Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/PWo5IrDGTP5CUtvWkv5H8I0cI3I.roa
File: PWo5IrDGTP5CUtvWkv5H8I0cI3I.roa (raw, json)
Hash identifier: AUJUCG0SClASl56p83IeIUQbLeB79dEr6ZT204LbR+g=
Subject key identifier: 3D:6A:39:22:B0:C6:4C:FE:42:52:DB:D6:92:FE:47:F0:8D:1C:23:72
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FE604A1D6C4EEA777D2EFC5739BEF8A80
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/PWo5IrDGTP5CUtvWkv5H8I0cI3I.roa
Signing time: Sun 09 Aug 2026 10:14:51 +0000
ROA not before: Sun 09 Aug 2026 10:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219113
IP address blocks: 80.86.210.0/24 maxlen: 24
80.86.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e6:04:a1:d6:c4:ee:a7:77:d2:ef:c5:73:9b:ef:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 9 10:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d6a3922b0c64cfe4252dbd692fe47f08d1c2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:9c:2c:bd:b0:51:69:a1:17:bd:32:79:90:
eb:16:ef:0a:26:9c:f3:ed:46:1e:08:99:2c:68:f9:
33:55:b7:70:81:51:43:b2:70:31:bb:2e:b3:2e:ba:
33:61:75:43:ea:fa:05:32:17:c4:bd:1c:32:97:04:
b1:cf:1e:62:51:b5:d5:ef:9a:28:79:1e:f7:48:0a:
b9:bd:cb:01:bc:6f:1f:d0:b1:72:81:c6:67:f7:d4:
cf:21:72:3c:81:43:99:83:f6:66:ab:b8:37:6f:a0:
c6:df:fe:6b:34:39:28:f5:2c:e5:9c:88:d0:02:28:
89:6d:ac:73:43:eb:62:57:07:af:12:ff:48:36:81:
fb:be:00:de:2a:93:aa:77:b2:66:ed:03:aa:03:80:
9a:f2:9b:d2:97:a6:03:94:39:fb:ae:4d:90:4b:84:
3e:54:25:dd:8c:60:f8:f4:05:1b:33:38:34:51:aa:
ce:7e:d9:85:2c:29:2a:14:37:e5:0c:90:21:b5:fc:
4f:30:fe:33:3a:c5:63:fd:80:1e:fd:c5:08:e0:5a:
e4:86:68:db:0b:8b:69:fa:27:26:3b:49:88:0f:7b:
5f:e9:9e:23:52:37:a8:4d:7b:26:b7:01:f3:e5:6a:
48:3e:3f:83:08:73:8e:69:7d:36:19:30:66:18:48:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:39:22:B0:C6:4C:FE:42:52:DB:D6:92:FE:47:F0:8D:1C:23:72
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/PWo5IrDGTP5CUtvWkv5H8I0cI3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.210.0/24
80.86.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c6:7e:3f:4a:0d:07:6a:26:1d:3c:2f:aa:3f:3c:8a:43:91:
d8:58:c3:bf:4e:ed:e6:3b:3f:2e:07:67:a2:b4:1c:68:06:ef:
f4:bf:9f:23:05:da:10:49:32:c3:dc:1f:be:88:ae:56:a5:8b:
04:ec:cf:06:6e:0b:d0:9b:cb:f3:9f:cb:9e:b3:7b:73:a9:a3:
4b:36:6d:91:1d:ff:8f:5d:18:70:93:7e:ae:24:be:85:b2:55:
d0:00:b8:84:5e:2b:86:9d:d3:08:7e:b6:e8:c0:d3:88:a7:ce:
b6:5a:42:67:39:c9:d0:eb:d4:79:9c:a9:97:63:0e:0f:5e:5b:
ee:91:ca:bb:f5:3a:83:6c:ff:ad:71:7f:80:b1:a4:aa:e4:35:
17:85:e8:23:98:1f:9a:3c:45:8a:13:f9:d9:c3:f6:97:5c:ec:
47:32:47:ce:89:eb:e3:49:62:fb:7c:44:72:ef:d9:4c:1c:f1:
4f:31:18:54:bd:a8:cc:ae:8f:6c:f7:dc:1d:46:b0:56:d7:41:
76:1f:d2:7c:5e:50:81:79:1a:5b:19:bd:e3:4e:93:01:22:e8:
d6:de:19:f4:bc:a3:20:09:bd:27:07:2b:8e:ab:60:55:51:e3:
3c:09:71:e8:b4:dd:f7:44:23:1d:c5:ac:15:ac:da:4b:80:c9:
27:b4:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:23 2026 by rpki-client