Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1wCdD8VKd_ta-d63gF1G_6WBuLo.roa
File: 1wCdD8VKd_ta-d63gF1G_6WBuLo.roa (raw, json)
Hash identifier: VqRBvCXBql659V0OdnYPI3Xg3cDei7AE4x27Y8TBWRE=
Subject key identifier: D7:00:9D:0F:C5:4A:77:FB:5A:F9:DE:B7:80:5D:46:FF:A5:81:B8:BA
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C4448633A6CD82BDAE902BC6223EBEDD
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1wCdD8VKd_ta-d63gF1G_6WBuLo.roa
Signing time: Mon 21 Sep 2026 14:00:20 +0000
ROA not before: Mon 21 Sep 2026 14:00:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42296
IP address blocks: 185.240.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:86:33:a6:cd:82:bd:ae:90:2b:c6:22:3e:be:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:00:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7009d0fc54a77fb5af9deb7805d46ffa581b8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:c4:2d:82:9b:5b:8f:1b:71:7f:31:31:6b:
48:a9:72:75:34:a6:62:d3:a8:53:c9:fa:76:11:9c:
75:c1:d0:87:37:b8:0f:aa:70:7d:60:18:40:05:12:
47:f9:cb:5f:52:70:a3:22:f1:f8:8d:79:02:5e:a5:
81:bd:22:29:f7:49:26:6a:91:df:4f:f5:8c:1f:e1:
36:55:59:a1:d4:c7:47:df:ed:29:a6:77:9a:a3:8e:
ac:78:f6:72:d2:03:18:c2:f7:43:66:f2:b4:f6:3f:
e8:22:4c:c8:db:2c:01:da:2f:1d:49:17:8c:8f:ef:
6b:f5:42:b6:18:98:aa:77:65:e8:0d:e0:a2:02:4e:
77:ba:0b:8d:fd:5e:72:01:15:b8:7d:e8:28:20:af:
5a:47:d4:90:6e:32:44:6b:f7:9d:bd:48:8f:f1:1e:
25:a3:59:2e:b3:f6:3d:9f:9d:a2:ec:3b:92:ad:94:
ed:6c:51:ef:82:b8:7e:ad:a3:b1:5d:01:c6:d1:9d:
2c:52:85:62:53:96:b5:9f:87:9c:28:0e:7d:75:88:
7b:f4:0f:65:76:bb:61:dd:b8:6d:32:43:30:91:61:
f0:db:51:f5:4a:c8:0b:46:22:76:74:85:05:17:f3:
cf:f3:d1:2a:3e:d3:65:b7:6f:bf:11:66:19:2a:36:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:00:9D:0F:C5:4A:77:FB:5A:F9:DE:B7:80:5D:46:FF:A5:81:B8:BA
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1wCdD8VKd_ta-d63gF1G_6WBuLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.253.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ec:3c:47:e9:7e:d8:d3:10:c3:58:39:aa:85:95:3e:3c:a8:
d4:c1:f3:e1:85:28:00:92:fd:e4:3b:f0:33:b8:ae:b2:48:ff:
49:63:86:04:4c:5f:c8:52:06:99:69:d7:95:e1:58:e9:27:90:
78:c7:3b:b4:be:cc:37:88:e8:37:0e:8f:27:32:21:d1:69:d0:
65:82:0c:cf:4f:70:44:cb:9a:c4:bd:41:98:23:37:89:e1:cc:
0c:05:92:da:f5:94:75:d9:e3:31:bf:33:ce:5b:80:73:63:e1:
6d:a7:c4:9e:ef:62:b4:63:fc:2e:ba:0b:e4:00:32:de:ae:d9:
fb:78:1a:32:67:a2:fe:0f:70:d0:6e:b2:95:d6:68:17:fc:b2:
90:99:96:28:ca:11:19:7b:36:a3:cd:52:a1:31:1a:ad:0f:32:
d7:d8:6b:51:d6:97:38:51:2b:38:fb:bb:e1:f2:15:9c:93:6f:
d8:76:04:68:bb:ae:3c:16:dd:af:30:ee:f0:ed:2c:22:e6:44:
8b:ed:04:65:61:c9:70:e7:3d:03:be:82:63:9a:95:22:5a:c4:
4b:bc:f0:96:2a:5b:03:7c:12:d8:9f:88:61:24:83:dc:66:3c:
d8:e6:89:28:aa:75:2e:e5:cb:84:a5:1a:a4:ca:46:09:fe:d9:
f4:65:ce:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:48 2026 by rpki-client