Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/pKOWDPO1fTw65H8bij1q4LwW5DA.roa
File: pKOWDPO1fTw65H8bij1q4LwW5DA.roa (raw, json)
Hash identifier: gqqlKQD4/w0ZPli3ZBxnB7FjiMA3loRNxbx09LjJSeg=
Subject key identifier: A4:A3:96:0C:F3:B5:7D:3C:3A:E4:7F:1B:8A:3D:6A:E0:BC:16:E4:30
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0F343B9C9562114FF5259BC6BFB0647BB
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/pKOWDPO1fTw65H8bij1q4LwW5DA.roa
Signing time: Wed 30 Sep 2026 17:01:37 +0000
ROA not before: Wed 30 Sep 2026 17:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215633
IP address blocks: 94.184.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:b9:c9:56:21:14:ff:52:59:bc:6b:fb:06:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 30 17:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a3960cf3b57d3c3ae47f1b8a3d6ae0bc16e430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:56:3e:42:d8:c9:70:02:a0:1a:9f:9e:4c:
4c:a8:13:bc:15:54:31:52:41:5f:f1:34:ba:15:c0:
45:e1:47:fa:96:3d:cc:55:a4:09:87:d8:1f:3e:ac:
8f:49:59:17:6e:7e:2d:de:a8:fb:7c:ef:c2:70:59:
90:ed:63:eb:03:f8:e0:4d:c7:95:31:1c:f6:7b:fd:
16:19:1b:12:9b:cb:6f:66:71:3c:6a:1b:26:68:ba:
8e:57:c2:57:28:4e:28:dc:c7:53:3f:b5:fe:dd:45:
2e:1d:69:e6:58:bd:cc:92:8c:12:1b:f9:b3:e8:30:
d8:df:8c:f1:c3:fd:2a:89:cd:d8:31:ba:38:d3:10:
98:93:5c:b7:68:c2:99:f5:d3:f8:71:e2:96:47:59:
52:89:c3:04:db:f4:6f:d0:ae:31:cf:68:ab:75:2a:
d1:c6:48:91:d8:30:cb:68:f5:68:91:b1:0c:77:fa:
23:69:b4:98:4b:82:40:44:4d:93:68:cf:fc:c5:91:
1a:bb:84:bd:01:09:8e:36:bf:47:fb:c0:5e:d0:03:
8f:5a:33:d8:08:1d:c8:5d:c4:f2:be:7b:53:8a:5d:
c5:c6:3f:43:25:f5:53:cb:70:72:db:0b:4e:c3:b2:
7a:77:6c:e3:7b:87:94:e4:b1:11:1f:06:af:5c:9d:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A3:96:0C:F3:B5:7D:3C:3A:E4:7F:1B:8A:3D:6A:E0:BC:16:E4:30
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/pKOWDPO1fTw65H8bij1q4LwW5DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.22.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c1:80:1f:a9:bf:47:66:4c:48:85:5d:34:5d:5e:b5:d8:60:
b2:66:01:56:8d:23:b7:2e:a9:15:d5:0a:92:11:46:3b:08:97:
34:ca:c8:39:5d:d8:60:ae:e5:d8:ad:54:32:48:0b:4c:b3:64:
e9:56:e9:28:87:d0:4f:90:eb:c5:b3:36:3b:ab:1b:89:99:ff:
8b:96:14:21:a4:7c:68:4e:9a:65:a9:2c:72:b1:81:6d:4f:b7:
30:b1:c4:80:fc:cb:5e:38:fa:18:3f:be:7c:89:fb:e7:f4:c2:
06:c5:ee:47:0c:57:15:a9:ad:7f:d4:ef:9c:5a:0b:88:14:8a:
72:20:2a:9b:4b:34:ae:b7:cd:03:72:69:87:e9:f1:7b:4e:07:
26:2e:2a:64:cc:da:ef:4a:da:f5:2a:8c:cd:c9:3f:0e:4f:93:
e0:bb:db:35:34:f6:da:fe:30:0d:4c:94:32:d6:6c:6f:93:88:
dd:28:68:68:0a:19:23:06:13:6b:c4:89:07:b4:ba:7a:dd:57:
29:e9:6e:59:65:da:23:97:8a:54:41:82:60:e3:ac:1e:88:60:
2f:6f:eb:79:3e:08:9a:d4:95:fd:30:28:3c:0c:3c:78:2a:b9:
56:2a:95:d7:65:ef:08:7e:4b:09:68:ad:e2:61:94:f3:6f:53:
68:7d:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 13:37:45 2026 by rpki-client