Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RWLeWtgOE8o0B2fSjzFrOr6ctgU.roa
File: RWLeWtgOE8o0B2fSjzFrOr6ctgU.roa (raw, json)
Hash identifier: 13UdZLs6/7comwnhpJV0Rc9sShXAjenHgO26gVcFfA4=
Subject key identifier: 45:62:DE:5A:D8:0E:13:CA:34:07:67:D2:8F:31:6B:3A:BE:9C:B6:05
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A014AD2A196509314173FDE560FB27A21B
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RWLeWtgOE8o0B2fSjzFrOr6ctgU.roa
Signing time: Tue 18 Aug 2026 11:41:27 +0000
ROA not before: Tue 18 Aug 2026 11:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 84.232.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:ad:2a:19:65:09:31:41:73:fd:e5:60:fb:27:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Aug 18 11:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4562de5ad80e13ca340767d28f316b3abe9cb605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:c2:3f:d2:08:08:fd:66:94:1a:ef:76:62:
9c:1e:e7:08:87:fa:6a:7b:67:61:fc:5f:a7:b6:86:
56:10:5f:f1:19:a6:39:c8:64:a2:b3:86:d3:f5:ec:
44:00:de:07:3c:9e:4e:d8:b7:0c:65:ab:e5:46:c7:
d8:06:ea:cf:d8:d9:19:20:33:70:1a:99:34:4a:6a:
a0:19:43:a7:af:5c:5e:20:fd:54:f6:ac:38:58:f5:
01:3d:0e:9d:08:82:3d:3d:4f:9d:51:92:1d:2b:bb:
6d:c1:68:0f:5d:f4:4d:af:6b:3e:3e:d6:ec:09:1f:
a5:d9:19:99:30:32:e3:8f:b5:82:6e:96:52:63:4a:
36:f2:03:c4:36:98:d6:85:ce:bc:7f:20:da:a7:ec:
6a:8d:0e:df:65:ac:14:b7:8c:85:20:f7:5d:00:c8:
7e:9a:1b:c0:9d:b3:3d:6e:8a:12:c3:9b:43:ad:cc:
4b:cb:37:29:94:7e:1e:94:65:4b:50:c0:83:a3:2a:
af:9b:a9:76:37:7b:f4:b3:ba:e0:6d:a9:10:ac:31:
74:a2:bf:b6:d0:ae:67:57:e0:d8:85:b3:1c:6d:84:
d6:93:0a:52:6b:3a:a8:1e:3a:d3:cc:5f:a8:55:5b:
ef:b6:5c:fa:4c:bf:fa:3f:bb:dd:e6:5a:41:f5:ba:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:DE:5A:D8:0E:13:CA:34:07:67:D2:8F:31:6B:3A:BE:9C:B6:05
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/RWLeWtgOE8o0B2fSjzFrOr6ctgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3c:7f:83:a7:9d:54:0e:f0:49:aa:2a:f7:2e:8a:a2:f2:d6:
29:47:9a:ac:e9:a0:78:a6:d2:2e:d5:f1:ec:de:7e:d9:e6:8a:
47:69:0b:27:e5:db:4a:ee:2a:71:eb:91:80:b2:81:21:fd:ef:
86:10:71:13:e7:1d:44:e1:b4:2c:b9:17:6b:b1:9e:2d:7a:fe:
04:3b:56:11:89:8f:0a:2a:f7:17:34:cd:a4:48:00:4f:10:83:
2e:f1:ce:7b:3e:b8:52:e3:3d:59:38:3e:7b:e2:8e:53:c7:1f:
21:a4:c8:07:69:75:c7:3f:52:5a:fd:9f:1f:4f:11:74:c7:db:
77:87:8d:51:47:c4:06:ff:87:f3:3c:a2:0b:15:0a:6b:60:39:
69:a4:33:f1:28:f5:11:ec:06:6a:cc:26:a5:6e:a1:4b:45:31:
9e:bc:5d:a8:45:d5:6e:8e:32:53:e3:34:29:15:f3:06:50:73:
19:f8:fd:1f:17:43:7e:80:f4:b6:a9:61:d7:4e:cb:05:83:1e:
b0:4f:f7:1f:8e:e6:8d:ee:ec:42:f6:a7:87:83:6f:d7:ee:9c:
16:36:f7:47:bd:9f:b9:8e:fd:c9:4a:47:3d:3c:bf:6b:70:4f:
1d:b7:f5:37:f2:1b:83:a8:35:c9:ca:30:3a:34:3b:f9:13:a9:
8c:c9:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 05:16:34 2026 by rpki-client