Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WlaXuYXZdmO6Vcy9Usn6PDDGSvE.roa
File: WlaXuYXZdmO6Vcy9Usn6PDDGSvE.roa (raw, json)
Hash identifier: sas5Wy292/rNwwki2353KLMoPpHoOe3EZtm40rw6+pk=
Subject key identifier: 5A:56:97:B9:85:D9:76:63:BA:55:CC:BD:52:C9:FA:3C:30:C6:4A:F1
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A07AE320F7669C5B35ABB149325A961190
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WlaXuYXZdmO6Vcy9Usn6PDDGSvE.roa
Signing time: Mon 07 Sep 2026 08:01:40 +0000
ROA not before: Mon 07 Sep 2026 08:01:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199897
IP address blocks: 201.3.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:e3:20:f7:66:9c:5b:35:ab:b1:49:32:5a:96:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 7 08:01:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a5697b985d97663ba55ccbd52c9fa3c30c64af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:d1:a3:15:20:86:aa:cb:a3:8e:7e:21:bc:
a2:86:f4:79:1d:b3:5f:71:fe:08:0d:70:20:29:09:
93:7a:06:fe:3b:41:ae:a6:e0:7a:f5:09:e4:55:7c:
dc:4c:2a:84:84:92:60:2a:18:60:d5:6f:6a:c6:11:
c8:8c:c8:d1:a8:9d:d2:c5:a0:e9:e9:03:71:79:b2:
22:ce:4d:13:f5:d5:9c:6f:12:02:6c:75:d0:16:7b:
5d:be:e9:4d:83:9c:3d:0d:ca:27:65:54:fe:42:54:
0e:aa:89:da:f7:59:dd:82:36:be:83:17:fb:3c:7f:
d9:e3:bd:e6:2a:03:2d:1c:52:89:7f:f7:87:ff:16:
08:e9:e0:12:a5:53:1c:40:0f:f1:00:f5:52:87:bd:
00:f6:8a:25:a8:f8:62:77:f5:08:e1:83:f0:17:c1:
4f:b8:b6:55:bb:11:6e:70:95:40:08:6c:16:f4:3e:
60:1b:b9:15:e3:6b:aa:e0:22:06:87:42:ee:c2:2d:
9a:96:d7:53:04:3f:63:85:13:63:7d:d9:1f:e6:2b:
a2:8b:00:01:6e:9b:5d:7c:d3:15:fa:22:45:c2:d5:
b8:2f:f1:ac:7d:89:d0:9a:e9:03:3a:c4:3a:2a:0d:
cd:29:46:4b:59:39:78:14:d3:ce:56:01:ab:f4:db:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:97:B9:85:D9:76:63:BA:55:CC:BD:52:C9:FA:3C:30:C6:4A:F1
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/WlaXuYXZdmO6Vcy9Usn6PDDGSvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.226.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f0:36:b1:ea:f7:21:f5:7f:00:84:10:a8:4a:0c:07:b9:0c:
9a:cf:66:cd:01:5c:0a:82:05:ae:b6:34:23:69:02:47:c4:6c:
47:71:0e:0a:1f:a9:4b:63:0b:85:60:7d:41:3d:56:da:ac:1f:
5b:d5:d1:d5:66:03:b5:52:d4:a8:c6:35:5f:0f:c4:a6:f3:a0:
b5:29:1c:84:9c:b2:e3:8c:ce:18:db:3e:62:88:0f:b2:c8:1c:
52:18:a2:9e:7d:1c:fb:61:c5:07:be:da:9d:3c:ae:a6:75:8a:
cc:0a:2c:fa:82:d7:5f:25:a1:1e:9b:a9:54:7c:32:0e:cd:65:
35:66:29:39:6c:d8:c9:c0:e0:cf:a1:74:14:26:65:41:f9:40:
fc:60:96:98:02:c6:b1:c0:60:60:51:36:c6:ef:9c:d9:8d:13:
0f:03:26:36:70:59:d6:0e:32:16:14:c3:5c:6d:1b:27:f8:f7:
53:26:7d:a0:5e:f5:6b:a8:e9:a5:c1:54:26:f3:05:8c:6f:63:
27:6c:3e:3b:70:f6:58:10:11:84:c4:08:b4:2b:ff:d3:ad:e0:
cf:06:91:7b:50:da:da:97:59:2e:1b:bb:a1:73:fa:a0:86:5f:
58:2e:76:df:58:62:9b:aa:1f:43:4b:a9:6b:10:bc:92:05:40:
e5:39:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:52:57 2026 by rpki-client