Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa
File: RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa (raw, json)
Hash identifier: YWHdoHexy9yOia35AdSs7CrATv21q3km7UUVFr0uFQg=
Subject key identifier: 45:63:59:25:21:22:05:F9:F5:C0:1F:68:20:37:CF:3E:FF:BA:88:35
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A03A8D83CFE719BF10B0FC2078BF064FA5
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa
Signing time: Tue 25 Aug 2026 20:12:27 +0000
ROA not before: Tue 25 Aug 2026 20:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 213.189.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:8d:83:cf:e7:19:bf:10:b0:fc:20:78:bf:06:4f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 25 20:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45635925212205f9f5c01f682037cf3effba8835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:0e:56:b6:84:3e:55:66:91:62:98:6c:40:
e4:de:52:b5:5e:94:3d:6f:f4:0b:00:6d:91:29:53:
a4:08:41:3c:a2:fd:9b:cd:55:9a:f6:26:f2:c5:2a:
24:5f:26:20:c3:52:28:b0:73:ce:8d:12:74:27:e9:
ab:a4:3c:3d:aa:74:ed:2c:aa:77:e0:e1:a5:3b:19:
a4:83:4f:a2:0d:b6:84:cc:c7:d3:2a:40:c4:b2:67:
bf:d2:29:43:f8:81:95:c2:1a:e8:45:cd:f1:15:ea:
af:85:83:95:3a:37:bd:e0:3e:e5:7c:72:2a:e9:95:
0b:c1:4b:96:0e:72:e5:ec:d3:f5:54:6c:37:09:29:
0a:04:1d:da:bf:57:b1:b5:0b:c1:5b:0a:24:20:3a:
8f:58:0c:6d:3f:87:4f:ea:38:e8:99:bd:c1:a6:54:
0c:80:a9:15:60:8a:75:e3:da:bb:96:4e:c0:a3:59:
27:e8:90:96:f0:4d:25:ea:83:95:15:26:7f:e2:7b:
0a:9c:1e:0a:81:8c:16:20:31:72:0d:ae:68:8c:54:
16:7b:45:af:8d:69:6c:a8:8f:f4:86:cd:01:41:ed:
0d:b5:c1:29:45:0b:9d:e4:54:bf:0d:9f:07:23:2a:
1f:af:b3:4b:c4:e5:63:96:91:37:9c:cc:eb:ec:e8:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:59:25:21:22:05:F9:F5:C0:1F:68:20:37:CF:3E:FF:BA:88:35
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.19.0/24
Signature Algorithm: sha256WithRSAEncryption
87:57:06:37:3d:47:f8:1d:3e:66:42:13:8c:75:31:d0:38:58:
1b:7b:f1:56:ab:ba:6f:ce:3c:e2:fb:c6:21:4f:ce:0b:7e:63:
21:42:fb:6c:eb:75:33:ec:80:f1:7e:53:5a:f7:bb:cd:ca:f7:
d9:36:a4:e7:39:e1:33:31:8c:c5:c0:cb:3d:9d:4f:9a:bf:a4:
00:ec:74:08:54:00:b1:e2:cc:b8:cc:2f:4f:e4:83:5c:78:bd:
fb:94:35:fe:f3:de:c5:e8:d4:e8:68:00:f4:52:af:bf:5e:85:
f5:b3:d2:01:6c:bb:f5:b8:a2:ac:cf:93:8f:74:61:f1:de:06:
ae:38:df:fe:78:48:fa:94:2c:f1:4b:16:b9:dc:f7:d6:0c:00:
f3:2a:07:02:fe:d8:23:83:16:71:b1:22:5b:3e:38:71:9e:e0:
52:f1:2d:cb:83:8a:97:5c:30:68:2b:81:fd:e0:f8:72:40:7e:
72:7c:66:ad:34:a5:67:62:36:dc:56:3f:bb:97:67:ab:c9:0f:
5e:2a:a4:49:e8:83:36:a8:fd:10:8b:ba:7c:72:09:13:56:86:
d2:12:a9:bd:b9:3e:6d:9c:22:c8:48:4f:ee:e7:d1:64:24:d8:
f9:a6:c2:21:ca:5a:5e:dc:bc:ed:47:96:5c:44:0f:a9:90:62:
da:78:dd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:22 2026 by rpki-client