Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/W-kTWTASigv7B1XjCdXe-_rVSB0.roa
File: W-kTWTASigv7B1XjCdXe-_rVSB0.roa (raw, json)
Hash identifier: oNYg0taGBHcp6+3T8SS1c4UpDxjtbuQBzRnMeJttFuc=
Subject key identifier: 5B:E9:13:59:30:12:8A:0B:FB:07:55:E3:09:D5:DE:FB:FA:D5:48:1D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1D36E07D496C5FAF025E48C0362AD5A70
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/W-kTWTASigv7B1XjCdXe-_rVSB0.roa
Signing time: Fri 13 Nov 2026 05:42:45 +0000
ROA not before: Fri 13 Nov 2026 05:42:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218158
IP address blocks: 2a06:9801:15ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d3:6e:07:d4:96:c5:fa:f0:25:e4:8c:03:62:ad:5a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 13 05:42:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5be9135930128a0bfb0755e309d5defbfad5481d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:7d:9c:c7:8b:3a:e0:7f:36:e0:a7:b1:41:
22:d7:8f:52:26:87:c4:96:e3:09:61:bc:82:38:92:
09:fc:f1:5d:b8:1f:9c:d3:0c:d3:30:db:66:7e:0c:
1f:b2:12:c2:98:87:03:b9:b0:b3:4e:f7:9c:a6:d3:
63:8a:52:cc:31:a7:ab:51:ad:28:98:1f:69:f8:3d:
6a:46:88:84:df:69:f2:91:43:9c:67:dd:03:f8:b0:
55:b8:e3:25:ab:ce:8c:5c:83:1f:42:1d:52:fb:af:
09:06:8b:53:36:c6:af:cf:15:48:14:24:9d:7c:54:
ae:06:b4:49:11:80:76:59:8f:d2:1c:6d:a5:13:fc:
21:60:9c:73:93:67:45:2b:0c:50:3f:e8:9e:b4:f7:
ae:b2:c5:81:4e:4d:18:2d:4e:71:03:39:62:6c:2a:
83:a6:f9:9d:29:a1:35:8a:90:e4:a2:63:05:30:8b:
83:63:4c:ba:12:6a:1f:ae:2d:5d:f9:34:ff:51:90:
1c:db:88:18:42:7a:75:1f:1f:eb:a1:cf:f9:03:1c:
a3:2d:5f:28:ce:12:e7:72:41:1a:32:4e:77:2b:5d:
e1:5d:a9:de:dc:bd:72:10:99:db:55:88:af:61:ba:
c8:bb:fe:3b:f1:93:c7:bb:29:06:2b:9a:a4:34:a8:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:13:59:30:12:8A:0B:FB:07:55:E3:09:D5:DE:FB:FA:D5:48:1D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/W-kTWTASigv7B1XjCdXe-_rVSB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15ff::/48
Signature Algorithm: sha256WithRSAEncryption
82:f5:28:03:d1:55:67:83:ee:9d:50:64:c4:14:03:65:13:a8:
f3:ca:f3:d6:10:03:a8:46:b4:71:52:ef:ad:17:3b:57:a6:c3:
1d:a5:7e:c9:b2:0b:5b:af:5b:21:a9:a0:cf:3e:3e:13:c3:0e:
84:30:85:3b:d9:09:26:aa:50:10:5a:af:ae:c8:e1:0c:cb:d2:
e2:84:55:61:89:f8:8a:26:d0:a7:34:20:88:c8:1e:d0:12:16:
30:59:6a:81:f5:fa:48:ea:f3:08:81:eb:d3:04:53:3f:06:1a:
2a:0a:3d:e0:bf:ce:33:60:32:f2:20:bd:32:ef:32:6b:1c:3e:
06:7f:e1:c4:2b:00:29:67:f6:b6:19:d1:1f:2c:28:1e:6a:cb:
9e:f3:e4:db:c3:c0:79:d5:b2:e7:46:e5:fe:9f:85:ec:02:25:
7e:cf:52:fc:89:70:25:be:a0:18:9f:16:12:be:5b:f7:d0:c5:
d8:2a:1c:fd:80:38:fb:f8:53:73:9d:12:37:45:67:a4:1b:7b:
63:7b:24:3b:8c:c6:f4:45:45:38:c2:21:6e:9d:97:bc:bf:b6:
56:b0:12:97:7e:7a:ca:72:eb:db:1d:69:8e:6a:ff:d7:7a:8a:
8f:23:69:0b:74:a1:f2:ac:d2:60:73:c0:d8:4c:b5:3d:0a:1b:
53:35:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:44 2026 by rpki-client