Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8Wsmw0dDr4FFMfbKxR7QR-PjnFs.roa
File: 8Wsmw0dDr4FFMfbKxR7QR-PjnFs.roa (raw, json)
Hash identifier: 48HXVHRLS8E+OhxFzq3SVQ2OgDGYdPZdWclxVDh/OJM=
Subject key identifier: F1:6B:26:C3:47:43:AF:81:45:31:F6:CA:C5:1E:D0:47:E3:E3:9C:5B
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F8E20FCEF1D7468F0621094098A1FD2D6
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8Wsmw0dDr4FFMfbKxR7QR-PjnFs.roa
Signing time: Thu 23 Jul 2026 08:39:14 +0000
ROA not before: Thu 23 Jul 2026 08:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 213.189.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:20:fc:ef:1d:74:68:f0:62:10:94:09:8a:1f:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 23 08:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f16b26c34743af814531f6cac51ed047e3e39c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d3:82:a7:ac:ce:82:b9:c5:18:9a:57:e6:9c:
56:5e:e5:cc:8c:2e:16:ea:50:8f:09:a9:e5:0c:65:
a8:1e:9f:f2:9b:ee:9a:fb:e7:5d:38:a2:a5:a3:fc:
f4:e2:ec:43:43:fc:88:ad:8e:83:67:f0:5e:98:04:
17:8f:17:70:3a:7f:7b:f1:a3:60:58:09:15:14:8f:
b6:19:e6:f8:22:fa:fc:e3:c9:39:79:5f:b9:e8:de:
01:7f:2a:f9:99:40:af:c7:eb:bc:36:a5:95:5b:b1:
8d:de:e8:4d:81:43:31:fb:36:f4:85:3c:7f:53:bc:
79:f8:8e:7b:22:9b:c2:f9:75:83:6a:51:f6:86:78:
97:52:88:d7:37:38:ec:61:cf:c4:ec:a5:9e:09:8a:
61:ef:4a:4d:bc:bb:e3:51:cf:f6:c3:d6:a4:33:af:
01:58:70:88:d8:dd:83:3a:61:b0:e0:e3:49:7c:47:
eb:a0:16:a1:39:1f:73:01:e1:b1:7b:d9:21:6c:8d:
7d:13:4b:e7:5c:0c:29:87:ff:92:3f:14:a7:b6:ba:
58:ec:93:07:f5:59:2f:4c:4d:6c:c3:41:6d:c4:a2:
dc:a1:35:61:65:3d:f7:70:92:82:20:cc:31:a8:79:
f7:c8:d2:06:2e:cf:ed:25:4a:1d:cf:3f:9f:85:93:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6B:26:C3:47:43:AF:81:45:31:F6:CA:C5:1E:D0:47:E3:E3:9C:5B
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/8Wsmw0dDr4FFMfbKxR7QR-PjnFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8b:6d:82:b6:74:07:a6:3e:5e:80:bd:8b:f9:9b:76:d6:87:
03:53:69:7f:ab:59:9c:cc:78:59:3f:08:d2:4c:61:85:9b:fd:
33:6c:d8:c3:04:d1:b9:f2:08:90:2c:f6:fc:f5:ca:db:96:68:
30:fd:63:74:4e:cb:ce:33:8e:9b:58:11:05:df:c4:e0:d1:eb:
24:9a:e1:b1:16:d2:d5:05:0d:0f:93:eb:51:29:b7:b3:82:d3:
27:97:04:31:1d:a6:e9:8e:35:95:2c:5f:13:30:17:9c:39:6a:
da:c5:41:a7:1b:e6:6a:6f:d5:d6:c9:ac:ff:3e:7e:a9:94:a2:
c6:21:e0:60:47:31:91:ba:68:3f:74:91:c7:92:fb:38:4a:57:
e1:d0:78:19:3e:ce:0a:b6:78:fe:da:79:35:c7:01:b7:70:70:
34:c0:7b:2b:d1:75:e9:71:67:b6:2e:bd:66:01:57:0a:7b:01:
3f:3e:8a:49:6e:ea:87:27:a8:f1:e4:b5:54:92:21:87:2f:65:
61:9f:a7:cb:41:eb:ed:75:62:a0:eb:18:32:22:3c:ed:22:93:
fe:21:bd:71:0e:27:67:0b:a7:ef:a5:f4:0a:ef:f0:fa:79:df:
41:7b:22:e6:d9:30:4f:1f:ea:61:f6:6b:b0:59:ea:c3:a1:d0:
61:21:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:01 2026 by rpki-client