Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa
File: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (raw, json)
Hash identifier: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=
Subject key identifier: C3:42:D5:A1:9F:EE:62:20:BB:B6:80:D7:9C:AB:71:BC:70:DD:E0:9A
Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial: 019D8D606E5198758F99872EEDDCE490A1A0
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa
Signing time: Tue 14 Apr 2026 19:03:20 +0000
ROA not before: Tue 14 Apr 2026 19:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200993
IP address blocks: 2a12:4141::/32 maxlen: 32
2a12:4141::/48 maxlen: 48
2a12:4141:fa00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:60:6e:51:98:75:8f:99:87:2e:ed:dc:e4:90:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Validity
Not Before: Apr 14 19:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c342d5a19fee6220bbb680d79cab71bc70dde09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:21:a8:0b:66:48:56:77:52:2a:5a:51:74:
18:29:86:a4:e4:1c:87:4f:cf:09:77:b9:0b:ec:88:
bd:62:a8:b5:28:54:e5:dd:b6:9f:7b:3a:12:bd:2b:
f5:10:0c:bb:3d:05:5c:c2:9a:73:bc:4e:c0:1e:05:
59:0d:4a:08:d4:ed:be:50:48:a4:98:9b:2e:fe:71:
3a:c5:4b:82:29:c8:33:5b:42:e2:b2:6b:8c:62:c5:
7c:84:07:e2:49:14:d9:bb:b7:19:a3:5d:72:a3:6b:
8b:56:0b:63:39:1a:db:cc:31:ef:23:e2:17:80:98:
ea:b6:68:71:c4:47:9a:03:f9:b1:a2:67:08:53:a6:
54:b8:73:a6:d1:b8:82:78:2e:03:a1:92:eb:26:ea:
ad:47:c5:f8:da:a9:b6:8a:98:5a:db:6d:62:a8:89:
d1:94:d5:b0:56:42:5c:8d:4f:d1:b1:9e:63:84:99:
b4:b2:ef:e7:93:7f:38:be:3e:e7:a6:82:83:8a:69:
fc:a6:b1:e9:16:53:3f:c8:ab:41:65:88:a3:ba:5a:
5c:2c:5d:ae:26:0e:28:32:7b:0a:fc:c1:6e:b8:d0:
a5:e6:6a:de:7c:9c:af:50:22:b4:10:1f:92:d8:28:
db:73:4a:45:88:34:e5:3c:76:26:fa:b8:0e:86:7f:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:D5:A1:9F:EE:62:20:BB:B6:80:D7:9C:AB:71:BC:70:DD:E0:9A
X509v3 Authority Key Identifier:
keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4141::/32
Signature Algorithm: sha256WithRSAEncryption
2f:4c:d1:57:17:bc:09:f8:d5:79:1e:1c:8e:c5:59:dc:62:de:
b4:d7:aa:b0:9c:b1:31:d9:62:c4:46:c2:b6:4b:75:be:d1:11:
7a:35:af:cb:50:44:5a:24:ec:7c:25:e6:5a:bb:5e:ca:54:87:
ac:e6:17:4b:d9:ed:b6:5a:54:db:45:c1:c5:80:4a:93:d4:68:
12:f3:8c:ca:1c:55:a6:ca:29:27:3f:ae:24:d9:2c:f6:9e:a2:
f8:52:e4:9d:bd:a2:6f:6f:f4:7a:64:98:2b:8e:92:13:ab:42:
51:a3:ac:97:41:ab:86:80:4f:85:3b:61:2a:00:90:35:da:f3:
53:12:a4:18:83:2d:a8:87:95:7f:01:03:9f:10:db:64:89:53:
fc:27:af:66:5e:38:9c:43:8e:9d:a1:92:df:66:d9:37:59:f9:
2f:c2:d5:93:46:92:63:ce:78:72:1c:0c:39:af:84:ca:50:1b:
76:84:16:00:2a:ef:99:a8:41:11:bf:6c:b7:6f:d4:e6:c3:5c:
29:14:b2:4b:c4:ca:13:62:9b:4c:f8:58:66:73:5b:d8:79:a9:
4b:ff:8a:28:0a:ad:7b:c8:8a:e3:9d:f2:01:c4:3d:1e:05:82:
c4:8f:5a:0a:d0:e9:60:27:fb:04:97:31:1d:f5:be:e2:00:79:
78:64:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:59 2026 by rpki-client