Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wDxJRaXDf0SSRdCxnopHp-EV-NA.roa
File: wDxJRaXDf0SSRdCxnopHp-EV-NA.roa (raw, json)
Hash identifier: 317yj3bPEeYUFsK7UIqMGgKDzb8t3zAsNLNIj7B7zKY=
Subject key identifier: C0:3C:49:45:A5:C3:7F:44:92:45:D0:B1:9E:8A:47:A7:E1:15:F8:D0
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0A986C745882D07CD656481AC7D20BA11
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wDxJRaXDf0SSRdCxnopHp-EV-NA.roa
Signing time: Wed 16 Sep 2026 09:22:57 +0000
ROA not before: Wed 16 Sep 2026 09:22:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219497
IP address blocks: 192.36.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:86:c7:45:88:2d:07:cd:65:64:81:ac:7d:20:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 16 09:22:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c03c4945a5c37f449245d0b19e8a47a7e115f8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:d3:79:ca:16:bd:d0:a1:49:54:e8:73:b3:
de:09:f3:2c:80:ac:f2:63:68:7f:48:79:a4:a6:91:
a3:eb:2e:17:26:3f:06:a4:5b:a7:e1:4e:09:02:3a:
be:84:82:38:e2:17:ee:a6:0b:bb:7c:c5:3c:de:9f:
e8:21:86:c8:67:d4:84:af:a6:ac:13:e4:01:c5:57:
12:49:57:43:8a:f9:69:28:4e:6b:c0:c7:33:ac:81:
0e:1b:8f:11:74:77:ff:9e:e6:22:19:87:33:f1:87:
36:a2:86:f3:13:c2:01:81:1a:54:69:6c:74:2a:32:
7c:92:80:44:24:69:8a:ac:bc:69:40:f4:48:e3:40:
64:0d:e2:82:63:60:fc:4d:91:ae:de:cf:2c:1b:31:
5a:78:c3:e9:64:47:fc:1b:b7:02:61:80:f0:44:47:
dd:d7:a5:d6:d9:16:b4:a9:7c:18:e0:50:d3:ff:62:
e0:16:41:5c:e7:37:5d:27:7a:09:87:66:62:59:94:
31:21:e4:ed:78:78:90:99:c9:be:90:13:90:65:33:
d4:c6:88:27:1f:0a:30:4c:1b:93:76:63:ad:13:ee:
48:8d:21:8c:7f:f5:84:ab:39:c7:ce:54:b0:61:59:
da:25:fa:8a:c7:1a:24:bd:ba:0d:70:d9:04:40:f3:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:49:45:A5:C3:7F:44:92:45:D0:B1:9E:8A:47:A7:E1:15:F8:D0
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wDxJRaXDf0SSRdCxnopHp-EV-NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.116.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:e2:c9:bc:e6:05:5b:ed:c7:29:4f:74:bb:c0:0e:69:a8:
f2:5b:4e:eb:3b:1f:e6:63:c7:8f:5d:80:10:8b:02:98:b7:0d:
53:d2:67:51:0f:e1:f3:12:aa:a3:3b:2c:8a:a6:2d:e0:a1:e9:
8d:69:12:dc:26:6b:68:06:7f:fb:fa:8d:b9:65:7c:6a:90:10:
f8:01:95:e0:7d:b7:f5:cc:c9:d4:0e:3a:2a:eb:34:d8:60:89:
07:7c:4d:6c:97:97:b1:0a:68:d4:7b:ef:18:ee:36:5e:63:0d:
c0:78:10:61:fc:16:8a:a8:99:a6:bb:13:62:0b:78:35:cd:47:
ab:39:c3:17:0e:00:11:78:d0:7b:cb:56:0d:12:63:94:12:bf:
0c:99:28:a4:cb:af:d4:79:49:cf:3d:16:9d:c7:35:2a:53:d2:
5a:a2:8b:31:5d:23:e3:39:8a:9d:c2:20:0f:92:6d:75:31:d8:
69:9a:0e:f7:e8:fb:e4:56:bc:b1:f5:24:3b:b2:cf:22:4f:1d:
82:28:d7:bc:b1:60:ac:9b:93:67:b1:b2:6f:b0:52:b9:03:20:
94:77:3a:af:6f:36:6d:65:c5:18:45:46:87:43:bd:1f:22:af:
f8:1f:37:3c:31:35:86:c3:5d:df:8a:5e:7a:45:23:22:66:cb:
00:2d:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:06:37 2026 by rpki-client