Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/rwXEiTUzr2cC_wcUrEu_AWGOTCQ.roa
File: rwXEiTUzr2cC_wcUrEu_AWGOTCQ.roa (raw, json)
Hash identifier: +rsAvEAL9D5NNcOL1/XKA5cCnpcH/4Mvf9lHJhe5Utw=
Subject key identifier: AF:05:C4:89:35:33:AF:67:02:FF:07:14:AC:4B:BF:01:61:8E:4C:24
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019F3766FB14122FE0A5F5CF6AB83EFDE415
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/rwXEiTUzr2cC_wcUrEu_AWGOTCQ.roa
Signing time: Mon 06 Jul 2026 12:28:43 +0000
ROA not before: Mon 06 Jul 2026 12:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 189.13.145.0/24 maxlen: 24
189.13.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:66:fb:14:12:2f:e0:a5:f5:cf:6a:b8:3e:fd:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jul 6 12:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af05c4893533af6702ff0714ac4bbf01618e4c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:21:7e:0a:c8:4e:35:30:5e:ee:75:00:2a:
dd:8c:1e:88:7d:7f:4e:f4:fc:00:7c:e0:de:67:c9:
d9:1c:da:af:2c:69:de:86:38:e4:f9:1c:6b:c3:ec:
d3:5f:7b:41:c2:0e:ee:66:8c:12:41:94:e9:b2:f7:
d7:96:41:db:f4:b6:4b:eb:fb:2c:d4:74:92:89:1f:
d5:b9:3e:81:f9:9c:65:e6:0a:f3:04:fd:13:d8:d8:
55:d2:8e:ca:f9:c3:15:7a:3e:a2:56:a3:cb:a2:ee:
bf:04:32:40:53:aa:4f:1a:55:93:76:92:01:88:78:
4f:e6:fe:c7:bc:ad:dc:a8:b5:fb:6d:3f:eb:d4:fc:
ee:9c:d0:cf:f8:4b:0e:11:c8:4c:82:62:b4:37:81:
b3:e6:51:01:ff:d4:63:86:70:ae:81:98:b7:2a:60:
28:f5:ba:93:90:e9:59:a4:4d:f9:cd:56:45:12:41:
08:84:39:3e:82:36:24:28:86:99:c8:32:cb:4e:51:
b4:23:b2:d5:74:4a:0d:a4:8e:c5:d7:d7:82:6f:77:
61:56:d5:8e:36:a1:e7:fb:95:9b:d3:98:4c:4e:5e:
fe:a8:8e:4a:92:b2:4a:5f:31:f4:4e:80:96:fd:c7:
3f:28:25:43:a3:a2:c8:2b:1a:62:52:a2:ee:99:f0:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:05:C4:89:35:33:AF:67:02:FF:07:14:AC:4B:BF:01:61:8E:4C:24
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/rwXEiTUzr2cC_wcUrEu_AWGOTCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.145.0/24
189.13.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ce:fc:6f:21:cd:dd:14:71:5b:b3:fd:fa:db:e6:b3:d5:f4:
d4:f8:7f:0b:47:df:6e:24:67:f6:53:d4:0e:00:d8:2b:bd:99:
15:5f:81:f7:98:05:2a:67:52:21:da:20:cf:f9:b1:d8:54:58:
72:07:d1:c1:1f:13:59:6a:7c:b4:7c:32:8b:9a:f2:11:53:c8:
4e:c2:96:42:ea:2b:e0:c6:e0:ee:85:2e:3b:ae:73:ef:2b:82:
91:36:93:85:98:11:db:9e:15:03:36:79:d2:5b:80:59:ed:58:
bb:82:3f:3c:ba:28:ea:6f:0a:4a:5f:e1:2b:f7:2f:95:2f:aa:
0c:65:0d:bb:60:d8:e3:8e:e2:9d:fe:88:53:9f:4d:72:7e:40:
9d:28:61:d3:a0:ff:2f:34:40:5c:94:53:00:1f:da:e5:02:12:
22:0e:a4:f3:80:5b:ce:34:72:a3:d6:9e:85:c2:0e:d0:a4:a1:
66:5b:ef:e1:fc:4a:ee:d7:3d:a5:e0:98:5e:95:65:d6:fd:ca:
21:fb:31:44:97:41:70:c3:4e:43:0f:6b:f1:2a:fe:44:90:12:
b8:c0:f6:5b:78:76:dd:33:03:65:8f:02:2b:a3:c3:33:7e:fd:
32:9d:be:5a:56:61:2b:fa:a2:42:83:86:8f:74:9d:b9:57:64:
62:1a:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:17 2026 by rpki-client