Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/pWRALXZDcGIRN6-GnVjoFkZeL3A.roa
File: pWRALXZDcGIRN6-GnVjoFkZeL3A.roa (raw, json)
Hash identifier: UHgKeTRC2dK6fhSvGnNYC1kohBjWKd03S8mx0XnPWh8=
Subject key identifier: A5:64:40:2D:76:43:70:62:11:37:AF:86:9D:58:E8:16:46:5E:2F:70
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019F8008E5068D786D007013FC3DAD834D18
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/pWRALXZDcGIRN6-GnVjoFkZeL3A.roa
Signing time: Mon 20 Jul 2026 14:58:14 +0000
ROA not before: Mon 20 Jul 2026 14:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 178.236.32.0/24 maxlen: 24
185.49.104.0/24 maxlen: 24
185.49.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:08:e5:06:8d:78:6d:00:70:13:fc:3d:ad:83:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 20 14:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a564402d764370621137af869d58e816465e2f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:44:e6:62:db:d7:b9:20:71:cb:a8:b0:45:
69:65:23:aa:49:30:8e:bf:3c:30:d3:e5:74:d4:45:
f2:a5:d9:6b:5e:44:ef:7e:45:4b:bd:a5:cf:ee:90:
76:e9:45:ca:cf:66:30:75:c0:e8:8e:a8:4e:b7:5f:
96:c8:34:c9:78:43:79:72:57:e7:da:9b:ad:00:cf:
9e:83:7f:4d:49:0a:72:d3:ba:7b:cc:8a:4b:e3:8b:
c0:2d:0e:27:49:d7:f1:43:0f:e6:59:cf:3a:5b:0f:
8d:e1:e3:e3:aa:76:a3:7f:82:0b:ff:38:61:53:17:
a6:4f:85:bc:fb:7a:6e:56:1c:c2:b0:3b:69:35:c6:
2d:b9:00:8d:f1:80:3c:54:d2:c9:74:10:8f:08:37:
da:02:c2:c0:44:6e:ac:b5:11:09:79:2e:0d:d2:93:
2c:1e:4b:bf:17:01:89:f6:03:b0:b4:bc:22:10:10:
75:6e:59:e1:10:62:18:a3:6e:c1:f7:ef:3c:b0:f9:
d7:de:00:5e:01:aa:bd:1c:6e:e3:b0:ab:d9:4a:1b:
37:e0:51:b3:cd:e1:77:8a:80:a2:24:36:17:d4:81:
56:b9:0c:e0:63:74:43:93:53:03:08:e5:9e:d6:0b:
c7:aa:32:0b:94:54:9f:b0:2f:74:43:82:5d:56:24:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:64:40:2D:76:43:70:62:11:37:AF:86:9D:58:E8:16:46:5E:2F:70
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/pWRALXZDcGIRN6-GnVjoFkZeL3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.32.0/24
185.49.104.0/23
Signature Algorithm: sha256WithRSAEncryption
34:2f:49:fc:8d:c6:7d:19:42:e9:fb:f7:30:bf:b9:63:92:c2:
23:86:16:6f:61:9d:26:ed:20:98:c2:32:52:aa:26:35:15:c6:
21:ea:6b:73:1e:17:92:f1:20:54:4a:b6:4f:a8:7e:c6:fd:de:
83:60:df:39:a1:d9:5d:ac:43:4c:3a:b2:b3:4a:f9:d8:13:7b:
d1:23:c9:c6:19:3f:14:1d:35:50:51:b8:04:6e:17:b3:b4:16:
86:a5:6b:c5:ba:63:e1:05:85:99:c7:a0:02:03:fb:c3:87:44:
de:a2:42:44:7e:8a:af:c4:81:85:96:b2:b2:fd:5e:a4:94:62:
ed:e3:f0:65:09:f4:c9:6b:57:82:87:ed:80:25:89:8c:f9:34:
bf:b0:44:45:bf:85:e8:e1:5c:e4:dd:5f:69:9a:a0:4d:18:a6:
a6:c2:c0:e2:1a:88:b0:73:e8:91:4a:9b:6c:87:71:49:45:ed:
8a:06:aa:11:2a:20:22:5c:c0:ca:68:ff:12:5a:1f:d5:c1:51:
e5:61:4c:b5:09:43:f6:7d:47:51:16:2b:ab:94:90:9b:68:b4:
c5:c7:60:e5:72:1b:fb:c4:13:a5:30:68:28:64:ea:58:02:3e:
6a:77:b9:30:6d:aa:b4:ab:e4:b7:e1:24:db:bf:5e:80:30:e3:
8c:f8:1d:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ+ACOUGjXhtAHAT/D2tg00YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw
MTljMjQwHhcNMjYwNzIwMTQ1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTY0NDAyZDc2NDM3MDYyMTEzN2FmODY5ZDU4ZTgxNjQ2NWUyZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKdE5mLb17kgccuosEVpZSOqSTCO
vzww0+V01EXypdlrXkTvfkVLvaXP7pB26UXKz2YwdcDojqhOt1+WyDTJeEN5clfn
2putAM+eg39NSQpy07p7zIpL44vALQ4nSdfxQw/mWc86Ww+N4ePjqnajf4IL/zhh
UxemT4W8+3puVhzCsDtpNcYtuQCN8YA8VNLJdBCPCDfaAsLARG6stREJeS4N0pMs
Hku/FwGJ9gOwtLwiEBB1blnhEGIYo27B9+88sPnX3gBeAaq9HG7jsKvZShs34FGz
zeF3ioCiJDYX1IFWuQzgY3RDk1MDCOWe1gvHqjILlFSfsC90Q4JdViSTeQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKVkQC12Q3BiETevhp1Y6BZGXi9wMB8GA1UdIwQY
MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1
LWQyMTA3MWVmNzM1Yi8xL3BXUkFMWFpEY0dJUk42LUduVmpvRmtaZUwzQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1
Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACy7CAD
BAG5MWgwDQYJKoZIhvcNAQELBQADggEBADQvSfyNxn0ZQun79zC/uWOSwiOGFm9h
nSbtIJjCMlKqJjUVxiHqa3MeF5LxIFRKtk+ofsb93oNg3zmh2V2sQ0w6srNK+dgT
e9EjycYZPxQdNVBRuARuF7O0Foala8W6Y+EFhZnHoAID+8OHRN6iQkR+iq/EgYWW
srL9XqSUYu3j8GUJ9MlrV4KH7YAliYz5NL+wREW/hejhXOTdX2maoE0YpqbCwOIa
iLBz6JFKm2yHcUlF7YoGqhEqICJcwMpo/xJaH9XBUeVhTLUJQ/Z9R1EWK6uUkJto
tMXHYOVyG/vEE6UwaChk6lgCPmp3uTBtqrSr5LfhJNu/XoAw44z4HcA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:43 2026 by rpki-client