Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pLWxKElNY5OK-784nWEN2jwpdxQ.roa
File: pLWxKElNY5OK-784nWEN2jwpdxQ.roa (raw, json)
Hash identifier: 0LKZA0KxTRVPYyd3ngFqUnRlUHwAATWmSrpLcXXitNk=
Subject key identifier: A4:B5:B1:28:49:4D:63:93:8A:FB:BF:38:9D:61:0D:DA:3C:29:77:14
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 01A139B91504B5A241623F2DFADD6ADB267C
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pLWxKElNY5OK-784nWEN2jwpdxQ.roa
Signing time: Wed 14 Oct 2026 09:23:13 +0000
ROA not before: Wed 14 Oct 2026 09:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35704
IP address blocks: 81.160.8.0/24 maxlen: 24
2a02:11ff:400::/46 maxlen: 46
2a02:11ff:404::/46 maxlen: 46
2a02:11ff:408::/46 maxlen: 46
2a02:11ff:40c::/46 maxlen: 46
2a02:11ff:410::/46 maxlen: 46
2a02:11ff:414::/46 maxlen: 46
2a02:11ff:418::/46 maxlen: 46
2a02:11ff:41c::/46 maxlen: 46
2a02:11ff:420::/46 maxlen: 46
2a02:11ff:424::/46 maxlen: 46
2a02:11ff:428::/46 maxlen: 46
2a02:11ff:42c::/46 maxlen: 46
2a02:11ff:430::/46 maxlen: 46
2a02:11ff:434::/46 maxlen: 46
2a02:11ff:438::/46 maxlen: 46
2a02:11ff:43c::/46 maxlen: 46
2a02:11ff:440::/46 maxlen: 46
2a02:11ff:444::/46 maxlen: 46
2a02:11ff:448::/46 maxlen: 46
2a02:11ff:44c::/46 maxlen: 46
2a02:11ff:450::/46 maxlen: 46
2a02:11ff:454::/46 maxlen: 46
2a02:11ff:458::/46 maxlen: 46
2a02:11ff:45c::/46 maxlen: 46
2a02:11ff:460::/46 maxlen: 46
2a02:11ff:464::/46 maxlen: 46
2a02:11ff:468::/46 maxlen: 46
2a02:11ff:46c::/46 maxlen: 46
2a02:11ff:470::/46 maxlen: 46
2a02:11ff:474::/46 maxlen: 46
2a02:11ff:478::/46 maxlen: 46
2a02:11ff:47c::/46 maxlen: 46
2a02:11ff:480::/46 maxlen: 46
2a02:11ff:484::/46 maxlen: 46
2a02:11ff:488::/46 maxlen: 46
2a02:11ff:48c::/46 maxlen: 46
2a02:11ff:490::/46 maxlen: 46
2a02:11ff:494::/46 maxlen: 46
2a02:11ff:498::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:b9:15:04:b5:a2:41:62:3f:2d:fa:dd:6a:db:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Oct 14 09:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4b5b128494d63938afbbf389d610dda3c297714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:7d:15:ab:33:17:d4:24:df:ab:97:9d:62:
51:77:24:81:c3:94:5a:ae:14:70:3a:78:00:50:ed:
23:21:0e:14:fe:f9:5f:ed:21:e8:6a:ed:09:0d:e7:
6d:fc:70:ab:0b:63:d3:ca:55:0d:1a:1c:c4:49:1c:
44:2a:f6:30:32:be:c8:45:e4:22:13:0b:1d:fe:1e:
9e:ab:88:39:ad:91:7f:7d:b3:f8:03:96:0a:11:3a:
e6:2d:45:cf:ee:f0:d3:fc:8c:7d:37:eb:69:b8:a0:
8b:67:19:cd:16:9d:af:43:5a:2e:4d:a1:9f:0e:19:
b7:ef:72:22:df:8e:af:16:e2:98:27:a0:f9:69:b4:
46:a7:86:5b:45:df:ac:48:cc:ac:1f:a1:93:8e:23:
eb:00:ed:34:45:84:d6:2f:7a:c9:1c:52:c3:4d:e2:
98:0c:43:27:23:52:cb:40:2c:ff:47:d1:df:39:8c:
30:eb:81:b9:2a:ea:e2:6e:44:b7:e7:95:f6:f9:0a:
ff:bc:12:1d:f6:f3:b6:84:50:fa:27:86:d9:75:e9:
d6:34:99:59:79:48:37:a2:57:d1:f4:02:ae:2e:b3:
5e:d2:fb:3b:79:43:fc:44:79:32:bc:ee:65:6d:d8:
76:99:aa:eb:e2:3c:f2:64:3b:79:66:bf:a2:ed:d1:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:B1:28:49:4D:63:93:8A:FB:BF:38:9D:61:0D:DA:3C:29:77:14
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pLWxKElNY5OK-784nWEN2jwpdxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.160.8.0/24
IPv6:
2a02:11ff:400::-2a02:11ff:49b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
da:59:44:8d:5b:45:63:0d:79:cc:4c:21:42:7d:d5:83:7c:f9:
99:7e:59:72:41:d9:6d:3e:4d:a7:b1:b7:4a:f9:9e:08:59:32:
14:67:a4:4c:90:b5:5e:39:c5:52:6c:9e:e5:60:79:fd:1c:6d:
d0:87:78:e3:ae:e4:9f:8f:22:f0:ff:58:44:01:1f:ec:f7:49:
ee:7b:d1:a0:7d:d9:d7:11:f7:0b:7a:00:d0:e9:00:d2:6e:7d:
2b:68:d3:01:d3:ba:2c:85:a3:7b:4a:3c:5a:87:b3:75:dc:1c:
a7:03:e5:6b:c0:1c:12:33:25:7e:a2:9e:44:a6:a9:d4:fa:b7:
7c:bd:ff:dc:fb:e4:12:62:9d:26:3a:14:cb:c0:4d:f3:76:63:
3c:63:68:08:80:5c:86:da:f7:68:28:d7:a3:0b:93:83:03:3c:
f2:81:29:c7:6d:fe:a5:aa:d3:78:d7:f5:6b:18:25:8d:86:0d:
5c:f1:9b:35:32:8d:91:2f:ee:06:89:48:44:c2:af:85:a6:7c:
49:f1:0c:16:ad:70:71:06:a2:91:82:d8:77:04:e3:f3:a5:59:
57:72:48:32:0e:8d:77:6c:2e:91:ec:99:00:a0:d7:bc:b2:9e:
a8:d7:3a:ba:af:a8:bb:04:1a:64:fd:0c:c7:e8:a6:31:d7:43:
da:79:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:25 2026 by rpki-client