Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pa0maz8RzdAqPBYglEiUl6FWmh0.roa
File: pa0maz8RzdAqPBYglEiUl6FWmh0.roa (raw, json)
Hash identifier: bOE0FSBYTEFSINx3pLoAdJvRYXXPgXPd0w77jq5s09o=
Subject key identifier: A5:AD:26:6B:3F:11:CD:D0:2A:3C:16:20:94:48:94:97:A1:56:9A:1D
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019FBC8141C283A782139101D46701EEDDC9
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pa0maz8RzdAqPBYglEiUl6FWmh0.roa
Signing time: Sat 01 Aug 2026 08:46:55 +0000
ROA not before: Sat 01 Aug 2026 08:46:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47817
IP address blocks: 79.132.222.0/24 maxlen: 24
213.195.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bc:81:41:c2:83:a7:82:13:91:01:d4:67:01:ee:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Aug 1 08:46:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5ad266b3f11cdd02a3c162094489497a1569a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:f2:ed:bb:d1:23:5b:58:5a:61:29:09:1a:
ab:4f:84:be:92:e9:80:fb:54:29:ec:7d:64:bc:56:
20:e1:ed:83:f6:ac:67:c7:84:10:c9:06:79:33:13:
53:cc:1e:8f:9c:50:01:5e:0c:47:2c:c4:b1:ad:e3:
c2:a9:18:2d:7b:8e:40:7b:12:26:03:44:11:42:86:
f7:19:c6:c9:1b:2e:c3:fc:c0:6b:81:b0:08:74:6f:
07:d0:89:46:71:e3:3c:79:cd:8f:5c:0f:39:b6:74:
66:25:e0:b7:46:d8:a3:1d:07:3f:4c:2b:1c:99:96:
94:79:b0:54:99:2c:5d:ed:dd:c0:0b:3a:b5:bc:55:
d6:3a:52:97:4f:f9:b7:03:b6:02:6b:11:95:bd:39:
d4:74:15:96:45:40:df:ad:e5:f3:a8:c1:c9:06:23:
17:af:f2:08:07:2b:06:6b:1f:33:53:3d:34:19:32:
34:a2:24:b7:c5:2b:2b:67:c7:4a:6e:e7:a6:4b:5c:
38:1f:7a:31:b3:0f:ce:ff:07:7d:3a:78:38:8c:12:
17:85:ca:b4:04:29:6b:39:ad:41:5b:a0:17:d9:bb:
11:b5:0f:cb:d7:6f:91:09:69:4a:83:5e:bc:6a:3e:
99:b7:f5:d2:21:28:80:8b:a5:ad:69:cc:b3:8f:1a:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:26:6B:3F:11:CD:D0:2A:3C:16:20:94:48:94:97:A1:56:9A:1D
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/pa0maz8RzdAqPBYglEiUl6FWmh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.222.0/24
213.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:d9:86:75:e3:4f:08:99:71:ce:21:b7:4f:65:a8:09:dc:
05:6b:13:0b:10:d2:1f:dd:e0:0b:ae:b0:01:db:23:e2:27:98:
ab:81:66:44:8d:f5:1d:cb:78:da:2f:e6:bc:f3:97:fa:d4:7b:
97:bc:53:24:2c:0d:68:e5:77:67:5d:49:dc:52:7c:47:fd:1d:
ff:0b:32:b7:43:8b:37:18:c3:6a:2f:9d:21:98:23:98:ca:bf:
fe:df:6e:f8:11:7b:78:da:da:1f:4f:8f:1d:f7:b3:fe:d4:37:
5a:05:07:38:2a:3f:c4:0b:79:c6:98:07:24:ef:e6:bb:d2:a0:
b3:2f:d5:11:a8:d1:6c:0e:84:12:27:83:b0:da:9f:2a:ff:38:
90:91:10:99:85:2a:9c:b8:c8:79:6d:5e:3a:52:ca:24:c8:c0:
13:50:cd:33:b0:3e:c1:b4:d7:be:84:e6:0e:52:e2:04:28:75:
15:16:2e:c8:64:77:81:1d:e5:6e:c9:60:97:42:a0:9c:e9:7b:
ba:9b:a5:67:2c:09:c2:20:4b:18:40:52:0d:f2:3c:3a:32:55:
92:5f:67:8b:a9:4f:44:78:eb:ed:4d:0d:30:27:5a:4d:28:d4:
6a:b6:83:4d:31:80:5e:d6:31:3e:df:c2:71:8c:31:73:8a:c8:
f0:4c:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:20:49 2026 by rpki-client