Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa
File: NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa (raw, json)
Hash identifier: y/S2uulJMpPFuOlueA/dlGtJQcnVeWIduCeRXiRzsbs=
Subject key identifier: 35:61:D6:E6:AF:EA:86:0E:92:95:6D:CE:1B:D9:77:93:7A:F8:3F:7C
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01A0C2800EE103D281502456BC6632DAF6BF
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa
Signing time: Mon 21 Sep 2026 05:46:07 +0000
ROA not before: Mon 21 Sep 2026 05:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201017
IP address blocks: 145.219.6.0/24 maxlen: 24
2a04:b0c0:30::/47 maxlen: 47
2a04:b0c0:30::/48 maxlen: 48
2a04:b0c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:80:0e:e1:03:d2:81:50:24:56:bc:66:32:da:f6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Sep 21 05:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3561d6e6afea860e92956dce1bd977937af83f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:e2:21:b8:cf:ef:72:66:16:de:49:28:19:
2c:f8:d7:a7:99:4f:6b:d7:89:b4:8a:29:0b:1b:ae:
91:8d:d0:4e:4d:da:b2:49:d5:9b:25:a5:08:cf:e3:
26:ac:40:fc:d9:ec:c0:6f:e6:6b:c8:bf:82:df:00:
ae:88:a2:15:ef:c0:3e:2f:68:5d:ee:9d:67:7a:22:
f3:be:ab:e9:33:3e:6d:be:e7:28:d5:c0:83:1a:78:
64:83:47:0c:ff:19:39:fd:fb:5a:0a:87:3f:ab:cb:
36:f4:f1:d7:50:51:fe:9f:1b:6b:ab:fa:88:74:da:
08:1b:a2:0c:77:b6:d1:d6:71:5d:ae:59:92:d5:c2:
5a:1b:16:b2:fd:ad:39:80:b3:74:13:97:96:b8:c0:
c2:cd:4d:62:49:68:ea:9f:72:29:f2:1d:90:19:7f:
ca:31:e3:f0:63:e4:09:2e:60:b3:44:ae:57:f1:d1:
95:f4:bf:49:c1:f7:08:00:8e:d6:a0:52:88:14:a3:
ca:2d:7c:e9:8c:3c:cc:ab:d8:de:c1:8f:97:f5:72:
bf:d4:ac:53:f9:69:71:cf:72:d2:e3:76:90:4d:1e:
5e:82:74:b7:9e:03:49:3d:1f:ad:1b:95:64:0b:dc:
a1:76:5e:d7:78:28:28:f2:f2:77:fa:73:6d:69:10:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:D6:E6:AF:EA:86:0E:92:95:6D:CE:1B:D9:77:93:7A:F8:3F:7C
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/NWHW5q_qhg6SlW3OG9l3k3r4P3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.6.0/24
IPv6:
2a04:b0c0:30::/47
Signature Algorithm: sha256WithRSAEncryption
0e:0e:fa:ef:33:5c:2b:03:15:f7:33:27:c6:ce:04:5a:86:b4:
13:f2:36:91:e0:5a:64:e1:eb:6a:cb:9f:a0:b7:bf:6e:ef:bd:
24:71:5f:db:f4:b9:f7:29:9c:07:bb:7c:0f:e3:10:10:ae:14:
f8:2a:3d:15:f9:34:05:ba:22:4f:f6:9a:a7:6b:e9:b5:ed:a6:
47:e1:ab:f1:df:70:1c:5a:56:48:f9:79:c5:cb:e6:9b:f3:49:
65:ff:92:5b:d6:d0:96:6b:e1:71:c9:ac:40:a3:16:51:95:1b:
8b:81:c0:69:f4:ac:6b:0a:df:df:c3:94:67:9f:0b:c7:33:2a:
ca:35:8e:57:c7:57:bf:4e:8b:14:82:18:6d:69:6f:10:33:b6:
a8:b1:01:4c:0b:5c:a5:c4:25:52:4e:ba:e3:6b:07:44:8c:88:
7f:0a:d8:e6:66:15:07:d6:f7:26:f5:e7:a5:c6:0b:3e:19:f5:
80:dc:ff:f1:b9:15:f7:13:ae:c3:0a:dc:d7:42:06:e8:30:25:
14:51:92:8d:94:e6:96:5f:7f:90:39:51:a6:39:42:e6:ba:8a:
f5:ee:1e:75:8e:48:af:e5:19:37:62:44:02:09:6a:7e:cb:55:
5d:f5:49:57:1d:e8:7c:78:70:f7:71:d5:cd:28:2b:d4:72:af:
dd:28:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:36:46 2026 by rpki-client