Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa
File: WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa (raw, json)
Hash identifier: FwZzTrgAJmCKVOp+9WkS40wNzmiqfA8Zg/3n5/Fzn+o=
Subject key identifier: 59:1B:B7:0A:FD:31:76:68:CE:5A:81:B6:66:CC:15:20:A0:7F:E5:28
Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Certificate serial: 01A0D238A8167590122C738298D66745E49B
Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa
Signing time: Thu 24 Sep 2026 07:02:03 +0000
ROA not before: Thu 24 Sep 2026 07:02:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218825
IP address blocks: 95.86.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:38:a8:16:75:90:12:2c:73:82:98:d6:67:45:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b
Validity
Not Before: Sep 24 07:02:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=591bb70afd317668ce5a81b666cc1520a07fe528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:ca:59:5a:a7:2a:b1:6b:ae:cf:f6:2c:42:
11:62:83:b6:68:e1:01:a9:92:f3:35:6c:a7:10:75:
b8:9d:66:d3:e6:bf:55:14:f1:6d:cf:62:92:21:bb:
8d:37:d6:e5:8a:7a:18:83:a9:f8:6a:94:2c:3b:02:
d9:1e:41:0b:32:77:3c:5c:6e:c2:e5:4e:81:8f:6a:
50:1b:73:bb:b7:3f:c7:e4:24:38:ef:3e:58:cb:73:
5b:e7:48:08:88:72:39:77:57:99:e2:c6:52:cd:61:
d7:ef:22:ee:07:08:ff:89:3d:32:cb:93:0a:d1:c7:
58:77:e0:75:f5:04:60:e3:44:06:cb:ab:4c:0c:1a:
5b:9e:57:2d:22:b9:67:2c:61:97:bf:7c:ff:13:70:
c1:9e:e1:b7:9b:35:f4:70:70:bb:aa:50:84:c9:83:
6f:0d:8e:1d:e2:91:75:3c:48:97:26:1c:79:ea:b5:
54:db:ca:77:1b:d2:0a:44:56:2c:51:4a:72:dc:0e:
41:35:29:3b:9f:e4:67:cd:46:41:5a:4b:d3:b6:f5:
64:a3:23:6a:f8:89:56:9e:4e:08:cd:fd:7f:62:c6:
39:a8:32:b7:79:a6:13:01:38:49:af:6c:b5:49:2a:
85:48:d8:4d:2c:6d:7e:79:b6:7e:33:ce:82:59:6a:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1B:B7:0A:FD:31:76:68:CE:5A:81:B6:66:CC:15:20:A0:7F:E5:28
X509v3 Authority Key Identifier:
keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/WRu3Cv0xdmjOWoG2ZswVIKB_5Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.86.160.0/24
Signature Algorithm: sha256WithRSAEncryption
40:82:48:1f:cb:1b:b1:bc:2e:7e:00:b3:fe:1f:a2:ba:96:df:
6c:88:d6:a6:19:24:68:59:b2:be:1c:fd:c7:9c:2d:e4:e0:45:
b1:8a:1f:17:3a:9f:5c:4f:92:ca:56:54:2d:44:54:b3:3e:30:
f9:47:7c:72:60:e6:fe:e5:74:19:d0:ce:db:f3:a2:6e:57:76:
00:3c:f6:26:98:9a:8a:f6:03:d6:e0:f8:dc:20:e0:0b:a7:7f:
00:6f:74:a0:af:cc:d2:fb:a7:68:5d:6b:87:de:90:7e:09:40:
40:20:c0:4a:1e:3e:9d:42:90:d2:4a:b4:dc:6c:c2:2f:0d:ea:
9d:1b:1e:23:00:2e:ce:44:cf:26:c5:91:8e:58:fc:5e:3a:35:
e2:3d:17:4a:0b:a2:4f:03:f3:bb:77:12:34:00:b1:59:f4:fe:
b1:8e:c6:24:ae:7f:0b:ef:a5:30:3a:9a:8c:5f:4a:25:27:7a:
72:f0:a7:f8:ea:84:c5:36:38:c7:42:82:3e:9e:ff:fe:06:d3:
52:0c:1d:65:84:2b:08:a4:54:58:04:4f:ca:32:fc:d9:88:64:
d8:ec:fe:77:20:b2:e7:b8:20:0d:76:d1:19:b2:fe:74:b9:27:
be:ab:7e:d4:95:8d:91:bc:44:08:9d:53:24:81:06:19:3e:ae:
29:eb:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:22 2026 by rpki-client