Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/a0weMcNAZgut6KJeiI7ueC7zVOM.roa
File: a0weMcNAZgut6KJeiI7ueC7zVOM.roa (raw, json)
Hash identifier: zgHkvmbB4MQLp9DGNfh2vkVqkvatMLgGZS95Rl5f0lE=
Subject key identifier: 6B:4C:1E:31:C3:40:66:0B:AD:E8:A2:5E:88:8E:EE:78:2E:F3:54:E3
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0ED336EA401353E627455D6513748AF93
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/a0weMcNAZgut6KJeiI7ueC7zVOM.roa
Signing time: Tue 29 Sep 2026 12:46:05 +0000
ROA not before: Tue 29 Sep 2026 12:46:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199046
IP address blocks: 5.133.24.0/21 maxlen: 24
185.132.248.0/22 maxlen: 22
185.132.248.0/24 maxlen: 24
185.132.249.0/24 maxlen: 24
185.132.250.0/24 maxlen: 24
185.132.251.0/24 maxlen: 24
193.7.220.0/22 maxlen: 22
193.7.220.0/24 maxlen: 24
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:33:6e:a4:01:35:3e:62:74:55:d6:51:37:48:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 29 12:46:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b4c1e31c340660bade8a25e888eee782ef354e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:22:f3:eb:bc:0e:46:da:9b:b2:7b:88:ec:
be:2c:1f:d2:42:14:39:d6:59:b3:56:b7:bb:4d:54:
2e:74:ad:87:8b:ec:d2:0e:17:5c:28:cd:c3:9d:41:
db:c1:b2:d6:a4:0f:7b:1c:a2:9a:12:99:d8:ea:79:
fb:fa:40:dc:0c:97:c4:9e:f4:23:d8:fe:f0:ca:78:
3f:22:84:97:ce:4c:1f:f4:e5:e1:de:f0:25:d9:fb:
a4:e3:f9:39:81:f6:76:59:7e:ef:a9:f6:9f:30:be:
65:dc:7d:91:54:a9:be:fe:de:e9:60:70:b5:4c:1a:
3c:c0:a1:5c:03:c7:f4:f6:cf:cf:f4:3e:b3:71:0f:
8d:7d:9d:e7:58:03:5f:0c:ca:db:06:a8:52:4b:ca:
f0:0c:8b:b5:88:ac:84:1a:47:2e:c3:2c:20:9c:da:
d3:8d:a6:1b:d7:d3:d8:07:85:80:1c:6b:50:6f:9d:
31:36:f1:51:e6:4d:c2:23:7d:3e:26:45:9e:59:7c:
5a:4f:32:43:d3:bf:76:56:bf:7d:72:98:1b:3c:dd:
2c:64:9f:35:d3:f0:7d:e5:bf:06:e6:34:68:f3:dd:
f4:0f:79:a3:96:67:07:1a:37:61:d2:ab:af:66:e5:
cb:f2:b2:c9:c3:98:6b:ac:2d:9b:13:94:74:9f:d9:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:1E:31:C3:40:66:0B:AD:E8:A2:5E:88:8E:EE:78:2E:F3:54:E3
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/a0weMcNAZgut6KJeiI7ueC7zVOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
1d:ad:6c:05:0c:04:75:a9:ba:a4:27:f1:05:aa:34:a9:2b:4a:
ba:c4:4e:16:f6:f0:c5:65:82:d8:9c:0c:fc:c7:32:06:9c:cb:
f1:6b:3d:26:11:ea:03:8f:f7:88:b5:fc:d5:f9:d5:57:20:86:
d0:65:95:0e:56:4c:87:63:1f:d7:1e:8b:ba:0b:fe:28:6d:8d:
b4:2e:49:a7:13:79:55:37:b8:b6:b8:92:ac:33:58:7f:29:ea:
2b:81:49:2c:5d:26:6e:0a:ab:04:e9:c1:a9:29:51:3d:90:75:
39:0a:89:49:ab:99:7b:ad:ff:5e:ab:8e:6f:4e:8d:a2:9d:99:
46:a0:b3:bf:d8:77:45:c0:b8:81:73:29:09:83:c5:a4:e9:19:
0f:6a:55:3d:fd:d4:ab:0b:93:15:8a:de:c8:04:2f:ea:2d:42:
78:da:2e:04:11:02:93:7b:86:00:17:87:c1:71:96:bc:ed:1a:
8e:40:b8:b3:40:67:95:32:94:3e:4b:df:de:96:54:29:f7:c3:
a1:42:fe:27:6d:ba:bf:ab:8c:d5:e1:73:c8:f5:ba:1c:2e:e5:
c2:9e:e8:7b:1c:dd:ab:f2:92:14:d1:40:b5:dc:aa:9a:c3:ff:
77:82:62:bc:13:ff:d6:8b:0c:e9:81:f8:4b:27:5b:73:2a:0d:
f8:2b:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:36:38 2026 by rpki-client