Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/wMIGg_895xsUud_tObIdM45E8XQ.roa
File: wMIGg_895xsUud_tObIdM45E8XQ.roa (raw, json)
Hash identifier: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=
Subject key identifier: C0:C2:06:83:FF:3D:E7:1B:14:B9:DF:ED:39:B2:1D:33:8E:44:F1:74
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019D96A1D211A0A323781B60C0E3C4E06031
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/wMIGg_895xsUud_tObIdM45E8XQ.roa
Signing time: Thu 16 Apr 2026 14:11:20 +0000
ROA not before: Thu 16 Apr 2026 14:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202799
IP address blocks: 72.56.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:a1:d2:11:a0:a3:23:78:1b:60:c0:e3:c4:e0:60:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Apr 16 14:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0c20683ff3de71b14b9dfed39b21d338e44f174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:39:58:75:94:54:a5:35:9a:62:ef:a7:d5:45:
b6:40:d2:46:94:65:5d:5f:7c:f2:13:62:0a:0d:50:
3d:55:7c:93:86:f3:c0:11:e3:58:5b:0c:35:5e:31:
47:4e:f3:dc:99:66:3b:f0:a1:ee:f1:36:1c:7c:68:
9b:5b:35:34:3a:47:e3:2d:75:dc:fd:9c:13:db:da:
60:8b:f8:5f:24:31:6a:72:16:e2:62:8c:92:67:28:
1a:da:6a:f3:93:ea:9f:29:5a:45:42:fe:37:a1:93:
89:e0:10:fb:22:6e:b5:f8:a1:ef:4a:28:9d:10:4b:
16:54:52:74:04:91:8a:ab:80:9f:01:00:b9:27:77:
e5:67:78:61:53:a6:43:47:ad:6f:7c:bb:2b:46:58:
f0:eb:37:1d:b6:bc:df:ab:ee:86:65:70:07:fb:79:
fe:30:0d:46:08:e2:2a:d2:07:79:a4:38:06:6f:01:
44:60:32:35:83:d4:d0:02:0a:0a:28:8a:e7:f3:86:
5b:6c:14:f3:76:d8:ad:f1:5d:bc:0e:c5:3c:00:a8:
1a:30:c9:a0:3d:81:db:7b:ba:18:3c:d2:3e:30:59:
ea:26:98:b8:74:82:e2:40:35:07:22:69:e8:dc:43:
16:c3:d1:6f:57:3b:90:86:f6:7f:f5:0b:c6:1f:8f:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C2:06:83:FF:3D:E7:1B:14:B9:DF:ED:39:B2:1D:33:8E:44:F1:74
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/wMIGg_895xsUud_tObIdM45E8XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.54.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ec:7a:75:15:67:4e:cd:ee:ad:d5:fd:fd:fb:11:89:44:e4:
d7:33:39:a4:4d:d7:d6:e8:50:b2:9b:d1:d1:ff:9c:74:cd:e4:
23:44:4f:68:13:7d:01:2a:9c:d4:a1:09:a2:bd:e4:ed:95:61:
00:06:c2:f6:13:7e:b6:de:a9:2e:3f:61:e1:8b:fc:0c:f5:9b:
1e:8d:1a:c4:c1:7a:7c:50:88:7f:c8:fc:7b:0b:2f:e2:90:97:
02:52:81:46:58:20:98:cb:85:10:fa:b5:de:51:63:08:6a:59:
93:ed:1f:bc:10:43:ec:b0:b9:3f:76:23:7d:36:e7:cf:f8:f9:
de:d7:25:ed:49:27:c3:15:c8:91:31:8a:74:e6:51:b7:4a:5d:
a8:40:57:77:cb:c9:c3:a3:a8:6d:f1:9d:48:df:e9:35:8f:76:
3a:79:6b:2d:0e:7d:20:2c:8d:3a:c2:82:41:07:9e:d9:5f:c1:
35:23:1d:42:de:a0:39:a3:3f:8b:84:82:4d:a0:b6:00:4b:22:
63:19:df:f9:3f:2a:b5:14:dd:57:1e:75:40:f7:71:a5:33:f9:
37:6c:ed:75:4f:c7:51:7b:8d:ef:54:22:bc:2a:1a:1a:75:9c:
f5:46:f3:02:21:67:43:78:b8:f4:e6:b3:6f:7d:92:72:23:d5:
42:48:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:14 2026 by rpki-client