Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/w6eclGmKjMAUjq7V9uc1FML1-2I.roa
File: w6eclGmKjMAUjq7V9uc1FML1-2I.roa (raw, json)
Hash identifier: bCyMAOYHLv+yGiUSeC+OdAVQhKwwCl26DAu4AQkhkIY=
Subject key identifier: C3:A7:9C:94:69:8A:8C:C0:14:8E:AE:D5:F6:E7:35:14:C2:F5:FB:62
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 01A04E675F05491078CC971A8DA453962380
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/w6eclGmKjMAUjq7V9uc1FML1-2I.roa
Signing time: Sat 29 Aug 2026 16:43:12 +0000
ROA not before: Sat 29 Aug 2026 16:43:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21222
IP address blocks: 193.8.16.0/20 maxlen: 20
193.8.17.0/24 maxlen: 24
193.8.21.0/24 maxlen: 24
193.8.25.0/24 maxlen: 24
193.8.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:67:5f:05:49:10:78:cc:97:1a:8d:a4:53:96:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Aug 29 16:43:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a79c94698a8cc0148eaed5f6e73514c2f5fb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:c4:6a:4e:e9:e4:7b:65:81:3f:c3:a9:7d:
00:48:35:ff:b2:bb:b0:1d:ca:df:36:a9:80:45:8f:
43:4a:74:41:f6:15:0d:45:08:ea:ef:f0:37:c4:01:
96:31:38:32:52:de:8d:29:c5:05:f7:75:25:32:17:
26:8f:8e:4d:ba:b3:05:6a:46:b2:6f:e9:1f:4c:a5:
02:76:07:d7:f9:64:fb:b8:30:f8:75:18:e8:7e:69:
df:5c:b9:98:0e:34:6d:b3:15:2c:28:fc:63:12:e1:
7e:12:58:35:20:c2:49:67:85:2e:99:7d:d5:dd:71:
82:bb:80:52:12:9b:ae:87:a4:4d:10:1b:d8:fa:19:
e2:1d:ec:06:bd:fa:eb:c5:04:83:f0:5a:06:79:49:
50:72:23:7b:44:7c:38:5c:26:8c:3e:32:3b:ca:35:
4e:a3:ad:9a:bd:0e:7f:31:f4:4e:e9:db:0f:f4:f3:
95:d2:9d:e4:41:c0:cf:b8:73:cf:dd:04:e5:3c:10:
ee:0a:14:57:3e:42:e6:f3:71:f7:47:7e:50:17:bf:
64:81:81:16:8d:bc:62:6e:06:9f:52:ae:39:ea:c2:
8f:a1:04:51:55:b0:5d:94:de:bc:81:18:1e:14:16:
69:59:33:9e:67:f9:38:15:67:b0:61:94:40:3a:41:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:9C:94:69:8A:8C:C0:14:8E:AE:D5:F6:E7:35:14:C2:F5:FB:62
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/w6eclGmKjMAUjq7V9uc1FML1-2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.16.0/20
Signature Algorithm: sha256WithRSAEncryption
98:87:73:3e:45:f5:46:4f:05:90:97:51:3d:da:7b:5b:7b:ec:
8e:ac:14:de:9b:bd:17:12:89:18:60:22:7b:c9:40:07:93:af:
97:39:18:c4:72:2c:43:cf:4f:64:b6:25:49:3d:ee:80:0d:80:
c4:fd:26:84:1e:b6:f8:fe:41:dc:98:ce:6b:44:7d:bc:ad:55:
1a:83:88:ac:b7:1e:3b:f7:c1:ad:42:ec:82:40:04:18:78:a3:
41:86:c0:b9:76:5d:98:d5:59:fb:2c:f2:88:53:5c:15:e9:9c:
d5:c7:eb:7e:31:35:b0:e6:0d:49:29:d5:ff:91:e1:1f:c6:da:
c5:37:6c:dc:95:98:3e:64:bc:65:d2:9f:19:b8:0e:b9:2e:ef:
76:30:67:12:bc:d4:d9:80:90:fa:45:24:62:c2:cc:c4:69:31:
7b:91:09:a4:fd:94:03:17:1d:d0:a2:af:68:66:6c:17:19:d5:
34:1c:cb:a4:63:8e:fb:e4:6b:96:e6:87:75:4b:1e:8e:31:83:
db:d5:9b:8d:95:a8:4c:91:7e:6e:4b:3c:14:be:77:b5:68:97:
6d:43:1e:99:ac:e3:95:57:9b:62:76:5f:b7:b4:34:de:81:6a:
e2:c3:4d:1f:8e:b4:d0:13:9d:96:8c:dc:92:af:37:01:79:15:
0f:4b:68:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:19:29 2026 by rpki-client