Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/w6Cyegjw-GH6cGhzd5xmzvbDCh8.roa
File: w6Cyegjw-GH6cGhzd5xmzvbDCh8.roa (raw, json)
Hash identifier: gcke+fLPz/yVkOWJG7S+F2ox894CAGWbdhHfTT7u6Uo=
Subject key identifier: C3:A0:B2:7A:08:F0:F8:61:FA:70:68:73:77:9C:66:CE:F6:C3:0A:1F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0C2DB9C7425D6B4E3354A5708DA9FA069
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/w6Cyegjw-GH6cGhzd5xmzvbDCh8.roa
Signing time: Mon 21 Sep 2026 07:26:07 +0000
ROA not before: Mon 21 Sep 2026 07:26:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 147.90.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:db:9c:74:25:d6:b4:e3:35:4a:57:08:da:9f:a0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 21 07:26:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a0b27a08f0f861fa706873779c66cef6c30a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:97:3b:30:67:05:82:e5:52:f8:26:e9:7c:
5d:a1:87:e2:18:b6:ba:1c:e3:a9:e3:09:10:53:b5:
14:12:c8:1b:78:81:f2:ab:ba:51:95:80:64:55:3d:
68:b5:b4:6e:bd:01:af:cb:4c:d6:ab:96:44:96:af:
a3:4e:15:a3:b8:ab:6d:b1:37:de:f8:c3:18:d6:69:
bf:30:43:cf:48:f5:47:95:69:77:f8:b6:28:0e:4c:
90:31:fd:65:e4:9b:df:17:af:02:d4:63:36:b8:23:
ea:2d:ef:53:6a:8d:77:4d:5a:dd:e4:3d:65:27:86:
2c:de:3c:b5:3f:a3:9b:7e:43:1c:1c:5f:0d:05:12:
41:05:7c:61:3f:a0:d9:fe:b6:dd:ac:f4:8d:89:1d:
62:99:32:b9:86:c0:83:04:a9:73:f8:30:e4:ef:07:
99:33:6c:2e:c1:0c:61:63:7d:44:1c:3d:73:c6:c5:
0f:9a:38:b5:39:3e:ad:54:0e:e9:d9:87:2c:68:91:
19:9c:b6:48:1d:44:ec:47:72:fe:ca:7d:ba:ee:d1:
2e:b7:f1:b7:16:d9:02:61:ca:09:3d:da:c6:7a:26:
1c:21:e7:15:cf:d7:73:55:ed:77:1a:5c:94:de:9f:
a0:a3:e3:2d:80:4c:a7:3f:16:68:08:4e:4d:4c:a6:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:B2:7A:08:F0:F8:61:FA:70:68:73:77:9C:66:CE:F6:C3:0A:1F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/w6Cyegjw-GH6cGhzd5xmzvbDCh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:95:f8:38:fe:e9:33:fe:5f:2d:4b:8e:c2:69:fb:f6:c1:18:
85:c0:60:ff:42:4b:38:0f:35:ff:44:3e:23:b6:cf:d2:5f:2b:
41:f6:c4:65:e5:4f:a3:92:7a:cb:56:37:88:41:bd:e0:80:ef:
df:12:4c:4a:71:1f:f2:6a:62:82:f6:56:c1:8b:fa:92:84:09:
b0:4d:30:dd:23:6c:1b:b8:4f:33:f0:67:41:61:5e:31:d8:c1:
38:45:ee:38:58:11:c2:d6:ec:61:57:c6:5b:b7:ac:f8:81:9e:
95:c0:ab:20:cf:64:b3:26:cc:61:cb:b6:94:9b:8b:bd:8e:91:
f1:a5:53:9c:3c:12:b1:57:84:6c:c0:dc:7f:e2:24:0b:65:cb:
d7:0c:07:cb:a0:71:26:70:9c:42:71:61:0c:d7:8a:8a:97:d7:
7f:66:f2:45:a8:19:3b:a1:d7:29:c4:90:90:9a:0a:f8:fa:68:
90:cf:7a:a5:95:ad:1f:30:a7:e2:6b:4a:ee:ca:21:cf:3b:0f:
77:14:a8:b9:da:bf:b2:98:9f:1e:a1:09:8e:85:9b:7d:9d:3f:
98:3e:13:17:3d:a2:4d:5a:34:1c:81:bf:fb:e2:5a:13:1a:3e:
39:fc:34:e9:0b:6f:5c:38:cd:bc:10:8e:ae:b7:21:8a:e2:d5:
46:32:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:32 2026 by rpki-client