Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W65vFxXKbxmq7dK_TAJxVeUdWHA.roa
File: W65vFxXKbxmq7dK_TAJxVeUdWHA.roa (raw, json)
Hash identifier: yqxtHV/CslpZBPyeOdQKLmW4Iyq5xnMKwuGrDGPLQyQ=
Subject key identifier: 5B:AE:6F:17:15:CA:6F:19:AA:ED:D2:BF:4C:02:71:55:E5:1D:58:70
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A05CED54E7813254437E5C74ED486A01AB
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W65vFxXKbxmq7dK_TAJxVeUdWHA.roa
Signing time: Tue 01 Sep 2026 12:24:12 +0000
ROA not before: Tue 01 Sep 2026 12:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209439
IP address blocks: 2a00:8b80::/32 maxlen: 32
2a09:3dc0::/30 maxlen: 30
2a09:3dc4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:ed:54:e7:81:32:54:43:7e:5c:74:ed:48:6a:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 1 12:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bae6f1715ca6f19aaedd2bf4c027155e51d5870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:b5:c1:99:66:81:27:9b:aa:88:50:b7:5a:
e0:83:93:87:f0:78:8c:82:bf:eb:b0:95:b7:77:db:
19:1e:90:9a:c5:b4:94:be:4c:ea:d2:8f:db:39:63:
dd:1d:a3:16:78:b9:ff:43:dd:11:d8:f2:c4:e7:c5:
1d:6b:b2:08:2c:a7:24:36:ac:47:de:7a:aa:07:53:
6a:6b:84:92:a8:cc:85:6e:74:a5:94:eb:6c:f5:83:
8e:5b:20:19:e0:59:99:a6:8f:a2:a6:d9:71:a5:29:
6d:46:64:7b:1f:1e:fb:55:51:cb:b5:a7:35:dd:46:
08:04:82:49:14:77:0f:3f:14:1c:bc:83:bb:e9:e0:
c4:24:c9:c0:12:65:1b:c0:02:5c:76:8b:3f:0c:67:
5f:d7:ea:cd:59:00:ce:22:53:13:f2:7d:22:22:c3:
f1:81:f3:77:46:86:79:b9:0b:bc:c4:5b:54:f1:3e:
3d:5d:7f:3e:88:23:68:d4:7b:51:9e:fa:0f:5d:ce:
8a:26:0b:6d:fb:2f:b0:bc:49:0c:d0:20:cb:ea:23:
31:b8:e7:a2:65:f9:9e:a3:5f:c3:d9:00:04:13:f9:
96:af:d1:4c:81:2e:30:d8:26:16:be:2a:48:4b:4d:
4e:9b:a3:64:f8:8b:58:fb:72:cf:f1:26:72:05:55:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:6F:17:15:CA:6F:19:AA:ED:D2:BF:4C:02:71:55:E5:1D:58:70
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/W65vFxXKbxmq7dK_TAJxVeUdWHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8b80::/32
2a09:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
04:7b:0e:7f:ce:ef:28:b3:f9:f1:99:a2:28:1b:5f:0e:79:05:
97:07:23:26:a8:bd:44:fc:5b:bf:19:e8:ca:fc:dc:77:63:a9:
29:bb:8f:51:bd:7c:90:dc:ad:de:08:33:b6:0f:c3:aa:ef:92:
69:28:cd:65:93:f0:0f:c6:7b:8b:79:2b:6f:ca:c4:13:36:0d:
61:1a:e3:67:4a:f0:91:c0:c8:69:89:62:4b:2f:9c:47:c1:f2:
a0:7c:f2:75:61:64:85:a8:3b:4e:10:de:0b:73:43:88:e9:03:
ae:e8:80:db:b0:46:91:ad:d8:63:89:49:1e:45:8d:b3:5b:64:
24:9f:20:90:be:78:5f:8e:4e:2b:b6:75:a9:ee:7b:5a:19:62:
70:37:87:15:fe:ee:1c:fe:13:ee:3f:95:19:c7:34:34:a0:93:
78:8c:df:83:01:0a:0c:e2:04:96:10:8e:13:35:d7:61:11:6d:
3d:c4:fd:90:18:c5:d3:28:60:a1:78:64:c3:22:11:e7:6a:20:
7d:ac:10:05:c1:15:eb:7c:12:99:9d:db:ca:c1:7a:90:4c:05:
2a:f5:34:f2:8b:bd:77:4b:02:06:a0:36:c0:3d:75:c0:15:89:
20:04:b6:cf:1d:5f:4a:a6:2d:9b:34:98:97:53:32:83:70:cb:
6a:91:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:28:25 2026 by rpki-client