Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WfIpfp39aqq5_qKBFgXykMPZMR8.roa
File: WfIpfp39aqq5_qKBFgXykMPZMR8.roa (raw, json)
Hash identifier: u1nyxOe7VfJR/sAC6VjW1aOu4icytKGDhc1y8aTwxTM=
Subject key identifier: 59:F2:29:7E:9D:FD:6A:AA:B9:FE:A2:81:16:05:F2:90:C3:D9:31:1F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0A0ED65A82A6C64C3D96E6378978DE6E8
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WfIpfp39aqq5_qKBFgXykMPZMR8.roa
Signing time: Mon 14 Sep 2026 17:18:27 +0000
ROA not before: Mon 14 Sep 2026 17:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204968
IP address blocks: 2a0d:ad47::/32 maxlen: 32
2a11:77c4::/32 maxlen: 32
2a11:ab80::/32 maxlen: 32
2a11:ab85::/32 maxlen: 32
2a11:bdc3::/32 maxlen: 32
2a12:8780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:ed:65:a8:2a:6c:64:c3:d9:6e:63:78:97:8d:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 14 17:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f2297e9dfd6aaab9fea2811605f290c3d9311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:ee:2f:79:be:cf:e6:61:68:2f:c2:78:b5:
58:d6:58:97:95:64:6c:5a:d9:ba:b6:f8:6f:03:3a:
5a:fb:75:2f:0d:ee:9a:d5:f5:01:9b:23:bc:db:86:
40:9c:ab:61:46:f7:32:5a:30:da:0c:6a:51:45:71:
ad:ab:e7:84:fa:6d:a3:23:7f:7d:bb:3b:53:14:0f:
ea:75:e8:76:ee:07:17:ad:01:21:1a:b7:d1:85:93:
77:07:5a:1a:12:81:86:8f:c4:93:95:a3:71:5f:63:
9a:83:45:cd:51:b9:4a:08:5e:3b:ab:3b:86:e8:e6:
c3:6d:8a:7e:0a:97:65:65:dd:71:30:4a:51:12:6a:
ff:86:c0:72:36:89:5c:e5:00:73:a3:01:4d:d3:b7:
28:51:1e:82:62:b2:f0:6c:42:3f:dc:e6:4d:8e:ee:
5c:91:15:8a:fb:77:e9:0a:a6:1a:b7:63:b1:88:0d:
90:d5:aa:75:ae:2a:f5:d8:66:9f:e0:6f:82:54:cc:
58:28:b2:79:be:c7:42:e8:71:48:70:d7:cf:ff:ae:
f0:86:42:7c:b7:c3:85:54:7f:90:e8:4f:c7:c3:90:
e1:60:ea:67:14:57:69:a5:35:8c:46:c9:19:a2:72:
24:3d:ef:28:52:5e:45:97:aa:50:e5:3a:77:1a:18:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:29:7E:9D:FD:6A:AA:B9:FE:A2:81:16:05:F2:90:C3:D9:31:1F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WfIpfp39aqq5_qKBFgXykMPZMR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad47::/32
2a11:77c4::/32
2a11:ab80::/32
2a11:ab85::/32
2a11:bdc3::/32
2a12:8780::/32
Signature Algorithm: sha256WithRSAEncryption
05:49:99:6b:67:08:f2:1c:8e:66:d5:a1:f2:ff:84:7d:20:11:
f6:c3:5b:37:14:2a:63:5f:4c:ca:4d:ab:33:d4:e1:0e:96:f2:
ac:15:52:88:c2:9b:6a:ed:db:05:87:8b:5b:92:42:f0:c5:b2:
10:6e:3d:c6:3e:0a:ac:18:e4:b6:28:9c:6e:9e:99:38:86:51:
92:33:29:1e:a7:53:39:90:0c:81:7e:7e:48:8b:d7:75:13:80:
c3:fc:ed:88:eb:2e:49:9e:1c:db:69:bd:07:84:85:1f:0f:49:
6a:be:be:2e:c3:68:6f:31:bb:c8:87:f5:17:59:93:d9:40:4b:
43:c7:8a:f6:ed:f4:78:7c:eb:14:28:d7:2b:bb:30:78:23:55:
f4:d1:9c:04:e2:67:c7:6f:56:2f:b8:0a:b3:2c:71:69:db:25:
e9:6f:cf:11:5f:c7:2d:fd:5b:e0:d9:8d:e8:97:7e:b9:96:4e:
25:1a:e0:1b:88:6f:0b:5c:9e:88:1f:6a:88:bc:45:4f:4f:eb:
38:7a:d9:87:15:68:f9:eb:68:36:b5:e0:b9:44:70:15:61:4e:
3f:be:c8:ec:a7:ae:16:2d:b3:80:0f:d8:fa:61:22:28:de:26:
58:4d:df:66:c9:63:23:a6:61:8a:0e:66:08:fd:0b:3c:96:0a:
99:b6:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:17 2026 by rpki-client