Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WtemGQ4icgFs7jXxvL6UcK62rdc.roa
File: WtemGQ4icgFs7jXxvL6UcK62rdc.roa (raw, json)
Hash identifier: KxF+5i5j0XFXbS48qzFrhM1ADBAtW0Dh175zW1CaXNQ=
Subject key identifier: 5A:D7:A6:19:0E:22:72:01:6C:EE:35:F1:BC:BE:94:70:AE:B6:AD:D7
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019D2887C2338BF74838F8AE66A6AC675388
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WtemGQ4icgFs7jXxvL6UcK62rdc.roa
Signing time: Thu 26 Mar 2026 05:04:38 +0000
ROA not before: Thu 26 Mar 2026 05:04:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205486
IP address blocks: 2a09:6282::/32 maxlen: 32
2a0e:d00::/29 maxlen: 29
2a13:1340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:87:c2:33:8b:f7:48:38:f8:ae:66:a6:ac:67:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 26 05:04:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ad7a6190e2272016cee35f1bcbe9470aeb6add7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:cf:64:2d:0c:15:a0:f0:19:ae:47:e0:8d:
75:1f:87:55:76:62:31:d0:ef:52:70:f1:03:e8:94:
71:a6:32:48:0d:89:2a:72:0e:e9:dd:ca:48:08:b6:
ec:b3:e3:93:12:2a:07:ef:58:7b:60:d5:9a:f5:db:
65:31:ba:80:80:6e:c9:fe:68:e2:99:46:3d:a5:01:
24:67:9c:06:d0:6e:fd:9d:60:1e:01:fa:c2:7b:a4:
98:84:9d:33:4f:07:34:04:63:00:79:65:0c:59:00:
8d:2d:12:a2:cf:8e:58:b5:40:c3:89:0a:df:4a:bf:
15:e5:cb:72:e2:92:1c:ef:3c:17:f0:ac:c2:f6:33:
8c:eb:d3:82:11:68:f4:e1:81:6f:26:96:40:c5:29:
ad:8c:df:30:ef:92:0f:f1:81:0b:fa:33:31:8a:47:
e7:c5:d7:27:33:70:47:ec:3d:68:2a:77:9a:3f:bb:
47:a4:83:ae:8b:f0:da:71:ac:47:ac:12:e8:84:f0:
b8:8c:2a:a0:e6:84:f2:20:e0:96:ba:dd:1c:87:af:
83:54:11:4d:cf:44:bd:4a:43:5d:e3:54:9b:a7:d6:
1d:ef:7a:ca:11:3d:f2:61:4e:e9:69:ad:99:37:e4:
ba:38:54:5f:45:74:5e:85:51:3f:d0:73:d1:25:1b:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D7:A6:19:0E:22:72:01:6C:EE:35:F1:BC:BE:94:70:AE:B6:AD:D7
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/WtemGQ4icgFs7jXxvL6UcK62rdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6282::/32
2a0e:d00::/29
2a13:1340::/29
Signature Algorithm: sha256WithRSAEncryption
7e:48:58:3c:4d:0c:61:f1:45:af:88:62:94:26:13:60:54:06:
91:79:e7:8b:78:96:a8:d1:26:bc:73:31:38:04:c2:d7:63:92:
70:ab:f9:1a:e6:0b:90:a2:3a:9b:df:a7:0a:6a:f5:63:9c:2b:
87:bf:fe:c7:9c:ee:08:f8:c1:94:cb:4d:9b:05:6c:dd:70:a3:
df:1f:05:d0:fd:5e:ac:b1:8b:28:5f:49:88:f1:a1:6c:1c:e2:
f5:09:56:4e:09:30:c2:9c:c3:2a:82:69:20:91:bd:dd:81:44:
3b:2d:19:67:57:c3:58:6f:72:57:cd:7f:8f:c7:ae:25:4e:90:
8c:21:5a:ce:79:ad:88:3e:1b:9c:04:53:f5:01:f3:23:65:ba:
14:bc:57:ad:61:9c:44:d4:b4:87:d7:bb:97:03:e0:59:1b:f6:
47:f7:a9:16:3d:6a:b4:a4:73:41:21:70:80:6d:1d:1b:82:62:
d3:83:b8:02:7c:e0:e5:00:ca:31:bf:89:a6:6a:60:da:09:02:
e7:5b:80:c7:17:7d:ba:6e:c5:77:6f:aa:30:54:41:45:dc:87:
62:1f:2c:eb:36:b2:ff:e2:d9:32:bc:75:fd:fb:23:a2:7c:57:
bd:c6:6f:c3:8d:fd:37:c2:25:a0:06:fa:05:00:e7:c4:7f:73:
2e:89:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:23 2026 by rpki-client