Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa
File: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (raw, json)
Hash identifier: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=
Subject key identifier: C1:AF:73:33:27:C3:0C:4B:B0:7B:D8:C7:10:47:F9:5D:1D:2B:63:55
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 01A0C32A57ED87BB68C5E440DB57168FEED1
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa
Signing time: Mon 21 Sep 2026 08:52:07 +0000
ROA not before: Mon 21 Sep 2026 08:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209479
IP address blocks: 193.163.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:2a:57:ed:87:bb:68:c5:e4:40:db:57:16:8f:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Sep 21 08:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1af733327c30c4bb07bd8c71047f95d1d2b6355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:05:f1:55:26:a7:0c:3e:47:d9:7d:3c:a1:
f3:38:41:87:36:b2:b2:70:0c:55:75:f3:af:ee:50:
c0:d9:fd:ec:4e:e8:b2:c2:ef:80:4a:d1:de:9d:a8:
8c:e9:c5:ae:0d:35:e0:bd:09:c1:27:1b:ce:0e:03:
32:7e:46:8b:8f:f5:11:92:b3:66:fe:21:b7:96:88:
b8:2b:19:7c:e6:58:0b:65:aa:95:0e:93:c1:10:11:
3f:b3:a9:18:29:1c:91:18:11:8e:9f:68:31:54:4d:
be:97:b3:4b:ba:09:ba:79:1d:e7:56:76:90:f8:b8:
0b:21:14:57:d6:17:0e:6b:07:1b:d2:04:a1:bb:82:
01:42:de:3e:93:06:f7:f8:b5:b6:80:75:9d:fa:2d:
4c:36:ed:1f:26:2b:8a:6c:e4:db:90:93:c9:d0:a8:
04:0e:2e:25:d2:76:24:87:c9:87:c8:6d:ce:9b:89:
32:8d:ee:5b:b0:b7:ea:30:0d:fe:4c:89:ba:cb:29:
a7:57:44:94:91:fe:f9:a6:71:ed:ea:72:c9:4f:ae:
ab:66:43:0a:d0:83:62:8a:d7:a1:30:39:3d:e7:0e:
19:18:98:cb:21:4e:6c:97:37:f8:2b:e8:7b:45:02:
08:a5:c8:30:c0:f5:ec:85:c2:24:25:2b:4c:be:a4:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:73:33:27:C3:0C:4B:B0:7B:D8:C7:10:47:F9:5D:1D:2B:63:55
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.90.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f2:ee:4e:6b:71:3b:52:69:2b:6b:a3:43:ef:3e:51:3c:f8:
42:4f:b3:07:e6:b3:28:b2:b1:fc:22:eb:3b:29:cb:22:1f:37:
83:53:37:ac:4e:9d:d5:de:6e:56:f5:77:30:9b:36:64:5e:92:
3a:b9:e5:e3:cd:8f:1c:87:53:9e:4a:57:62:79:fa:09:fe:e3:
59:d8:37:78:af:2f:36:ec:44:7b:fc:87:08:dc:cf:0d:a2:ce:
3b:ec:23:57:15:cc:4a:60:e8:ee:10:11:f6:76:d8:8b:6a:ff:
be:61:d9:46:63:ac:0c:99:b6:2c:8e:d1:6d:fe:04:43:82:88:
37:94:6d:83:89:75:94:82:16:e1:74:33:ea:64:fb:ae:87:ae:
46:0e:b3:c5:86:af:4e:e0:eb:25:de:1e:15:e5:f8:4f:6d:cf:
06:2a:ab:12:26:a0:56:44:d3:e7:96:b3:38:58:10:e7:94:78:
f8:10:32:51:36:82:74:fb:32:eb:b7:b2:bd:5d:89:f7:b7:5e:
78:a6:d8:b8:ae:97:85:2d:23:2a:7e:fa:9e:d1:8c:9a:dc:a4:
1c:0e:be:69:e3:e6:46:6c:67:bf:ef:71:32:f9:fa:f2:22:47:
b8:e8:c3:4f:3f:8a:1e:22:1a:17:ec:12:33:ac:1c:0f:7a:24:
1a:60:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:13 2026 by rpki-client