Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RwX2io4_9MInV-dWe-ifxD64eMg.roa
File: RwX2io4_9MInV-dWe-ifxD64eMg.roa (raw, json)
Hash identifier: R6h49GhoxrSJSOujYbuuikHI3Eie2nATxLnjgNYObI0=
Subject key identifier: 47:05:F6:8A:8E:3F:F4:C2:27:57:E7:56:7B:E8:9F:C4:3E:B8:78:C8
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A0D0AEFB00F6895AE760A56549A32375B0
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RwX2io4_9MInV-dWe-ifxD64eMg.roa
Signing time: Wed 23 Sep 2026 23:52:03 +0000
ROA not before: Wed 23 Sep 2026 23:52:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61087
IP address blocks: 83.217.208.0/24 maxlen: 24
83.217.209.0/24 maxlen: 24
94.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ae:fb:00:f6:89:5a:e7:60:a5:65:49:a3:23:75:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Sep 23 23:52:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4705f68a8e3ff4c22757e7567be89fc43eb878c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:e4:d3:83:0e:a8:49:e3:5f:bf:00:55:92:
e0:63:9c:56:38:16:ab:c6:63:9f:03:04:82:76:bc:
7f:e2:d3:69:5b:66:2a:ba:ff:18:7f:57:cf:d1:19:
c3:f5:bf:36:56:fe:5a:e4:16:8e:49:b7:1e:13:46:
6a:aa:d7:62:a3:b3:bf:b7:31:65:ee:a1:f0:a2:7b:
04:56:a3:5c:37:c4:ba:76:50:5c:71:c5:3f:27:f5:
b0:09:02:0a:ce:5a:5a:92:81:04:59:1b:9e:e1:57:
22:bf:9b:51:3c:5d:df:66:e9:2a:ae:b6:2e:1a:5b:
02:c0:88:51:9c:76:96:0b:ad:8d:6c:e1:bc:91:fa:
b8:e3:86:53:cc:cd:41:b9:65:06:e2:f7:1d:10:80:
07:64:62:61:09:17:7e:e5:6a:95:75:11:46:a1:93:
e8:42:ab:73:75:8a:53:08:4b:08:a8:3c:85:19:18:
c6:27:26:63:c3:9a:48:c0:b7:07:d7:23:65:44:9e:
00:fc:08:68:39:40:9a:1c:a0:b8:6a:fc:af:39:b3:
05:2e:42:56:85:e8:77:e9:8c:c6:11:48:dc:8c:ca:
ab:4a:53:eb:c7:24:27:b2:b1:6a:87:59:02:bd:45:
8d:42:d8:68:c5:e9:3d:53:33:4f:a4:4f:d9:94:a2:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:F6:8A:8E:3F:F4:C2:27:57:E7:56:7B:E8:9F:C4:3E:B8:78:C8
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/RwX2io4_9MInV-dWe-ifxD64eMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.208.0/23
94.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6c:0f:78:c0:1a:54:a2:17:13:8d:c3:77:36:7c:b0:b2:96:
aa:ec:cb:a3:04:f0:09:5e:ce:4f:c5:fb:c9:3f:29:37:2e:35:
f8:29:5e:d0:c6:fa:0c:e9:12:78:cd:09:93:dc:16:69:5b:ca:
14:ec:17:4a:e5:19:91:ab:aa:3e:5c:4a:13:b0:33:cd:53:1d:
89:5b:3d:d8:2a:03:2d:64:35:04:90:0b:5b:47:9b:02:10:12:
a0:99:f2:d4:b5:0b:65:16:f0:d4:99:2d:88:ea:90:0e:10:2d:
89:89:dd:03:4a:88:ea:d3:27:7e:a6:d9:40:02:6c:bc:62:77:
a0:7f:f5:cb:f7:f4:bf:3d:9f:9a:4a:0f:7f:dd:d5:a3:89:4d:
33:94:16:b8:33:45:6f:1e:94:39:7d:fd:84:0c:76:d7:d1:96:
66:a3:77:ce:f8:85:c5:0d:92:35:6f:e7:cc:e4:c5:76:28:40:
58:7e:e0:68:c7:b8:94:9b:12:67:be:f7:8d:e5:1e:53:2e:f8:
33:09:b2:dd:75:96:62:b3:67:7b:c3:a7:7c:5a:31:dd:22:64:
f6:17:06:c9:04:34:85:70:91:35:00:7d:5b:da:77:99:f7:34:
08:46:b6:0c:e6:86:9a:da:56:02:5f:43:f8:d0:7e:54:c1:07:
d7:81:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:18 2026 by rpki-client