Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/RwZ9F-pdINA65vVgGDGApgyfhto.roa
File: RwZ9F-pdINA65vVgGDGApgyfhto.roa (raw, json)
Hash identifier: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=
Subject key identifier: 47:06:7D:17:EA:5D:20:D0:3A:E6:F5:60:18:31:80:A6:0C:9F:86:DA
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019CB3009A0FE23075A3919375A9471320FA
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/RwZ9F-pdINA65vVgGDGApgyfhto.roa
Signing time: Tue 03 Mar 2026 09:21:26 +0000
ROA not before: Tue 03 Mar 2026 09:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212087
IP address blocks: 79.171.222.0/23 maxlen: 24
152.89.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:00:9a:0f:e2:30:75:a3:91:93:75:a9:47:13:20:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Mar 3 09:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47067d17ea5d20d03ae6f560183180a60c9f86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:54:30:09:52:9b:73:d0:31:06:54:a4:6a:
f7:ab:f7:6a:cc:8c:c2:46:d5:ee:97:ce:eb:80:30:
ca:6b:aa:4c:4b:dd:dc:c5:6f:d7:64:26:e3:4f:df:
bb:8d:47:80:ad:5f:f0:92:ec:e1:e4:a6:36:d8:34:
c8:21:ae:c8:3b:c6:ef:72:d7:08:32:1c:cd:13:29:
b2:9f:42:13:10:f1:27:7b:10:de:b0:56:ae:24:fb:
3c:c8:c8:0b:6e:be:7b:3c:93:3a:ae:39:b7:12:54:
5d:08:15:ab:68:67:a6:99:93:b2:68:92:62:4f:52:
3a:4b:9f:9c:12:92:b0:ac:85:e3:a5:2a:ba:98:b9:
57:c2:d1:2c:36:1f:5d:63:aa:22:fe:71:45:52:37:
96:08:9a:95:98:26:a9:a9:90:35:3f:a0:f7:15:e0:
20:b4:71:9b:a6:a6:ea:a7:0b:cb:2c:e0:7b:25:f4:
b2:a5:6b:d9:dc:b2:1b:2e:18:1e:d7:c9:9e:81:03:
bb:df:4e:7d:20:b5:0f:92:be:56:51:15:f6:44:e1:
43:ed:03:bf:a4:fd:ff:71:ea:46:d8:bd:e3:15:30:
08:83:e1:23:c2:c4:18:e0:b6:6d:cb:ad:56:7d:6e:
d7:13:e7:7e:5d:a5:df:8c:16:7c:b0:9e:0a:93:fb:
56:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:06:7D:17:EA:5D:20:D0:3A:E6:F5:60:18:31:80:A6:0C:9F:86:DA
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/RwZ9F-pdINA65vVgGDGApgyfhto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.222.0/23
152.89.164.0/23
Signature Algorithm: sha256WithRSAEncryption
90:a4:b8:80:f8:a1:eb:47:b2:7b:6e:78:c8:13:63:63:bf:d5:
e8:61:5f:65:28:d8:4d:ab:d7:ba:23:e2:60:45:a5:f0:7a:20:
ef:29:48:e5:16:77:b8:5b:b0:59:8e:9e:1f:92:5a:41:ac:73:
ba:37:4f:15:5a:be:20:94:a9:e0:c0:d7:5f:ad:73:ca:c2:f0:
86:90:a4:6c:4e:d9:3f:db:a3:f7:d5:9d:eb:72:a4:68:36:b6:
1f:fc:13:48:4d:fe:0c:91:45:4f:7c:e9:e1:71:35:1a:c4:c4:
54:8f:62:87:74:8d:cf:9d:a9:48:f0:b2:d3:65:03:87:af:09:
66:54:55:de:27:3d:7f:c1:09:34:58:7c:7c:99:6e:83:e4:d0:
ee:85:10:28:6c:21:9d:ab:5e:13:02:a8:27:1d:5b:2e:d8:4c:
19:e1:5a:f1:b3:07:85:ee:aa:05:2d:e1:3a:36:50:02:eb:83:
8e:88:6f:af:ba:ab:0f:9f:f9:0c:de:51:57:79:73:5f:85:a1:
0e:cd:55:43:b6:6d:72:b2:8a:43:3f:e0:7d:98:fd:ae:15:f7:
af:43:bf:48:82:cd:77:04:71:53:37:e5:ba:40:53:4e:dc:fe:
3d:59:29:bf:b6:83:a1:87:cb:64:3f:6e:75:f7:b2:94:6b:4e:
c3:6d:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:33:16 2026 by rpki-client