Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa
File: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (raw, json)
Hash identifier: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=
Subject key identifier: F1:68:EB:76:3D:96:28:C4:8C:ED:52:EA:E8:ED:BF:58:85:25:34:29
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 019E1BD30C8666045F3841CB0E9C1CFF6CA5
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa
Signing time: Tue 12 May 2026 10:54:36 +0000
ROA not before: Tue 12 May 2026 10:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28917
IP address blocks: 81.95.42.0/24 maxlen: 24
82.194.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d3:0c:86:66:04:5f:38:41:cb:0e:9c:1c:ff:6c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: May 12 10:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f168eb763d9628c48ced52eae8edbf5885253429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:b8:0e:6b:f0:c4:4b:d5:0c:e6:29:21:be:
b7:d5:f3:01:39:b7:27:78:80:68:d8:d1:f3:54:bf:
98:92:29:99:fe:2c:a9:b9:ff:f9:08:24:a4:9b:96:
5a:4b:37:f8:ab:be:c6:e6:d7:ec:87:ea:ac:15:d6:
6f:25:92:85:16:3b:f6:fa:8d:b1:b4:16:57:07:33:
53:6f:14:76:64:51:e4:c4:dd:9d:0a:9d:09:7a:55:
34:c7:01:0d:d6:14:d3:f7:92:f9:72:aa:7f:15:3d:
10:39:aa:7e:92:0b:9b:08:07:d0:05:c8:cb:27:34:
b5:09:32:7b:98:95:86:73:a4:21:a2:fe:db:6f:14:
3b:c7:66:54:32:b1:07:3a:1a:f0:9e:93:77:26:8b:
13:b2:fb:42:c5:ff:f3:df:a6:ea:dd:a1:fc:7d:1e:
b1:3e:35:cd:ee:8e:68:0e:52:6d:d6:f1:16:50:56:
f9:e0:6a:be:e8:d4:16:a6:f0:58:95:0d:05:ad:fe:
ea:a8:79:0a:f7:cf:19:74:b8:06:15:62:c6:b8:9d:
1c:8f:bb:07:0a:eb:06:a1:7b:25:f7:a2:d2:8e:77:
79:b4:d1:eb:a2:50:d3:d4:4a:20:6c:a4:aa:1b:72:
64:02:a0:0c:8a:54:ea:b6:f1:b6:90:e2:2c:4a:b3:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:EB:76:3D:96:28:C4:8C:ED:52:EA:E8:ED:BF:58:85:25:34:29
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.95.42.0/24
82.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c9:1a:5f:e0:3a:5a:4b:b1:ef:3a:32:28:65:bd:95:f5:73:
c3:69:81:ec:5b:40:33:8f:10:40:8e:d4:1d:eb:07:6a:bc:82:
53:12:c1:16:d0:b3:20:7e:66:06:01:03:c9:d6:4f:04:88:b8:
25:e7:90:0f:db:29:cf:08:ea:ec:72:04:0e:e1:0f:f8:c0:65:
99:ff:9d:f4:8c:33:c6:dc:8c:1e:66:c7:50:5c:31:d0:88:83:
1d:a6:b9:bd:a6:e1:ce:80:0c:53:ba:bb:aa:a9:85:47:ea:4b:
b5:a7:18:c5:5a:2d:13:44:6c:eb:94:a5:9a:b2:fd:6a:04:74:
4f:6a:c0:5a:5f:33:09:10:19:e6:d2:98:1a:1d:98:83:1c:d9:
d3:54:2e:72:bd:29:21:52:62:aa:a8:ea:ba:17:1b:70:dd:0c:
b0:b4:5f:3f:19:ce:84:bb:22:96:6a:12:10:06:ec:6b:0a:6b:
c5:d7:a1:13:8c:7c:a2:30:23:1d:f1:bd:67:26:7c:52:6d:5c:
a6:fd:49:cd:d1:ae:dc:1b:2f:9f:2e:64:e7:4f:bb:9c:19:1a:
af:fa:6c:f2:33:24:6c:3a:2c:7d:49:18:db:a7:a8:63:2a:4f:
19:d4:65:a8:6e:64:ee:fc:75:60:3d:45:12:f6:67:bf:13:f9:
61:22:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:01 2026 by rpki-client