Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2WWBKcpm3vgFVdKaLtgTapymY8.roa
File: G2WWBKcpm3vgFVdKaLtgTapymY8.roa (raw, json)
Hash identifier: kYWj+kOCn779KAQrQRimCJQ86mU+W0qtgM0P6tSGAkg=
Subject key identifier: 1B:65:96:04:A7:29:9B:7B:E0:15:57:4A:68:BB:60:4D:AA:72:99:8F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019CA5C06C4957235D4EDAB6CBADACA77DB3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2WWBKcpm3vgFVdKaLtgTapymY8.roa
Signing time: Sat 28 Feb 2026 19:36:17 +0000
ROA not before: Sat 28 Feb 2026 19:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202412
IP address blocks: 45.132.180.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a5:c0:6c:49:57:23:5d:4e:da:b6:cb:ad:ac:a7:7d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 28 19:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b659604a7299b7be015574a68bb604daa72998f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:6c:ee:2a:db:75:a7:9e:2d:f6:fb:8c:a1:
62:82:83:d1:62:2b:e0:3f:6b:c1:5b:9a:a2:0b:00:
46:2b:8d:7f:b2:ea:5f:da:26:d5:5c:15:11:b6:a1:
57:4a:22:b3:54:13:96:24:a8:72:c1:d5:63:1b:0c:
3b:71:31:46:63:c5:29:f8:0f:2d:0c:12:94:87:98:
e7:ff:b8:f2:39:0b:c4:fd:b8:53:34:f7:2d:2f:b3:
64:55:91:1c:f4:98:94:23:49:69:6d:85:e0:38:fb:
d3:05:c0:9a:04:a2:ca:5f:4b:24:e8:a6:2e:a4:a0:
2d:15:05:5e:8b:6d:b0:9e:c9:a9:c1:da:dc:f3:11:
95:a9:fb:95:88:cf:04:5a:b2:d4:6e:49:a5:9f:c6:
9e:f8:d6:35:fb:90:02:f9:16:38:25:0d:98:24:41:
06:da:de:86:27:f1:8f:61:30:48:db:07:b3:24:58:
b8:5e:99:cd:66:f7:8b:45:37:b6:43:c7:16:7c:84:
a9:35:f4:e1:af:4c:de:96:ef:ee:d1:17:c1:1d:3f:
af:4c:a4:fa:6e:7e:43:e0:4e:b0:b0:41:55:c9:4a:
f4:29:74:a7:4a:b2:d6:6b:58:9d:e9:10:14:f9:2a:
9f:19:4a:be:77:35:1a:67:31:33:9b:51:20:af:04:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:65:96:04:A7:29:9B:7B:E0:15:57:4A:68:BB:60:4D:AA:72:99:8F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/G2WWBKcpm3vgFVdKaLtgTapymY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
146.19.125.0/24
193.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8f:72:e6:08:f3:77:7f:80:93:6b:14:8e:6d:b3:43:33:2a:
ec:54:fb:d1:9f:cf:00:6d:9a:41:8e:86:01:67:2d:74:02:e1:
59:4c:3a:39:b5:f8:64:cd:97:36:18:c8:9a:63:1e:61:9f:7e:
1e:c5:35:31:6f:e8:a6:ee:5d:f0:ba:ac:43:8a:f4:45:58:88:
81:18:ff:38:dd:bf:dc:b0:06:90:49:f2:b9:75:3a:26:1f:6a:
02:fb:51:21:7d:a5:e2:24:b7:ec:ee:6b:16:e4:81:d7:1e:56:
73:56:dd:22:b1:77:36:6d:2a:01:a4:25:6f:8f:f2:14:20:f5:
fd:87:43:4a:ed:82:27:cd:c4:7b:34:4c:ac:92:b6:62:5d:4c:
7e:39:31:e1:ff:52:11:65:3a:53:61:15:d2:11:b6:00:38:62:
7a:97:bb:b1:81:cc:2b:b5:72:c8:80:8f:f5:5e:f7:59:ca:88:
a8:9c:96:03:3d:49:bc:95:82:22:41:71:c0:e5:5d:cd:d7:d1:
27:c0:0f:42:29:38:a1:ea:8e:5d:4a:0e:a3:a1:08:15:bf:66:
a9:f3:3a:4a:17:7e:99:dd:40:15:7d:e3:48:ef:84:e9:a0:05:
03:80:92:48:6b:e0:0b:af:ef:81:1d:e1:65:12:58:4a:f0:16:
9f:7f:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 23:32:36 2026 by rpki-client