Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/pWLBkz1iufEVOMitYEK948ero7k.roa
File: pWLBkz1iufEVOMitYEK948ero7k.roa (raw, json)
Hash identifier: AUSHovmcangqjrc7dz+mTZWIZ6G5O+nqqETB66pEfN8=
Subject key identifier: A5:62:C1:93:3D:62:B9:F1:15:38:C8:AD:60:42:BD:E3:C7:AB:A3:B9
Certificate issuer: /CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Certificate serial: 01A1C0F6D351C10246A50C4593A13BE1FC32
Authority key identifier: 27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/pWLBkz1iufEVOMitYEK948ero7k.roa
Signing time: Mon 09 Nov 2026 15:39:23 +0000
ROA not before: Mon 09 Nov 2026 15:39:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a01:e900:f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:f6:d3:51:c1:02:46:a5:0c:45:93:a1:3b:e1:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270c42fdec2e22e0d7d9aed353ab7eb7a6cf8dd8
Validity
Not Before: Nov 9 15:39:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a562c1933d62b9f11538c8ad6042bde3c7aba3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:3c:ad:15:bb:f4:58:0d:26:08:6f:bd:bc:
36:63:a3:2f:66:e4:f5:54:d5:d6:23:b6:f1:27:08:
87:a9:b9:3f:49:b4:d9:d4:64:f9:bd:b7:be:2b:5a:
d3:31:cc:51:bf:6d:97:a5:ee:c5:de:8e:36:bf:e4:
18:89:cf:eb:52:6b:39:57:c0:30:d4:7a:eb:2e:f8:
74:91:2b:92:a2:e6:9d:aa:09:8b:44:57:20:f2:b5:
63:47:ab:f0:e8:6e:a2:5e:72:80:92:ae:d1:4e:76:
bf:20:02:e9:89:2f:70:de:96:16:01:1c:2c:ee:39:
2a:79:f9:13:7e:f4:ed:c6:ce:76:7c:db:b3:37:db:
65:13:15:67:c3:96:99:77:4a:f6:d3:7b:76:5b:5a:
5a:f9:44:87:3b:f0:7e:2b:e2:c7:b6:01:6d:8f:f5:
f4:ae:d6:0d:0d:d3:9e:ce:e9:cb:f3:ef:95:9e:b3:
d4:bd:69:0b:84:bc:db:57:f6:ee:a8:e8:92:5e:cc:
fe:6e:2f:2d:29:f3:1c:db:77:2b:42:95:02:b8:01:
a8:a8:22:94:25:50:4a:7c:84:5c:1b:48:39:0c:b3:
16:0c:93:9e:4a:5b:cf:f2:1a:6d:5a:08:74:3f:5b:
1d:75:f3:43:8e:00:e1:ec:7a:66:0b:92:00:db:a6:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:C1:93:3D:62:B9:F1:15:38:C8:AD:60:42:BD:E3:C7:AB:A3:B9
X509v3 Authority Key Identifier:
keyid:27:0C:42:FD:EC:2E:22:E0:D7:D9:AE:D3:53:AB:7E:B7:A6:CF:8D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwxC_ewuIuDX2a7TU6t-t6bPjdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/pWLBkz1iufEVOMitYEK948ero7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e49a17-fe3b-4f4f-8145-92f4bfa7e0b5/1/JwxC_ewuIuDX2a7TU6t-t6bPjdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e900:f1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f2:b3:c9:29:c3:8d:28:f5:0c:b6:53:36:69:4e:81:fb:e4:
15:b8:ed:77:ee:83:41:22:5c:11:2d:1e:45:f5:5f:b0:4c:f4:
6a:5c:30:23:6a:bc:df:14:f7:3c:82:5e:9e:a0:f5:d9:9c:e4:
ac:42:fb:17:bf:82:09:c5:95:84:42:19:bb:63:c2:3b:ac:17:
11:e2:5e:5e:69:92:45:7d:2e:10:4a:6a:86:fd:f7:22:7b:41:
c0:bd:de:01:6d:ee:75:fa:2e:8e:52:73:35:e4:4f:f0:28:f3:
6e:fe:d6:c7:79:de:01:51:2c:a6:58:42:6a:10:c3:6b:c5:19:
10:b3:f7:45:14:b9:38:74:a0:6f:57:47:20:c0:3d:42:1e:05:
03:b7:8d:13:44:a1:04:b7:47:98:c9:f5:8d:bd:21:b5:84:79:
38:ec:f6:1c:4b:61:61:72:55:f9:44:96:4f:f4:b4:26:60:d2:
7d:2c:df:b6:98:e2:29:c8:f7:ec:0a:62:41:f8:b8:5b:c1:0a:
8c:a7:4e:50:7d:96:a8:5e:60:3e:80:c4:89:82:17:12:66:bd:
3e:de:70:b3:f2:c3:2f:6b:ee:d5:e1:1b:c9:4f:4a:8f:4a:3d:
33:2c:ae:18:7b:62:43:07:5d:37:d9:27:a0:5b:f7:af:ce:42:
20:0b:8f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:57:39 2026 by rpki-client