Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa
File: 1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa (raw, json)
Hash identifier: OR0K6ja0+6tjObcYpglQ6VtaBnvWmTTk4GVSghcFZtk=
Subject key identifier: F9:68:F4:0F:50:93:47:EB:42:5C:01:46:D7:01:30:94:86:61:BC:5D
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A0AA42EB2B8BF023A60C9EBAAC58C49771
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa
Signing time: Wed 16 Sep 2026 12:48:27 +0000
ROA not before: Wed 16 Sep 2026 12:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219329
IP address blocks: 84.55.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:42:eb:2b:8b:f0:23:a6:0c:9e:ba:ac:58:c4:97:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Sep 16 12:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f968f40f509347eb425c0146d70130948661bc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:e2:e0:3a:9d:50:d3:e4:fc:84:58:03:86:
d1:a1:67:66:95:2e:c7:c0:89:79:d5:0c:9f:dd:c8:
9f:af:94:af:23:bd:9a:a4:f5:9e:97:d3:e9:78:1d:
26:76:f8:5d:3f:96:62:c8:e8:d3:bb:5b:9f:49:2c:
b2:f1:18:a5:8b:b6:38:66:82:02:95:67:23:70:e8:
69:2f:3a:b5:2e:28:82:2e:3d:c1:05:84:a9:a6:72:
c2:1c:dd:09:e4:ef:8b:36:db:3d:b5:bb:d6:cb:fd:
f8:a9:8b:c9:0c:c4:ef:ad:22:4e:79:61:4d:01:92:
d8:61:93:d9:e9:08:36:ef:4a:5a:8a:83:00:9f:1b:
9d:4e:7a:b3:98:aa:b4:c7:85:2e:de:24:12:9e:53:
b2:f6:b0:48:c4:fa:a6:6f:ed:2a:9a:4b:98:cc:68:
9e:7f:89:ff:84:2f:6b:e2:98:a0:4f:0c:94:8e:dc:
20:66:68:0a:df:aa:b3:c6:a2:79:45:34:d9:07:84:
70:00:c8:a3:fe:92:51:8f:e1:97:77:dd:eb:f0:bb:
9d:92:0d:ba:3f:0f:08:05:4a:fc:5e:88:74:0b:c5:
6c:12:30:e6:9e:3e:4d:1f:bf:40:bf:21:f6:17:57:
e3:4f:c4:45:d8:59:c5:8f:8e:cd:49:dc:d2:7e:cd:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:F4:0F:50:93:47:EB:42:5C:01:46:D7:01:30:94:86:61:BC:5D
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/1-Wj0D1CTR-tCXAFG1wEwlIZhvF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:56:c9:f7:ae:41:e8:5a:ac:a6:eb:e0:e2:67:7a:03:6e:9a:
31:2d:f8:60:ad:ef:6a:02:78:55:50:a2:dd:a1:8d:f6:0d:d9:
76:e8:97:16:f4:8d:00:93:63:81:c4:41:56:11:f6:0f:36:56:
fb:cb:c6:cc:73:b3:60:b0:44:0d:af:ef:41:12:83:f5:ba:4d:
5b:74:d1:89:62:b1:26:b8:0c:b1:2a:b6:f4:7b:c2:b6:1c:a6:
5b:3c:89:fd:05:8b:63:2f:ab:1d:86:a0:c0:50:ad:e1:73:56:
07:0d:bd:cc:5d:6f:e3:08:8d:fc:c3:4c:84:74:02:2a:40:31:
2e:be:8c:39:b5:a8:7d:a0:9a:3a:1a:b8:52:05:ea:b7:f2:fb:
ab:df:19:7a:95:29:09:96:9f:79:fb:5f:30:ff:76:b4:ea:15:
dd:34:48:99:df:a5:dc:80:ad:8f:af:2f:e4:38:94:88:11:92:
d0:f6:82:a8:9c:1d:d8:e6:3e:d2:c7:1f:75:7f:d1:f1:0f:e3:
36:4f:e5:a7:a5:37:35:55:8d:0d:b6:5e:c1:88:4c:a0:bc:0d:
eb:a7:39:4d:3d:fc:cc:a0:87:ef:2f:ed:40:d4:76:9c:a1:57:
34:8b:e1:e6:94:2a:47:3a:59:ab:94:81:ac:74:a8:0f:65:ef:
44:92:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:45 2026 by rpki-client