Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pWhNlZcBYUsZ7lrxD6bQfiXYGiA.roa
File: pWhNlZcBYUsZ7lrxD6bQfiXYGiA.roa (raw, json)
Hash identifier: Afemqz+xVKy2M981pRYbmgLzwkzFl2NhfXSPR5DTBkA=
Subject key identifier: A5:68:4D:95:97:01:61:4B:19:EE:5A:F1:0F:A6:D0:7E:25:D8:1A:20
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019F3BDE6328F8AC580E81283EBF282E213A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pWhNlZcBYUsZ7lrxD6bQfiXYGiA.roa
Signing time: Tue 07 Jul 2026 09:17:37 +0000
ROA not before: Tue 07 Jul 2026 09:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401838
IP address blocks: 159.148.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:de:63:28:f8:ac:58:0e:81:28:3e:bf:28:2e:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 7 09:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5684d959701614b19ee5af10fa6d07e25d81a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:7c:8a:1c:05:a0:ed:26:89:e4:81:c0:17:
d4:65:20:2b:3f:8c:06:91:90:e9:ea:fd:47:d6:11:
4e:50:ef:03:06:d5:95:6f:b8:f1:69:d2:dd:84:77:
44:d6:12:36:ab:1e:a3:05:9f:76:ef:5e:f0:b7:4a:
7b:02:b1:c7:fa:6d:99:a5:03:9a:e6:59:1a:fc:76:
6e:ea:49:39:36:cb:e0:39:9a:73:82:c3:6c:9e:08:
c7:1d:16:ca:2f:e3:d8:88:32:4c:d3:41:fa:1c:67:
80:6f:87:11:be:7d:d2:21:69:bb:47:e7:89:83:50:
7b:ac:e3:fa:2b:b5:41:bd:42:e6:87:ac:17:a9:e6:
e1:c3:8a:8e:91:af:01:b9:d7:f0:ce:f1:aa:c1:af:
df:40:91:a2:5b:27:28:44:8e:ae:e7:68:80:e1:ef:
21:97:28:11:5d:59:8a:a0:08:68:ac:bc:79:f9:41:
88:fc:ed:3b:b7:76:d5:4a:71:cf:89:02:b2:b9:5a:
03:22:25:5b:5b:30:4e:51:0b:69:5d:27:1c:5d:dc:
b5:4d:7f:2a:e6:0a:aa:36:f1:e0:38:2f:b6:47:80:
d4:41:1d:c8:25:60:3b:36:58:52:c6:b0:ae:8d:94:
17:64:ff:81:58:89:1a:07:38:08:c1:e8:8b:db:c4:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:68:4D:95:97:01:61:4B:19:EE:5A:F1:0F:A6:D0:7E:25:D8:1A:20
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/pWhNlZcBYUsZ7lrxD6bQfiXYGiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:43:76:0c:fd:c0:c8:76:9a:d8:1d:eb:e4:8a:f6:24:0e:7c:
3f:93:b5:a8:b4:23:4d:7b:f8:db:3b:68:fb:59:15:07:37:91:
18:85:66:2d:b0:1f:e7:4d:c3:3d:8f:ff:96:6d:b4:b2:da:82:
21:15:0b:65:95:ab:b8:1c:28:67:b2:02:48:fd:fc:b8:d7:53:
cc:c6:12:37:27:2c:dc:32:7a:00:23:12:1e:56:0e:5d:0c:5e:
69:ca:6d:4b:7e:76:62:6d:ef:2d:fe:33:94:07:dd:2a:1f:0e:
fa:e6:86:f1:c7:f0:82:4e:6c:9d:ef:64:b7:99:d1:98:92:8c:
0a:ee:29:44:28:9a:0e:43:4f:22:97:ac:95:70:fa:77:a0:71:
f6:b3:7b:51:92:6d:95:95:60:84:c6:ec:bc:3f:9a:06:3d:0a:
93:1f:04:9d:ac:18:14:fc:53:45:3b:e0:6f:8c:8a:45:28:24:
ce:55:e2:62:af:b6:78:1f:f8:b3:50:11:8c:b5:95:c7:65:46:
b7:15:b9:f2:ed:7d:dd:5a:3c:0a:da:bb:42:57:bc:de:2f:de:
61:fe:15:79:a1:cc:77:7a:53:e2:aa:9d:a9:83:3b:1d:f9:58:
70:c9:9c:9f:a4:b4:ac:55:e6:5d:e6:38:0a:26:6a:73:6b:e1:
c3:f3:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:45 2026 by rpki-client