Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pwkJbMKv4XR8gr6tvH5_XdKAWPU.roa
File: pwkJbMKv4XR8gr6tvH5_XdKAWPU.roa (raw, json)
Hash identifier: Iov+7k8MTTbeOQFUDzqT3YY4DCQBs2kkKNY+O/X0Wh8=
Subject key identifier: A7:09:09:6C:C2:AF:E1:74:7C:82:BE:AD:BC:7E:7F:5D:D2:80:58:F5
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019FD2A3F356638EBB0E1E1530BEF774478F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pwkJbMKv4XR8gr6tvH5_XdKAWPU.roa
Signing time: Wed 05 Aug 2026 15:56:27 +0000
ROA not before: Wed 05 Aug 2026 15:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211895
IP address blocks: 191.44.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:a3:f3:56:63:8e:bb:0e:1e:15:30:be:f7:74:47:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 5 15:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a709096cc2afe1747c82beadbc7e7f5dd28058f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:c5:25:15:72:bd:13:ee:d9:af:86:e6:d1:
7b:70:a6:c9:92:78:52:00:d2:ac:97:1c:14:84:a2:
b2:ff:3b:c4:e1:82:87:77:7f:b6:d8:df:0a:16:38:
33:d7:a9:f5:1c:8c:9c:51:24:f6:78:bd:fc:3e:f2:
b5:88:f3:3c:9f:52:fc:d8:cd:f8:c4:06:e5:95:cc:
0b:f5:5e:00:c3:05:69:d2:c4:12:f4:fd:b9:41:43:
81:9c:c8:a5:49:41:81:ac:74:13:33:a0:48:fb:3f:
7c:4f:5c:7b:0b:d7:52:b5:1f:2e:b8:2c:3f:69:59:
10:32:56:e3:3b:82:b0:4c:86:75:4d:17:35:bd:a2:
fa:f1:32:64:62:df:8b:57:b7:10:38:92:65:6c:38:
8a:a5:a2:9f:2a:d3:7d:f5:97:8f:71:bd:e6:46:e1:
67:30:cb:95:29:a6:58:70:bc:4d:50:0e:77:75:cc:
27:21:05:21:43:00:03:02:4a:03:4d:44:f0:00:b5:
00:d2:3b:54:93:c8:6e:5c:b2:c7:53:2d:bb:59:6e:
37:5d:29:90:58:85:bf:6b:0b:a2:2f:6e:e6:c2:44:
cd:6f:ca:21:09:c9:0a:8b:1e:ac:11:55:9b:46:a6:
89:07:35:c5:12:88:b7:88:b0:42:d9:85:13:06:14:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:09:09:6C:C2:AF:E1:74:7C:82:BE:AD:BC:7E:7F:5D:D2:80:58:F5
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/pwkJbMKv4XR8gr6tvH5_XdKAWPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.121.0/24
Signature Algorithm: sha256WithRSAEncryption
99:79:3b:01:2b:e0:c2:ff:9e:34:7d:b0:e1:01:30:6c:ac:0f:
4a:68:12:0f:78:45:8b:82:8c:f9:9c:1f:76:cc:05:ab:1f:63:
d1:19:81:63:fd:72:44:45:a0:39:d2:35:62:c8:3f:eb:ae:c7:
5f:98:ab:da:77:37:4d:c0:a8:b1:d1:7e:70:d7:54:8a:e4:31:
07:85:4f:1b:a0:60:cc:20:e8:03:36:44:c1:22:f6:30:59:cb:
c4:8d:bd:62:01:a8:b0:e5:ce:4d:da:b3:78:29:44:c1:d8:dd:
ce:b6:b5:b2:ff:39:d6:96:69:7b:fe:eb:99:05:0c:43:89:b8:
74:29:14:c1:74:dc:f6:4c:56:7d:55:61:c6:20:f6:20:4f:89:
c5:a7:b4:d2:1a:65:83:25:8a:9d:e2:2a:a9:f9:df:43:cd:ce:
98:8f:23:5c:0f:a2:8c:4b:b7:2f:34:b7:63:72:4a:2d:39:25:
e5:d0:aa:df:1f:4c:44:18:4d:fe:7d:f6:0d:66:d7:39:e0:a6:
d8:e7:01:11:7d:52:6c:06:64:2e:b8:e4:3d:f1:72:37:dd:f4:
d6:ee:84:db:18:e6:fd:b9:67:8c:de:99:e9:bb:31:92:cb:f2:
58:5d:b6:23:1e:90:64:a3:e4:75:78:af:90:3a:f3:b9:89:31:
17:c5:21:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/So/NWY467Dh4VML73dEePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODA1MTU1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzA5MDk2Y2MyYWZlMTc0N2M4MmJlYWRiYzdlN2Y1ZGQyODA1OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybPFJRVyvRPu2a+G5tF7cKbJknhS
ANKslxwUhKKy/zvE4YKHd3+22N8KFjgz16n1HIycUST2eL38PvK1iPM8n1L82M34
xAbllcwL9V4AwwVp0sQS9P25QUOBnMilSUGBrHQTM6BI+z98T1x7C9dStR8uuCw/
aVkQMlbjO4KwTIZ1TRc1vaL68TJkYt+LV7cQOJJlbDiKpaKfKtN99ZePcb3mRuFn
MMuVKaZYcLxNUA53dcwnIQUhQwADAkoDTUTwALUA0jtUk8huXLLHUy27WW43XSmQ
WIW/awuiL27mwkTNb8ohCckKix6sEVWbRqaJBzXFEoi3iLBC2YUTBhQNawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcJCWzCr+F0fIK+rbx+f13SgFj1MB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvcHdrSmJNS3Y0WFI4Z3I2dHZINV9YZEtBV1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvyx5MA0G
CSqGSIb3DQEBCwUAA4IBAQCZeTsBK+DC/540fbDhATBsrA9KaBIPeEWLgoz5nB92
zAWrH2PRGYFj/XJERaA50jViyD/rrsdfmKvadzdNwKix0X5w11SK5DEHhU8boGDM
IOgDNkTBIvYwWcvEjb1iAaiw5c5N2rN4KUTB2N3OtrWy/znWlml7/uuZBQxDibh0
KRTBdNz2TFZ9VWHGIPYgT4nFp7TSGmWDJYqd4iqp+d9Dzc6YjyNcD6KMS7cvNLdj
ckotOSXl0KrfH0xEGE3+ffYNZtc54KbY5wERfVJsBmQuuOQ98XI33fTW7oTbGOb9
uWeM3pnpuzGSy/JYXbYjHpBko+R1eK+QOvO5iTEXxSFC
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:13 2026 by rpki-client