Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/A-PKWR8jI8AsAE7vbhOa0qD8q0c.roa
File: A-PKWR8jI8AsAE7vbhOa0qD8q0c.roa (raw, json)
Hash identifier: 4ffQF8+tc7T2Juax7t4+vcRBuCmzG9yC0nVhdjQRr7U=
Subject key identifier: 03:E3:CA:59:1F:23:23:C0:2C:00:4E:EF:6E:13:9A:D2:A0:FC:AB:47
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A06698EE2E6C0F08F4458683BF227ED474
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/A-PKWR8jI8AsAE7vbhOa0qD8q0c.roa
Signing time: Thu 03 Sep 2026 09:28:13 +0000
ROA not before: Thu 03 Sep 2026 09:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 136.176.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:98:ee:2e:6c:0f:08:f4:45:86:83:bf:22:7e:d4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Sep 3 09:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e3ca591f2323c02c004eef6e139ad2a0fcab47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:93:cb:4c:65:31:31:d3:ed:c2:72:5e:2e:
3a:64:9d:d1:62:0b:cf:61:aa:8c:66:a3:4f:71:de:
b1:bb:3a:2b:65:07:07:81:c3:d0:02:c8:47:90:1e:
04:70:68:8f:00:a2:f2:7d:61:8a:6d:64:b8:78:e5:
9e:e8:ee:f1:77:00:83:cf:90:ad:7a:a2:c7:bd:e4:
0e:98:6c:9b:12:63:32:6a:95:35:42:69:77:0e:1b:
de:4f:cc:46:45:41:59:5f:45:1c:79:8b:b5:be:ac:
dc:8d:71:4b:90:0f:47:a1:e5:9d:09:53:ed:78:b2:
51:b6:01:3e:c4:5c:de:38:f5:fd:ad:58:aa:75:de:
9c:31:42:50:aa:e4:36:e6:02:c3:9f:88:5d:49:aa:
db:3d:40:3d:83:79:66:9a:a8:f6:66:4f:4c:98:a7:
49:f9:75:24:3f:4b:94:1a:dd:8b:88:f0:28:fc:64:
57:e4:9f:75:70:03:1d:e6:05:1c:ef:cc:78:ab:95:
19:50:b9:66:ec:2a:4d:14:e3:1f:b1:3f:82:81:42:
e6:94:33:b5:4b:f7:62:7b:88:b3:ef:1b:95:1b:a4:
d8:e9:13:31:b4:82:0f:b7:7f:fe:d4:03:78:74:c5:
21:61:1f:e5:18:28:1b:33:8d:6a:aa:ae:c5:86:14:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:CA:59:1F:23:23:C0:2C:00:4E:EF:6E:13:9A:D2:A0:FC:AB:47
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/A-PKWR8jI8AsAE7vbhOa0qD8q0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:be:c7:79:e4:08:d6:ae:04:1b:9d:c4:28:24:4e:92:51:f6:
45:4c:f8:3e:4e:b0:4e:4d:56:de:9d:37:77:f7:1f:75:d2:29:
b9:4f:ca:c5:90:96:b1:35:bf:b9:e4:b5:ae:ac:a1:71:f8:0f:
ca:a5:af:b6:d5:39:1c:a1:3f:92:64:61:df:82:02:1e:a3:41:
ba:81:ec:5b:99:2d:45:da:24:12:db:50:c5:39:f3:e6:cc:35:
f0:91:ed:a6:4a:92:74:5a:5f:ad:db:fc:3b:8c:0f:a0:76:2f:
a2:b8:e8:d0:ee:fb:4b:99:87:16:d1:35:cc:bc:bc:f1:e1:c0:
c2:e9:ba:d8:cf:04:42:a2:25:3f:49:70:85:8d:85:02:e2:b3:
7d:7f:54:87:d6:ff:6f:1a:72:78:76:14:d1:e8:b7:e9:d9:5c:
d4:65:1d:e8:ff:61:e2:1a:62:79:df:3e:29:7f:d5:d0:16:58:
95:08:d0:fb:64:13:5b:63:59:30:e1:79:c7:cd:9b:25:14:fb:
9d:e4:93:9b:78:a4:2c:6c:a7:1a:b7:fb:6e:31:5e:29:e9:3d:
01:32:35:71:63:82:87:a2:51:1b:49:c9:cd:10:72:68:9b:39:
ca:58:3e:86:73:e8:1b:d1:36:84:4f:0e:68:91:d0:a5:28:b5:
a6:70:52:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBmmO4ubA8I9EWGg78iftR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjY3Yjc0Y2U4ZjJhNGNhMzUwMTYzYTdiM2UxM2MzNzE3
M2M3YWUwHhcNMjYwOTAzMDkyODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2UzY2E1OTFmMjMyM2MwMmMwMDRlZWY2ZTEzOWFkMmEwZmNhYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUaTy0xlMTHT7cJyXi46ZJ3RYgvP
YaqMZqNPcd6xuzorZQcHgcPQAshHkB4EcGiPAKLyfWGKbWS4eOWe6O7xdwCDz5Ct
eqLHveQOmGybEmMyapU1Qml3DhveT8xGRUFZX0UceYu1vqzcjXFLkA9HoeWdCVPt
eLJRtgE+xFzeOPX9rViqdd6cMUJQquQ25gLDn4hdSarbPUA9g3lmmqj2Zk9MmKdJ
+XUkP0uUGt2LiPAo/GRX5J91cAMd5gUc78x4q5UZULlm7CpNFOMfsT+CgULmlDO1
S/die4iz7xuVG6TY6RMxtIIPt3/+1AN4dMUhYR/lGCgbM41qqq7FhhSSsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPjylkfIyPALABO724TmtKg/KtHMB8GA1UdIwQY
MBaAFC72e3TOjypMo1AWOns+E8Nxc8euMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZaN2RNNlBLa3lqVUJZNmV6NFR3M0Z6eDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xOWNlNzUtMTRlMy00NzA3LWFmNDUt
MGY5M2VlMzM1YzIzLzEvQS1QS1dSOGpJOEFzQUU3dmJoT2EwcUQ4cTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xOWNlNzUtMTRlMy00NzA3LWFmNDUtMGY5M2VlMzM1YzIz
LzEvTHZaN2RNNlBLa3lqVUJZNmV6NFR3M0Z6eDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLDIMA0G
CSqGSIb3DQEBCwUAA4IBAQC1vsd55AjWrgQbncQoJE6SUfZFTPg+TrBOTVbenTd3
9x910im5T8rFkJaxNb+55LWurKFx+A/Kpa+21TkcoT+SZGHfggIeo0G6gexbmS1F
2iQS21DFOfPmzDXwke2mSpJ0Wl+t2/w7jA+gdi+iuOjQ7vtLmYcW0TXMvLzx4cDC
6brYzwRCoiU/SXCFjYUC4rN9f1SH1v9vGnJ4dhTR6Lfp2VzUZR3o/2HiGmJ53z4p
f9XQFliVCND7ZBNbY1kw4XnHzZslFPud5JObeKQsbKcat/tuMV4p6T0BMjVxY4KH
olEbScnNEHJomznKWD6Gc+gb0TaETw5okdClKLWmcFJn
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:42 2026 by rpki-client