Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PAW1JoIrhuPRvpT3zzJGVAqnrcc.roa
File: PAW1JoIrhuPRvpT3zzJGVAqnrcc.roa (raw, json)
Hash identifier: dgbWSId+v8ufGyfsNbvXuLSNu4xPAIPhGm4OyMRj1/M=
Subject key identifier: 3C:05:B5:26:82:2B:86:E3:D1:BE:94:F7:CF:32:46:54:0A:A7:AD:C7
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01A1835A5D125A2B750120F87BA8ABA55DB5
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PAW1JoIrhuPRvpT3zzJGVAqnrcc.roa
Signing time: Wed 28 Oct 2026 16:31:39 +0000
ROA not before: Wed 28 Oct 2026 16:31:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272814
IP address blocks: 185.203.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:5a:5d:12:5a:2b:75:01:20:f8:7b:a8:ab:a5:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Oct 28 16:31:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c05b526822b86e3d1be94f7cf3246540aa7adc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:20:18:90:1f:d9:bf:c3:36:ac:e8:e6:19:
75:2d:d3:16:a3:39:c8:d0:fd:de:3b:d8:87:90:4a:
40:f7:94:33:aa:c9:9c:ec:8a:fc:0f:98:04:e0:d9:
9e:07:84:82:c5:da:44:a3:60:a0:f6:2d:38:59:6f:
ca:40:fe:9d:a4:f7:62:79:00:f3:7d:6a:4a:f7:8d:
2f:cf:6d:94:e9:17:8e:8c:72:65:cb:e2:3a:92:38:
b3:b9:e9:41:6a:fe:3a:f1:77:a5:5c:6a:85:45:65:
a7:68:3b:81:45:87:6d:90:25:ce:97:d4:f7:2e:8a:
28:06:4e:4d:ab:32:5c:dc:af:a3:30:5f:ec:fa:be:
f3:99:ae:2d:a3:ec:fe:df:c7:2b:96:97:0b:09:9d:
9c:e2:b5:6d:58:11:4d:bf:3b:b8:0e:d2:d3:47:a4:
9e:41:36:f1:a6:b6:4e:09:e4:c1:95:6f:b0:07:77:
1f:ca:0c:71:38:7e:bf:66:e7:b6:da:fc:11:15:7c:
60:fe:34:d6:5c:20:6f:de:02:c9:7b:33:97:45:a8:
a6:7a:37:21:eb:f9:43:bf:2a:d9:ea:e5:d3:7d:63:
8b:02:a1:1a:a2:71:0c:71:93:1a:5b:82:57:f0:9a:
80:f8:e0:ff:d2:e8:ea:16:ad:0e:15:be:aa:a7:f7:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:05:B5:26:82:2B:86:E3:D1:BE:94:F7:CF:32:46:54:0A:A7:AD:C7
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/PAW1JoIrhuPRvpT3zzJGVAqnrcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:af:64:1c:fc:95:35:87:53:c2:75:f7:38:fd:98:3d:cb:b8:
34:d2:56:66:c3:d2:8b:a4:bb:3a:e5:80:4f:76:69:92:1f:5e:
44:3f:ed:af:e1:5a:b1:7e:ea:24:61:c6:aa:62:25:54:ff:6f:
e6:13:52:a4:ce:6b:e0:f1:a6:15:f7:45:9c:09:e0:5c:78:4d:
b1:c9:bc:b0:75:35:d8:70:21:e2:e4:78:69:1c:47:e2:32:82:
c7:ec:74:50:46:21:4e:06:81:96:ee:d9:b7:eb:54:c2:b9:80:
be:0f:a7:fd:a1:8a:41:f5:ef:62:1a:47:a4:22:52:e6:d9:bf:
96:50:7f:ef:6f:87:88:a7:f6:0c:18:9e:5a:50:fc:a9:ec:d0:
f1:89:12:4d:ac:bf:b4:c3:96:0a:dc:0e:bd:83:1c:99:50:4b:
54:be:e4:8d:58:92:29:2f:8e:6f:42:34:62:13:2f:9f:e4:1c:
b6:93:c3:14:47:3a:6e:6a:de:56:ba:66:ea:d3:03:88:0a:86:
f3:e4:6e:9d:39:2f:10:90:4f:b3:35:42:c2:76:a2:10:44:38:
38:e7:61:e9:9a:0f:79:0e:b0:87:3f:17:55:1d:64:91:e3:3d:
4a:71:67:37:ec:17:63:e4:5c:16:16:9d:80:a4:58:df:f9:4b:
fa:b5:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:23:10 2026 by rpki-client