Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wj9Ib4OizVTXrCbWN-aBN1W5wHE.roa
File: Wj9Ib4OizVTXrCbWN-aBN1W5wHE.roa (raw, json)
Hash identifier: 8Cwo/1uC+px9sCpt1M75vFAfrZaYXghK0Fjy311QISA=
Subject key identifier: 5A:3F:48:6F:83:A2:CD:54:D7:AC:26:D6:37:E6:81:37:55:B9:C0:71
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C89C1D5049F7A3317D5A6400248E553FF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wj9Ib4OizVTXrCbWN-aBN1W5wHE.roa
Signing time: Mon 23 Feb 2026 09:08:27 +0000
ROA not before: Mon 23 Feb 2026 09:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152892
IP address blocks: 2a0f:3d80:3::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a13:8c87::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:c1:d5:04:9f:7a:33:17:d5:a6:40:02:48:e5:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 09:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a3f486f83a2cd54d7ac26d637e6813755b9c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:0d:d0:9d:48:36:cb:0f:0c:c4:0e:6d:46:
25:a4:44:32:2c:e1:98:03:b3:61:00:6a:19:ab:87:
99:77:cc:a9:8a:15:f0:0f:49:32:7a:26:3d:44:21:
a7:76:94:13:fd:14:94:95:1f:1c:65:53:d9:29:d8:
20:d7:1a:9a:96:42:0a:8a:d5:1c:4f:74:4d:6e:2b:
67:7d:9e:71:e1:40:5f:a5:79:e5:c0:db:31:cf:c6:
7f:8d:60:e8:9e:42:c5:83:57:cd:19:40:5b:5f:1a:
de:ff:6a:3f:b5:2a:42:4f:95:32:17:03:b9:f8:ce:
88:ff:43:d6:8c:0d:1c:37:4e:d1:80:dc:a2:80:33:
d7:6a:e3:b6:23:e7:90:36:9c:14:ff:da:94:7b:1f:
2e:e8:44:89:bf:db:d2:a1:08:08:f6:98:c9:95:77:
c2:1d:9c:4b:ed:eb:82:92:9c:c9:de:62:6b:b7:6c:
e6:53:84:43:d8:8e:be:5f:03:50:04:93:c5:9d:2c:
fa:b8:86:20:bc:6d:2b:37:e3:8f:45:77:70:8b:ac:
f3:62:88:de:bc:bd:61:2c:4e:01:8f:9a:52:89:18:
07:8f:e8:97:d5:46:b2:60:20:50:bf:30:e6:0b:4e:
dc:6d:ca:a1:bd:9d:35:8f:4e:b7:6b:a9:63:a9:84:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:48:6F:83:A2:CD:54:D7:AC:26:D6:37:E6:81:37:55:B9:C0:71
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wj9Ib4OizVTXrCbWN-aBN1W5wHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d80:3::/48
2a0f:3d80:123::/48
2a13:8c87::/32
Signature Algorithm: sha256WithRSAEncryption
7d:26:25:53:7d:64:a7:04:2f:9f:74:05:6b:6f:cd:a6:2a:43:
2e:0d:31:3a:74:3c:ab:e0:a2:23:d9:8c:8e:86:f2:cf:2c:40:
67:a9:70:45:e7:ff:93:f9:41:94:a3:ee:56:5c:f0:32:97:fd:
e2:f0:54:98:7e:66:30:01:fb:b4:51:65:df:7d:a0:bf:cc:dc:
09:ef:6a:86:27:46:dd:69:c0:01:63:c5:1e:30:0d:05:9d:41:
68:49:b4:68:dc:d6:d0:a2:10:08:ce:e4:62:21:ab:4b:33:98:
47:1e:56:9d:0a:b7:6f:e6:ba:28:df:15:19:d2:31:0b:7a:36:
2e:2b:51:1f:fe:75:9e:c0:4c:4b:c4:b9:53:bd:fa:ca:6c:ea:
2b:4f:d2:a6:3f:0b:9e:ae:36:d5:1e:48:12:d7:f5:ac:d0:3a:
26:00:98:fa:df:37:df:62:ce:d6:27:72:72:b1:7a:66:00:74:
62:64:14:7b:b0:ec:a9:04:a0:20:6f:60:3a:e8:ae:53:44:a0:
56:06:25:a6:b0:00:30:2e:b4:03:21:2f:b0:0b:2f:52:ac:3d:
f9:24:b9:79:d6:60:f0:b3:8f:0f:f8:63:02:59:f8:26:68:fa:
12:df:e2:8f:4b:bf:fa:32:5f:ca:5b:6b:f0:25:5a:d7:49:fd:
87:9c:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:34:08 2026 by rpki-client