Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/o-WKTQa_X-7__zCzj6J6YkZ_raw.roa
File: o-WKTQa_X-7__zCzj6J6YkZ_raw.roa (raw, json)
Hash identifier: 1ouUgQsFwXp8X5fRClo+nxWAfb/FxjwTOeZILI6XYaY=
Subject key identifier: A3:E5:8A:4D:06:BF:5F:EE:FF:FF:30:B3:8F:A2:7A:62:46:7F:AD:AC
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A0D0B2A56C7EF5B4A26EAA9197F1CBE05F
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/o-WKTQa_X-7__zCzj6J6YkZ_raw.roa
Signing time: Wed 23 Sep 2026 23:56:03 +0000
ROA not before: Wed 23 Sep 2026 23:56:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 94.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b2:a5:6c:7e:f5:b4:a2:6e:aa:91:97:f1:cb:e0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 23 23:56:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3e58a4d06bf5feeffff30b38fa27a62467fadac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:7e:83:4d:af:63:b1:51:2f:05:0b:dc:04:
95:e2:be:ad:e6:b4:76:44:7e:2b:00:91:1b:11:69:
1e:73:d2:65:d6:71:d3:1a:fe:c8:a5:90:9d:7c:ff:
4a:35:6d:93:ea:b7:24:02:6c:b1:09:6f:22:b6:c3:
8f:d1:ed:cb:e9:c4:62:8c:7b:aa:da:e8:71:f8:b0:
aa:82:70:f5:df:f6:eb:c7:b4:c1:7e:de:6e:22:88:
2b:80:b2:94:cb:a6:3b:ca:7f:96:68:6a:9e:30:ae:
8b:96:45:f2:fc:f8:2a:b6:30:70:37:e6:38:8f:b2:
d5:a0:b2:cf:c8:f8:8c:d6:f4:0c:a6:cc:4a:29:fd:
e0:5b:af:5f:6d:21:41:ca:ca:d2:f3:b4:a0:c0:dc:
de:17:51:8e:70:c3:8c:3a:2c:8d:ee:c3:a2:35:76:
5b:87:d6:24:55:ac:3d:c4:75:47:2c:4b:21:8e:a2:
01:ca:cf:57:66:d0:b7:e1:93:79:ee:b1:50:ae:fb:
be:69:65:d8:d5:61:3b:fd:ab:34:61:a8:de:cb:38:
c8:ae:57:fe:72:79:4b:0d:64:9b:10:89:56:c0:7e:
cd:78:b3:73:3f:11:eb:aa:09:aa:39:da:5f:03:7e:
ee:f4:a2:95:a7:f5:ce:92:db:5a:fa:cb:be:79:3a:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:8A:4D:06:BF:5F:EE:FF:FF:30:B3:8F:A2:7A:62:46:7F:AD:AC
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/o-WKTQa_X-7__zCzj6J6YkZ_raw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
02:7b:35:a6:28:36:66:29:e9:b0:10:12:10:47:87:94:28:ed:
1f:73:26:8a:79:8c:1d:0a:18:75:73:77:2b:67:1c:92:6d:55:
86:eb:09:eb:61:d9:b9:dd:8b:32:4c:4b:16:41:8b:c6:33:ac:
89:10:5c:82:73:4e:6a:75:8f:0e:6a:08:75:e0:90:72:3f:e9:
23:fb:80:2d:c4:e8:f2:61:73:19:0e:85:ca:22:c6:7b:ad:26:
48:d8:04:7e:97:60:19:ff:15:60:59:34:ad:23:5e:12:b5:e1:
54:a1:8b:7c:83:85:9d:38:71:f6:a5:69:2a:b4:75:f1:7f:e2:
b8:51:c6:a9:ae:46:1c:fa:6d:45:f5:40:29:d0:0a:a3:93:bd:
f0:fa:9b:0c:a9:95:a6:ef:0c:b4:40:45:d1:24:60:06:0c:21:
40:77:48:78:ec:81:80:a3:c1:83:c6:8b:67:3f:04:89:9d:99:
5a:f0:c1:36:0f:00:63:fa:88:07:09:a7:a4:f7:e9:f0:b2:a7:
1a:bc:b8:48:67:8d:e1:70:c8:f7:5f:a0:29:5c:a3:fe:41:fc:
68:f0:62:ea:e8:88:eb:df:52:85:e3:20:31:eb:ec:bb:6e:77:
56:ec:ff:de:42:43:b8:db:1d:b9:dc:4a:4a:aa:13:c3:c5:83:
5b:78:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:26:33 2026 by rpki-client