Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/cw3p8OtDCLlC1go49KS1_MxGpnE.roa
File: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (raw, json)
Hash identifier: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=
Subject key identifier: 73:0D:E9:F0:EB:43:08:B9:42:D6:0A:38:F4:A4:B5:FC:CC:46:A6:71
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A01A3A0FEF8CF7CAD251E92731C9082C53
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/cw3p8OtDCLlC1go49KS1_MxGpnE.roa
Signing time: Wed 19 Aug 2026 13:33:27 +0000
ROA not before: Wed 19 Aug 2026 13:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39279
IP address blocks: 89.35.84.0/22 maxlen: 24
89.35.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:3a:0f:ef:8c:f7:ca:d2:51:e9:27:31:c9:08:2c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Aug 19 13:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=730de9f0eb4308b942d60a38f4a4b5fccc46a671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:47:8b:8e:1c:f4:51:ad:93:60:99:75:57:
08:b2:a7:99:83:4e:03:f4:e0:d4:cf:41:45:de:47:
c9:7f:9b:74:51:a8:38:4b:ec:55:81:90:47:27:c4:
05:05:df:70:6e:c3:29:3c:17:95:e3:57:d4:a6:da:
85:81:12:43:10:8d:55:f7:ac:ac:26:3e:83:4b:a5:
39:1b:4c:4b:fe:1d:b0:14:0f:bf:57:27:bd:89:26:
eb:f1:57:11:78:f5:9f:f6:4b:95:6c:c6:3a:59:eb:
5b:f8:1b:c6:b4:e2:74:62:40:00:eb:ba:b6:d3:f1:
0e:b1:db:21:8e:35:f7:b1:fa:ba:16:6c:a7:24:f1:
6c:0f:8e:ae:1f:88:ac:12:88:59:da:30:d3:12:00:
f9:54:bd:ad:cd:e8:7e:43:79:db:23:04:b7:88:6d:
0e:36:3b:17:7f:7e:56:63:af:0d:71:51:d5:51:7e:
ba:6e:4a:16:c6:77:78:be:ef:c6:df:e7:bc:6e:4b:
a8:62:1e:9b:5d:ae:10:4c:30:c3:f1:ab:7a:2f:76:
68:78:fd:4f:ea:8b:c2:e9:13:db:3a:49:f7:5d:23:
c1:66:06:e8:08:11:58:47:1f:03:15:b9:7b:94:80:
29:d6:f6:ad:27:4f:68:b5:9f:8b:5a:34:2c:6c:20:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0D:E9:F0:EB:43:08:B9:42:D6:0A:38:F4:A4:B5:FC:CC:46:A6:71
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/cw3p8OtDCLlC1go49KS1_MxGpnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.84.0/22
89.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b5:14:09:1e:de:6f:53:f2:cf:b3:89:4c:bb:d8:ca:fb:96:
5b:bc:5a:d9:57:9b:39:c9:1b:d7:40:c3:95:3b:92:f1:a2:21:
80:24:2b:e8:a2:77:5b:38:44:e7:5b:98:8d:ee:32:8b:11:03:
7e:65:22:e8:a9:86:60:13:c9:c2:a1:61:1f:3e:97:9c:4c:88:
87:bb:5e:2c:44:b7:e1:6e:36:a3:71:61:c5:1b:4b:48:4d:e5:
6f:96:e1:58:5c:e0:77:fd:6b:92:4f:d0:7e:9b:ee:ef:4c:01:
71:c5:5b:9c:88:3b:1f:fc:1f:34:84:71:21:d9:44:4e:b3:6b:
20:d7:26:74:95:01:4f:f0:4a:29:a4:92:bc:a4:33:6a:95:66:
cb:12:d1:58:79:f2:a8:f8:5b:6b:cb:ec:42:01:e0:1e:6b:7e:
26:12:72:40:3a:8d:0c:c3:73:0c:22:b5:48:9e:28:d9:26:5f:
13:55:2a:60:6c:f5:0a:48:47:e0:35:06:9c:db:8d:84:30:a8:
69:24:f0:30:08:7a:a5:c6:6d:d8:73:ab:87:37:f5:44:be:b6:
29:49:69:89:89:ef:bc:92:5b:63:83:4e:6d:32:31:84:84:53:
db:57:62:5e:8d:77:7a:ab:48:cd:81:4b:5d:60:31:4f:14:39:
30:33:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:34 2026 by rpki-client