Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/W9owpqcA8Ky_UkMpYTsSDjecJMU.roa
File: W9owpqcA8Ky_UkMpYTsSDjecJMU.roa (raw, json)
Hash identifier: 4m0qKyQs2oTTQD8xTXHhJx+IhKz/9ELu9P/CqiTewAM=
Subject key identifier: 5B:DA:30:A6:A7:00:F0:AC:BF:52:43:29:61:3B:12:0E:37:9C:24:C5
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019C4C64FFFF9EE183D3A1A39122F757FD43
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/W9owpqcA8Ky_UkMpYTsSDjecJMU.roa
Signing time: Wed 11 Feb 2026 11:10:13 +0000
ROA not before: Wed 11 Feb 2026 11:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51200
IP address blocks: 83.219.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:64:ff:ff:9e:e1:83:d3:a1:a3:91:22:f7:57:fd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Feb 11 11:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bda30a6a700f0acbf524329613b120e379c24c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:f6:97:a9:b3:e9:ad:67:24:61:14:96:3b:
c9:2c:8c:c3:9a:5f:bd:88:f7:ec:1d:0d:ee:9a:06:
ae:8b:c0:96:f1:f0:f4:ec:6e:8f:24:2e:d1:1a:62:
a1:f3:13:46:4b:04:1a:c1:58:c3:23:66:0e:f8:37:
35:d0:b4:d2:1c:ae:63:c6:52:90:af:e0:a0:6d:1d:
f9:b6:f0:57:f2:2a:1e:da:6c:ef:c2:6b:cd:14:7b:
b3:8a:b8:2f:da:99:1c:5c:9a:ef:18:b6:26:5e:b3:
93:93:b2:84:0e:b3:71:90:52:24:07:da:cd:16:a1:
1e:b7:a6:bd:cd:11:fe:2c:da:6b:ac:3d:e6:74:63:
4d:3c:34:18:e6:e0:36:34:18:21:8b:9d:d5:cf:79:
3e:77:67:2b:10:db:75:24:24:c0:8e:61:1e:3b:e1:
06:71:92:2a:80:ba:bc:f5:04:25:d8:85:1a:2e:01:
7c:5d:75:f3:d1:ec:21:64:37:df:78:73:e4:7a:63:
44:99:03:2e:18:25:a0:aa:c5:fa:41:d3:c5:61:83:
ed:ae:5e:01:53:30:b4:1d:62:6a:4e:2a:25:36:5f:
68:5b:5a:f7:24:8e:4e:cd:15:d1:4a:1b:2d:c7:09:
e5:bd:85:38:2d:9a:42:18:92:4c:94:40:7a:51:1f:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:30:A6:A7:00:F0:AC:BF:52:43:29:61:3B:12:0E:37:9C:24:C5
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/W9owpqcA8Ky_UkMpYTsSDjecJMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.236.0/24
Signature Algorithm: sha256WithRSAEncryption
98:74:6f:ff:76:b0:a5:c6:d6:f0:45:69:f7:07:80:94:fe:0d:
91:8b:b9:04:e9:5e:e5:68:02:cb:f6:af:c9:38:22:54:f4:8e:
a0:57:71:ae:14:74:7b:3d:56:be:b9:fe:f6:3d:3d:50:35:61:
e8:53:95:df:8c:3e:15:f8:0b:61:4e:a3:b1:f3:55:ea:e4:fb:
21:76:4c:8d:e1:75:90:9c:d1:4d:23:e5:fe:b4:ba:f9:bc:37:
fe:2d:17:0d:f6:84:0c:fb:7a:0e:fc:a4:a7:1b:5c:cf:02:01:
b1:c2:f1:12:39:bc:7e:10:0a:ac:4e:55:e0:db:71:14:40:23:
81:f0:ad:8c:b8:1c:bc:ce:49:fb:44:d1:3e:d5:3d:a2:86:07:
a8:37:86:5c:5c:58:85:91:d8:33:e5:77:37:d3:b8:79:a4:28:
ea:f5:f5:49:6b:b5:dd:9f:20:03:a6:3a:00:b6:40:9b:32:47:
ae:e9:bf:13:47:ba:6a:25:f7:9c:6e:a2:f2:b9:c8:54:68:19:
43:ca:6e:31:09:13:cd:a6:c7:65:a7:d9:0f:5f:cf:2f:9c:48:
aa:b5:05:d2:cb:14:48:59:ac:8f:7f:3b:a4:47:7c:b5:4e:89:
0e:ea:df:14:94:e4:0f:ab:c1:66:3b:02:f6:3c:ee:79:dc:c0:
9f:0c:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:30:57 2026 by rpki-client