Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/w0O-kMgGBUcDGLexAQgVYIHLcjo.roa
File: w0O-kMgGBUcDGLexAQgVYIHLcjo.roa (raw, json)
Hash identifier: TRXl9gaFoL4wFP5f4b00/HYgYwNAPKtnEfhWKhcYOTs=
Subject key identifier: C3:43:BE:90:C8:06:05:47:03:18:B7:B1:01:08:15:60:81:CB:72:3A
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A458A2BB3D2F2C9EA4DA646618D26837
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/w0O-kMgGBUcDGLexAQgVYIHLcjo.roa
Signing time: Tue 15 Sep 2026 09:14:27 +0000
ROA not before: Tue 15 Sep 2026 09:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202744
IP address blocks: 94.177.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:58:a2:bb:3d:2f:2c:9e:a4:da:64:66:18:d2:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c343be90c80605470318b7b10108156081cb723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:70:d9:a0:f9:8a:7d:da:f0:ec:53:6d:87:
2e:94:61:95:5b:91:2e:fc:2c:df:49:46:4c:b2:8c:
cc:c2:18:a8:3c:a1:37:01:e1:6e:3b:52:a7:1d:76:
9e:ae:72:fc:aa:c6:e9:97:bf:08:2d:c5:db:db:38:
a3:92:5a:a1:02:0a:2e:24:a7:a9:5e:59:60:8e:e2:
0f:8e:44:d0:4c:a9:20:2b:06:3d:6c:91:23:6e:fd:
d8:21:7f:e0:f2:e1:4f:f5:1b:5e:e6:c7:18:35:ba:
b0:30:41:84:1a:9b:7c:94:e9:2c:f0:bb:02:9f:d6:
89:14:6f:6d:23:46:d7:a4:4b:d1:7f:62:28:3d:60:
c2:d9:b5:28:4a:8a:17:6e:e3:39:26:75:25:82:d9:
94:b3:68:4e:ba:e8:34:83:2a:d4:4c:a3:41:b6:c4:
7c:83:a6:5d:91:f2:9a:1f:fd:d2:73:db:4e:53:47:
c7:22:6c:60:47:41:7b:9e:1b:2a:12:e2:5d:86:5e:
b9:91:e7:9c:fd:c0:a0:de:1b:c8:79:d5:f2:14:76:
ec:ba:ad:73:86:81:2c:e8:da:cb:29:72:81:f6:b9:
69:e1:4b:8e:70:19:54:5e:94:a3:1a:35:2c:7c:c8:
be:bb:bb:cb:80:78:13:4f:0c:08:f3:c5:19:89:cb:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:BE:90:C8:06:05:47:03:18:B7:B1:01:08:15:60:81:CB:72:3A
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/w0O-kMgGBUcDGLexAQgVYIHLcjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.129.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e6:32:70:89:29:9b:cd:8a:1d:3c:6a:0f:76:c1:88:cd:d8:
9e:c6:37:5d:10:96:af:46:21:b3:ce:1d:24:bf:3c:53:a0:d5:
64:6b:7c:92:47:4e:23:cb:ed:c7:9c:f3:50:93:7e:ad:31:51:
64:fd:8f:6d:29:fc:0d:6a:ce:10:f2:ef:05:4a:2b:63:e5:21:
29:23:33:6a:a9:b6:fd:47:e2:6f:fc:01:d2:52:1d:ae:99:96:
23:23:17:1c:1a:00:c2:36:8c:37:ab:48:09:94:d8:ef:5a:7c:
24:8e:e3:81:e9:4c:85:ef:e3:b6:d8:12:6b:ad:bb:01:3d:67:
c1:81:cd:ee:ae:57:f5:cd:b5:4b:eb:f6:9c:bd:c8:b9:c7:9d:
3d:ac:b2:bf:8e:75:a8:fd:b2:6a:f3:32:d4:5f:15:e6:d7:09:
d6:28:d5:d4:c2:27:04:fa:3b:a0:1a:38:09:44:b5:5d:92:e5:
13:41:c9:0e:18:80:fc:45:78:a0:0d:ac:c9:e0:d6:7b:d0:26:
6e:08:99:5f:89:e5:d9:04:0f:2e:2a:3b:20:c2:8c:12:f4:9d:
07:34:77:5d:06:f8:3c:aa:8f:dc:dd:af:98:3a:d2:ed:cf:3e:
d7:36:28:c9:16:41:ea:2b:98:1d:79:e4:1c:86:1a:d3:a9:44:
78:2c:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:57 2026 by rpki-client