7:
61:2f:4a:8b:f8:f3:4d:e3:f2:50:e1:7e:26:fd:a7:
d0:43:8e:f5:73:b5:89:b4:3f:c5:44:53:ec:28:90:
17:fa:56:a3:c4:b6:10:45:7e:0e:3e:43:87:24:70:
6b:3a:b2:29:af:82:30:ef:23:9d:ad:d2:b1:c0:5b:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DA:25:03:A1:CC:19:5B:CF:03:A8:18:96:37:D4:5E:11:A0:3B:DC
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/wtolA6HMGVvPA6gYljfUXhGgO9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac4:f050::/44
Signature Algorithm: sha256WithRSAEncryption
37:d1:c6:dd:83:e1:c4:c4:48:42:e7:2e:7b:88:d8:dc:57:e0:
e9:a3:b9:2d:ec:05:57:a0:85:f8:ec:19:ab:6f:18:10:6b:87:
cc:7c:61:af:eb:54:0a:93:94:f6:0e:99:ba:9e:01:db:8e:96:
de:dc:8b:09:f4:19:a4:62:04:38:ff:11:c0:f6:8f:5b:ae:3d:
8f:4e:77:34:e3:ba:a1:e0:ad:44:23:60:de:c5:fa:33:6f:94:
17:0e:1e:ed:38:ba:40:3f:14:98:88:58:1f:cf:ae:ce:d2:da:
00:34:dd:55:1a:25:f9:89:7b:bb:fa:8d:4f:66:bc:35:19:34:
67:11:48:47:0a:fe:2e:6d:86:27:d9:4b:9c:65:8a:22:5a:d6:
af:3b:ea:75:c2:01:03:cd:f9:6e:df:b7:8b:ba:f8:d5:3a:1c:
f8:21:4d:91:d7:a3:fc:5e:02:e8:a5:fd:c9:00:7d:d5:5f:8f:
ea:d9:9c:40:64:b0:30:dc:34:fc:42:34:d2:10:fb:d4:6d:78:
c1:ef:53:d9:4f:67:ee:dd:28:aa:15:59:a4:5f:ce:ff:96:56:
23:01:42:6e:1c:e0:0c:e6:bb:21:0b:65:0d:45:4b:b1:0a:29:
7b:51:f0:24:48:c9:21:20:b1:28:9c:49:94:fb:8b:6d:f0:31:
8f:16:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:55 2026 by rpki-client