Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AWPFncfASof9UmgtmKs0YN8cliQ.roa
File: AWPFncfASof9UmgtmKs0YN8cliQ.roa (raw, json)
Hash identifier: zAYTVAVDS4Q8gNGe9Fxy0r6yVBNDTEzr7ZcSBy05V4Y=
Subject key identifier: 01:63:C5:9D:C7:C0:4A:87:FD:52:68:2D:98:AB:34:60:DF:1C:96:24
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 01A10CA0AA65A7AA9F60ED93F436709CC768
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AWPFncfASof9UmgtmKs0YN8cliQ.roa
Signing time: Mon 05 Oct 2026 15:13:38 +0000
ROA not before: Mon 05 Oct 2026 15:13:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219001
IP address blocks: 91.243.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:a0:aa:65:a7:aa:9f:60:ed:93:f4:36:70:9c:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Oct 5 15:13:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0163c59dc7c04a87fd52682d98ab3460df1c9624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:b5:ea:2e:7b:a6:51:ef:95:76:bb:a8:ca:
57:98:0b:a4:b0:6a:36:cc:f3:19:7e:39:5b:0a:c2:
a8:f7:8c:fd:51:4d:48:13:b5:f5:fd:0d:0c:30:83:
96:42:fb:67:9a:05:42:5d:ea:54:68:aa:d2:ba:ef:
3e:74:9e:15:69:07:2b:a3:b2:f3:0d:81:72:98:90:
24:c7:8c:10:c7:c3:d8:19:79:3c:42:4d:03:46:fa:
db:39:fd:e8:78:be:6f:70:92:74:5f:30:0f:7e:9d:
83:90:ff:73:1f:4b:9d:4e:1d:e4:86:32:37:74:97:
74:9e:6e:3b:93:a6:33:b0:58:94:44:39:49:d0:24:
fa:b9:84:3d:0a:27:4b:6e:4c:94:cb:bd:1f:09:de:
78:e3:d3:8f:2a:6f:1b:1c:07:03:b9:ec:a5:8f:9f:
d0:79:d1:4b:e8:f4:ce:38:e5:1a:d9:97:23:48:a1:
dc:4e:10:d9:4d:e6:48:76:74:e1:86:0d:84:45:53:
c7:50:1f:18:5f:d0:3a:6d:41:ef:fd:6d:60:d8:c3:
b7:ce:26:17:82:a9:a7:a1:c3:aa:f9:50:61:bd:97:
8f:56:6c:4a:e8:9a:1e:44:da:81:ae:b8:41:68:5e:
43:96:cb:62:ba:6d:35:28:55:7b:b9:c2:97:5c:d6:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:C5:9D:C7:C0:4A:87:FD:52:68:2D:98:AB:34:60:DF:1C:96:24
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/AWPFncfASof9UmgtmKs0YN8cliQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cd:22:f1:1f:e8:94:51:f6:f3:fb:a4:46:16:0a:68:11:ad:
ce:5e:fd:0f:9d:55:da:f5:da:68:57:1d:43:79:60:71:18:b3:
1c:8e:04:a9:9c:7e:99:52:e4:16:20:d9:24:ad:de:55:d2:17:
f8:34:74:22:63:d0:63:fe:cd:f4:14:a0:7b:dd:d1:5d:9f:7c:
47:c2:de:30:8c:d6:5c:c3:0e:c9:41:05:d5:52:18:76:87:8d:
cf:2c:59:2f:1d:2b:34:df:90:23:14:69:7f:42:16:fd:f3:8f:
80:5a:35:d0:9b:83:42:70:9a:44:29:7d:8b:75:f8:7c:a6:f3:
cf:46:67:54:53:e2:61:b7:84:ac:1f:18:e9:4f:8a:f7:4e:33:
bb:eb:ea:f4:05:f5:1f:d6:52:b7:5b:c9:8b:a7:ee:80:32:49:
88:c0:24:22:3e:7b:54:36:33:11:f7:2a:e1:66:88:66:1d:77:
06:c3:3c:f3:d1:bc:99:37:17:22:4f:1b:05:a4:9c:2e:3e:63:
a5:89:91:f9:a4:48:39:55:d5:bc:3d:28:aa:30:af:ed:65:30:
d0:25:22:c9:dd:84:c8:c1:2e:44:0c:cf:4a:80:19:b0:17:26:
61:e3:0a:79:4e:cc:ce:0a:d3:f2:be:c3:bf:38:b4:ac:cf:11:
52:93:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:39:55 2026 by rpki-client