Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/w78dSJM3llznMKh9-vsANG8NrvQ.roa
File: w78dSJM3llznMKh9-vsANG8NrvQ.roa (raw, json)
Hash identifier: v9izA/dhqWOcJcsl34CYelOBpEDdgDKV6IuhfhrSKsE=
Subject key identifier: C3:BF:1D:48:93:37:96:5C:E7:30:A8:7D:FA:FB:00:34:6F:0D:AE:F4
Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial: 01A0FE700B524D66A4A2526DB7289BB3AE67
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/w78dSJM3llznMKh9-vsANG8NrvQ.roa
Signing time: Fri 02 Oct 2026 21:05:50 +0000
ROA not before: Fri 02 Oct 2026 21:05:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141750
IP address blocks: 89.31.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:70:0b:52:4d:66:a4:a2:52:6d:b7:28:9b:b3:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Validity
Not Before: Oct 2 21:05:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3bf1d489337965ce730a87dfafb00346f0daef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:b1:50:66:a1:49:d5:83:85:dc:7c:62:09:
23:3f:22:5b:72:da:8b:35:bb:5c:1f:bd:72:f0:01:
58:73:53:5f:45:36:53:ca:25:6d:58:97:5b:4c:18:
f5:6f:fe:4e:e7:d9:f5:42:c0:8d:11:ad:42:5f:ba:
30:29:ec:d6:38:8e:ef:60:d7:6c:fa:9b:d1:36:43:
32:30:6f:7b:51:74:35:d0:bd:bd:bb:62:34:9b:da:
57:3a:7a:dc:3a:5d:e5:40:0b:ab:8b:d5:17:53:1b:
67:0f:1c:ea:d8:ca:e1:e0:1d:4f:cd:82:8e:14:cc:
44:1d:cc:14:65:1b:69:04:4d:4d:81:60:4c:30:77:
9e:ee:f6:73:ae:c7:8a:63:0d:f0:c4:97:0c:07:36:
6c:9a:b0:2c:53:f4:bc:53:86:fc:7d:82:63:1e:00:
4b:9a:3f:41:d3:65:f3:59:8d:e0:c2:1e:3f:ea:e2:
e9:32:f6:c2:97:a0:b9:12:7c:15:8f:c2:c8:98:af:
ee:69:c2:0e:8a:93:16:36:7e:80:02:1d:8c:e9:d3:
d8:df:aa:57:e5:c8:6f:5d:c1:83:d5:d8:db:0f:f4:
e6:20:e1:4d:15:ef:d9:bd:ec:a0:2c:24:93:49:a5:
5c:e2:24:ef:cb:00:43:27:3b:9a:41:3a:a8:9f:5f:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:1D:48:93:37:96:5C:E7:30:A8:7D:FA:FB:00:34:6F:0D:AE:F4
X509v3 Authority Key Identifier:
keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/w78dSJM3llznMKh9-vsANG8NrvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:54:2f:f5:56:9f:24:00:7f:24:8c:5d:78:98:d8:5a:e6:ed:
f0:a2:26:3c:54:a9:f5:8f:ed:ef:e8:6d:a0:e5:62:ed:55:df:
02:a1:08:52:f6:b5:35:70:62:03:39:e7:e6:a5:c5:a8:29:4b:
7d:fc:8a:c5:f6:a0:d3:6c:b1:58:37:3b:83:6c:c1:c6:ce:59:
ac:eb:21:0d:92:71:52:1f:31:ba:2c:cf:ac:5d:94:d9:17:17:
6d:00:4d:07:8c:c3:9a:78:76:ca:f4:98:86:ae:ad:44:5c:f0:
ae:fb:5d:0a:81:bc:69:42:c9:31:ee:0e:8d:75:da:ef:e0:5c:
c6:50:c5:bd:d7:1f:b5:74:99:b7:4a:2b:ed:35:68:3a:ac:cd:
6c:45:29:af:02:c2:b3:fe:a9:e8:18:de:77:cb:2c:77:ca:8b:
45:8e:0f:28:97:d1:44:6b:55:13:c5:9b:50:24:28:e2:40:54:
54:6f:d4:b0:25:e7:e0:3d:43:6b:a8:2a:b9:b0:b2:60:d8:97:
d8:4b:c8:98:40:81:bf:79:ef:57:61:ac:d3:08:19:71:0a:0e:
35:60:0a:ef:76:bf:f1:7d:2d:91:07:2e:55:c7:f7:15:f8:18:
62:97:d8:48:c4:1e:e5:4b:5b:d4:da:89:14:85:e4:80:d2:b4:
44:79:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:02:21 2026 by rpki-client