Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W9tQGdnGF19w8oTpwgCOEqADStg.roa
File: W9tQGdnGF19w8oTpwgCOEqADStg.roa (raw, json)
Hash identifier: gOGdZR3uG7gdkjA1OfRjz9x5qVUQo8yOExD4G29HW8Q=
Subject key identifier: 5B:DB:50:19:D9:C6:17:5F:70:F2:84:E9:C2:00:8E:12:A0:03:4A:D8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C9ABB3D5E6DF30D1488E742A0966A335
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W9tQGdnGF19w8oTpwgCOEqADStg.roa
Signing time: Tue 22 Sep 2026 15:11:08 +0000
ROA not before: Tue 22 Sep 2026 15:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149440
IP address blocks: 87.86.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:ab:b3:d5:e6:df:30:d1:48:8e:74:2a:09:66:a3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 15:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bdb5019d9c6175f70f284e9c2008e12a0034ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:64:07:47:ab:74:30:81:2a:06:6b:7c:07:
c9:2c:98:0a:eb:95:e2:6a:c6:da:b3:a3:94:f3:fa:
69:f0:50:6e:ab:56:ec:38:34:02:84:3d:fe:32:00:
da:9b:85:f9:53:b5:9d:9c:c9:7d:92:11:10:bf:04:
15:ef:49:55:1e:e9:09:2e:29:c5:63:02:d6:97:bf:
6e:18:7e:03:4e:9a:35:4d:d7:48:8e:98:f2:2c:2c:
2f:e9:ef:e2:c5:5f:d2:d8:b0:ac:4d:27:02:b0:a4:
05:11:bc:e2:ac:79:bb:2d:25:28:4d:16:b4:2f:3f:
20:ae:d9:59:bc:8a:c3:97:38:61:c1:d6:e0:f8:61:
d3:4c:42:84:de:f5:5b:94:f6:cf:7b:d8:4e:28:1b:
6c:4d:75:fe:42:1a:0f:dd:b4:57:00:b4:0e:e3:a2:
d2:87:83:2e:80:d1:4d:24:62:58:52:85:93:d1:c8:
a7:54:20:ca:18:a5:9b:84:4e:76:3f:70:0b:35:91:
1f:b9:fb:14:dd:fe:3d:25:2a:99:2d:e8:c7:85:bf:
b4:ea:f9:f9:dd:1c:78:3c:a7:73:6b:b2:af:a1:72:
92:c6:55:29:f7:65:59:f9:f8:f6:5c:71:f7:fe:62:
df:35:62:2c:35:51:d4:7c:27:dc:51:23:47:1f:51:
fc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:50:19:D9:C6:17:5F:70:F2:84:E9:C2:00:8E:12:A0:03:4A:D8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/W9tQGdnGF19w8oTpwgCOEqADStg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.23.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0a:a7:c5:f5:fb:f9:66:29:ae:85:de:95:45:b3:e9:86:5b:
bf:86:75:0f:e8:93:92:7d:9a:b8:52:fa:ba:f5:9f:b4:1d:5d:
e9:67:f4:16:fa:e0:16:31:6b:30:43:07:d2:95:ae:b1:4a:8d:
e1:8e:c4:75:3f:21:cd:58:9f:3c:ba:66:b8:49:49:1b:19:da:
82:45:67:7d:b3:7d:10:06:70:55:67:03:69:8d:a0:5a:d2:9f:
19:f2:fd:b0:48:4a:65:5c:33:a7:2b:85:10:d5:13:f2:ab:16:
1b:9b:1a:a7:5b:d6:94:39:71:dc:76:2c:66:cb:de:0d:dc:3c:
13:f1:cb:b9:e8:ad:ea:f3:e0:dc:84:09:a3:a7:c9:40:c5:e7:
db:6a:25:3b:33:8d:a1:e0:11:85:ad:96:3f:dd:7c:3c:8e:a9:
67:a1:e2:e7:2d:49:10:ee:97:2a:45:ac:47:bc:41:2f:56:99:
27:d5:6a:fe:7e:34:86:72:c3:8e:f1:ee:08:bd:a0:76:d0:db:
eb:e7:c9:0b:c8:37:b1:fe:10:45:4e:89:97:97:22:c7:c9:2b:
cd:84:8d:65:c9:99:5a:89:f3:0c:74:2b:38:d5:61:c3:bf:71:
0f:10:61:8e:bc:3d:8e:69:68:ce:29:53:04:9c:9c:65:d9:6b:
62:2b:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:19 2026 by rpki-client