Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa
File: W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa (raw, json)
Hash identifier: ooVMUa7c7GGovMJnl3xX70044O30NEuriA3liyRtiuM=
Subject key identifier: 5B:E1:3A:47:08:88:97:05:4D:E7:59:D0:2F:3D:19:E9:40:E1:88:2C
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A456CF5B56729A760162A74C2DF33825
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa
Signing time: Tue 15 Sep 2026 09:12:27 +0000
ROA not before: Tue 15 Sep 2026 09:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56729
IP address blocks: 89.40.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:56:cf:5b:56:72:9a:76:01:62:a7:4c:2d:f3:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be13a47088897054de759d02f3d19e940e1882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:44:f2:1e:99:0b:b5:40:08:fb:64:b5:0f:
cd:39:86:21:a6:b0:5c:66:fb:f0:7a:71:28:b6:90:
87:4a:e0:97:14:48:b5:98:b3:3f:03:c2:ed:6e:d7:
3a:ba:a9:18:2d:64:5d:9c:01:63:9b:cf:2b:1b:2d:
ab:8a:97:fc:a4:07:6f:2b:89:95:4b:56:16:aa:a0:
8e:f4:1f:e6:50:48:0f:e5:7e:9d:24:08:c6:b0:e6:
2b:d9:e3:78:b6:26:36:d8:ba:66:63:e5:15:1c:da:
d4:64:53:80:37:70:61:28:f1:b7:9c:d9:f4:a2:b4:
7e:df:72:02:bd:97:85:12:96:a8:10:02:fb:7d:b9:
62:6f:4b:c4:89:ce:c6:33:37:42:b9:51:1c:b9:70:
76:c1:e6:48:7c:4b:7f:2d:46:e7:11:17:84:f9:c3:
9e:3f:f8:82:cf:60:95:38:65:ba:a8:04:e1:d3:5e:
67:97:3e:ed:f1:98:8d:d3:8e:a7:b7:86:c0:aa:0f:
46:dd:61:5e:3f:e4:38:f9:32:e3:be:eb:8c:6a:37:
49:e7:43:e9:ca:f8:dc:71:7b:18:fe:f1:29:53:51:
1f:4e:69:2c:88:6e:df:cd:38:03:0c:d6:6f:bc:72:
8a:05:9c:dc:32:a2:9b:60:cb:03:9b:e3:51:a1:3a:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:3A:47:08:88:97:05:4D:E7:59:D0:2F:3D:19:E9:40:E1:88:2C
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/W-E6RwiIlwVN51nQLz0Z6UDhiCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:cb:eb:f6:1a:05:68:55:06:f1:5d:cf:43:2d:a5:d8:2e:0d:
ee:51:67:9c:76:a1:26:c5:1a:26:0b:7d:b4:44:fb:75:fd:2b:
07:08:37:0c:ab:ac:aa:6b:3f:28:e4:1f:5c:8c:bc:dd:49:00:
11:fd:7a:d9:f1:d2:19:6b:53:5f:00:cb:fb:b0:37:7d:23:0b:
af:d7:95:c9:4e:f6:10:f3:f2:ff:62:82:7b:fd:cd:88:4b:a6:
ef:75:2b:c2:74:30:ab:3d:1e:64:ff:b8:4b:96:e6:f2:32:b2:
d1:ee:62:ef:1f:3e:e2:44:fa:59:87:2b:a8:e8:4e:01:25:fc:
fc:af:46:4d:c5:64:ac:6f:79:bb:a5:bb:8f:f8:72:69:d4:e1:
36:96:e3:39:d8:37:3e:09:09:95:56:0d:26:0b:7b:bb:d3:bd:
5c:ed:df:47:62:c0:55:df:15:60:9c:59:97:ce:a6:b9:e2:17:
62:ef:c7:fe:e3:c7:53:5d:3b:93:14:d9:b5:ef:7a:c6:19:f4:
8b:52:72:8e:bf:9f:e8:28:a8:ed:71:0d:81:a6:ed:c9:ac:00:
7e:fd:05:52:1e:c2:73:e6:28:64:f4:16:48:7d:9b:97:30:53:
9f:31:11:d3:e6:a5:55:29:24:fa:bd:e1:69:76:0d:20:0a:37:
5e:78:b9:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCkVs9bVnKadgFip0wt8zglMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWUyN2ZmODg0ZDFmZjdmNDdhYmQwMDUwZWQxMGUwMWVk
Y2VkZmIwHhcNMjYwOTE1MDkxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmUxM2E0NzA4ODg5NzA1NGRlNzU5ZDAyZjNkMTllOTQwZTE4ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsihE8h6ZC7VACPtktQ/NOYYhprBc
ZvvwenEotpCHSuCXFEi1mLM/A8Ltbtc6uqkYLWRdnAFjm88rGy2ripf8pAdvK4mV
S1YWqqCO9B/mUEgP5X6dJAjGsOYr2eN4tiY22LpmY+UVHNrUZFOAN3BhKPG3nNn0
orR+33ICvZeFEpaoEAL7fblib0vEic7GMzdCuVEcuXB2weZIfEt/LUbnEReE+cOe
P/iCz2CVOGW6qATh015nlz7t8ZiN046nt4bAqg9G3WFeP+Q4+TLjvuuMajdJ50Pp
yvjccXsY/vEpU1EfTmksiG7fzTgDDNZvvHKKBZzcMqKbYMsDm+NRoTro5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFvhOkcIiJcFTedZ0C89GelA4YgsMB8GA1UdIwQY
MBaAFK+eJ/+ITR/39Hq9AFDtEOAe3O37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMt
ZDI4NmRjYjMwY2QyLzEvVy1FNlJ3aUlsd1ZONTFuUUx6MFo2VURoaUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMtZDI4NmRjYjMwY2Qy
LzEvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWShgMA0G
CSqGSIb3DQEBCwUAA4IBAQA8y+v2GgVoVQbxXc9DLaXYLg3uUWecdqEmxRomC320
RPt1/SsHCDcMq6yqaz8o5B9cjLzdSQAR/XrZ8dIZa1NfAMv7sDd9Iwuv15XJTvYQ
8/L/YoJ7/c2IS6bvdSvCdDCrPR5k/7hLlubyMrLR7mLvHz7iRPpZhyuo6E4BJfz8
r0ZNxWSsb3m7pbuP+HJp1OE2luM52Dc+CQmVVg0mC3u7071c7d9HYsBV3xVgnFmX
zqa54hdi78f+48dTXTuTFNm173rGGfSLUnKOv5/oKKjtcQ2Bpu3JrAB+/QVSHsJz
5ihk9BZIfZuXMFOfMRHT5qVVKST6veFpdg0gCjdeeLmd
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:47:56 2026 by rpki-client