Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wo97mu1YmTIAqFAnS9bweoXLI-M.roa
File: Wo97mu1YmTIAqFAnS9bweoXLI-M.roa (raw, json)
Hash identifier: kPwB31dyEqN1kNT0gnSo1SQzT0iAmRQIlheHTdqV3lc=
Subject key identifier: 5A:8F:7B:9A:ED:58:99:32:00:A8:50:27:4B:D6:F0:7A:85:CB:23:E3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A0AB30F6B96F667B1CB3AB81D1D1362241
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wo97mu1YmTIAqFAnS9bweoXLI-M.roa
Signing time: Wed 16 Sep 2026 17:08:27 +0000
ROA not before: Wed 16 Sep 2026 17:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211009
IP address blocks: 2a11:ab84::/32 maxlen: 32
2a11:bdc4::/32 maxlen: 32
2a12:2806::/32 maxlen: 32
2a12:6480::/32 maxlen: 32
2a12:6481::/32 maxlen: 32
2a12:6486::/32 maxlen: 32
2a12:bc82::/32 maxlen: 32
2a12:bc85::/32 maxlen: 32
2a12:cf84::/32 maxlen: 32
2a12:f981::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:30:f6:b9:6f:66:7b:1c:b3:ab:81:d1:d1:36:22:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Sep 16 17:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8f7b9aed58993200a850274bd6f07a85cb23e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:58:d4:fc:7e:7c:fa:fc:d5:57:e6:dc:5c:
91:e6:cc:b1:27:35:b0:2c:d4:cd:05:f5:aa:91:1a:
ea:2b:cb:cb:a2:fb:17:da:a7:c9:8a:7e:e8:38:01:
e5:0f:44:e2:f6:30:e9:12:01:33:95:f6:d1:1e:5e:
3c:5c:fe:fe:18:b1:ff:41:78:3b:91:f1:93:84:7e:
fc:b8:b3:73:4a:3d:a2:94:8f:c8:ae:07:45:9f:9b:
71:ff:e7:4b:5c:c3:61:d9:75:8f:44:ac:74:cc:9b:
1b:41:a4:21:99:83:3b:99:92:3b:22:50:77:e9:87:
af:10:b8:62:3a:c8:8f:75:d3:25:45:ba:d5:b2:f3:
44:90:96:51:44:5e:a3:03:63:45:6f:2f:c1:0c:9e:
03:47:b3:cc:0e:b0:5c:0e:e9:1c:aa:3e:c6:2c:e9:
ef:83:32:6e:d8:ab:f5:8c:ec:63:8a:67:5f:02:a1:
80:8b:26:66:bc:0f:82:e8:60:cb:73:13:cd:e9:da:
62:40:5f:2e:fb:ec:0a:e4:3d:6e:a7:72:2e:15:1b:
53:fe:8b:81:8a:f9:40:23:dc:c0:4d:b4:37:67:65:
8a:4e:c4:ba:56:60:b4:77:c7:44:30:a3:8b:de:da:
d1:b6:e2:c9:e7:c0:d6:7a:73:47:c1:0c:2b:ba:b0:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:7B:9A:ED:58:99:32:00:A8:50:27:4B:D6:F0:7A:85:CB:23:E3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Wo97mu1YmTIAqFAnS9bweoXLI-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ab84::/32
2a11:bdc4::/32
2a12:2806::/32
2a12:6480::/31
2a12:6486::/32
2a12:bc82::/32
2a12:bc85::/32
2a12:cf84::/32
2a12:f981::/32
Signature Algorithm: sha256WithRSAEncryption
5d:da:a7:8b:89:4c:b6:cc:6e:a6:4e:81:04:0a:7b:31:bb:00:
d4:0d:92:f4:f1:41:0c:2b:fd:60:bf:b2:8a:4f:35:b2:92:4d:
34:77:49:2c:db:09:4f:c5:99:ab:32:99:97:8e:1f:39:ef:ec:
2a:c9:19:00:aa:ac:88:9b:5a:18:f6:9d:88:27:7b:6c:9b:00:
fb:73:83:ba:48:80:e7:ee:ae:d5:e0:47:1c:8a:b5:8f:b4:14:
97:a2:12:ff:bb:41:f2:49:ad:6e:d5:55:b3:f1:50:80:4d:9f:
c3:e8:06:97:88:41:9c:71:fc:43:18:0f:b3:fa:a6:ea:2c:38:
6a:4c:16:97:d3:3a:db:8f:46:e2:5e:07:45:fe:8d:58:64:52:
dd:30:09:25:8f:8b:95:d1:04:53:67:aa:f1:e1:41:08:2e:47:
68:44:35:6d:fb:1c:45:37:1f:59:fa:e3:28:df:19:c5:3b:55:
a9:29:53:cd:e0:5c:cd:91:c1:c8:b5:4d:5c:45:a8:04:80:e8:
51:30:9c:88:5a:a7:ab:c6:e9:8a:44:94:fb:e0:69:49:de:b0:
90:3c:60:04:27:38:07:de:5f:7f:5d:d0:1c:0e:a7:3c:66:8b:
79:23:8a:d3:b2:f2:2d:5f:4a:3d:07:2a:77:cc:83:7e:87:c6:
ef:b2:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:51 2026 by rpki-client