Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/DwX1SC_cs56fLlS6FPAMCX-Xu-g.roa
File: DwX1SC_cs56fLlS6FPAMCX-Xu-g.roa (raw, json)
Hash identifier: E2FXua4YE/EaNkgeUflK173eYdNrtusjWgWWbRvvf60=
Subject key identifier: 0F:05:F5:48:2F:DC:B3:9E:9F:2E:54:BA:14:F0:0C:09:7F:97:BB:E8
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 01A03D112080FB11D91F34BA2EBACBDCD3A2
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/DwX1SC_cs56fLlS6FPAMCX-Xu-g.roa
Signing time: Wed 26 Aug 2026 07:55:27 +0000
ROA not before: Wed 26 Aug 2026 07:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49610
IP address blocks: 66.9.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:11:20:80:fb:11:d9:1f:34:ba:2e:ba:cb:dc:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Aug 26 07:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f05f5482fdcb39e9f2e54ba14f00c097f97bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:16:4b:5f:2f:93:2f:eb:18:78:0b:cf:dd:
7c:9a:b3:3e:1d:21:e1:8f:e9:f4:16:e4:2f:09:11:
f7:c9:e7:c4:44:f4:b1:fe:98:8b:61:db:0e:1c:09:
fd:db:ae:50:fc:06:1d:b3:ce:e6:a9:be:48:5b:49:
e6:06:c5:6e:60:26:f6:26:3f:ba:bb:6e:c6:6e:9b:
13:3d:9d:e3:58:83:e9:db:90:07:af:d5:ce:cc:c8:
50:b0:89:15:55:3e:6c:86:fd:17:a0:00:29:52:cd:
c4:d3:ce:17:f7:1e:10:b6:53:40:d7:c3:09:47:0e:
6e:6a:29:48:ed:b8:71:9d:cb:e4:3f:86:b6:ae:32:
e2:88:02:f9:d2:38:52:bf:c2:79:15:e5:e5:71:2e:
31:ca:8c:1b:14:39:fa:25:e2:51:92:b4:92:b2:f2:
45:28:49:94:32:e4:cb:f5:64:0b:19:c9:f1:d0:0c:
f4:95:9b:64:0b:c7:3c:f0:b4:a6:ba:45:1e:6d:1d:
82:ae:07:d1:95:2c:52:66:a2:4f:0a:d6:8d:fe:0b:
81:e9:d6:87:8c:ed:6b:2b:be:64:7c:b2:1e:18:9c:
27:fb:58:46:48:12:4e:93:d3:5d:42:ae:10:11:23:
cd:78:19:1c:94:74:64:a5:d2:2a:4c:11:5a:fc:1f:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:05:F5:48:2F:DC:B3:9E:9F:2E:54:BA:14:F0:0C:09:7F:97:BB:E8
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/DwX1SC_cs56fLlS6FPAMCX-Xu-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c5:5a:86:71:90:fe:33:59:7f:b9:b2:69:dc:ab:4c:20:a1:
29:f3:45:8c:4f:7d:80:f9:ed:f4:9f:d5:1a:e6:d2:09:56:87:
e8:c1:fd:4e:bb:d7:dd:c7:bc:33:e2:1d:a4:aa:ea:cb:66:6e:
3c:89:b9:27:7e:5f:0d:58:e2:f7:38:d2:6e:8f:63:4f:1c:0a:
a1:76:ab:e1:8f:07:5c:5a:52:01:41:a1:93:ed:86:26:0f:cf:
d7:e6:2b:40:e7:1f:bb:50:95:f7:64:33:49:4e:47:45:d7:20:
d4:4c:5e:8d:7f:07:32:6a:9a:fc:8e:d9:32:02:5e:72:be:84:
d9:84:70:a8:86:e4:d1:e0:69:ca:d8:9a:be:22:6f:f2:c5:e3:
71:ce:ee:18:b3:97:68:0b:c2:2b:df:e7:0d:ef:29:46:1e:73:
45:e3:a9:fa:88:83:bd:b7:98:9b:a1:5e:89:c1:94:5e:4c:d9:
45:22:af:de:db:b7:21:4f:e4:b7:f3:c7:eb:56:b4:30:cf:fb:
48:96:aa:c2:1e:7f:46:1c:07:c8:fa:4c:18:61:5a:10:68:22:
e9:d9:d1:6c:94:36:ee:07:37:c9:bd:ec:c2:b3:cf:26:94:6f:
9f:c2:d8:64:31:89:71:e3:ee:ba:84:e3:5c:66:08:13:b9:f5:
c6:b4:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:02:56 2026 by rpki-client