Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PWXLGFUvMY1UI-395763nGu6uVc.roa
File: PWXLGFUvMY1UI-395763nGu6uVc.roa (raw, json)
Hash identifier: 8X0Ypb+xJ/Mk1C3wBYo3kkCsGdpXdNvNMNjZbMPIQGs=
Subject key identifier: 3D:65:CB:18:55:2F:31:8D:54:23:ED:FD:E7:BE:B7:9C:6B:BA:B9:57
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A1AA9D4D94C49D11A8CBF14DCC98842443
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PWXLGFUvMY1UI-395763nGu6uVc.roa
Signing time: Thu 05 Nov 2026 07:29:58 +0000
ROA not before: Thu 05 Nov 2026 07:29:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218897
IP address blocks: 132.243.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:9d:4d:94:c4:9d:11:a8:cb:f1:4d:cc:98:84:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Nov 5 07:29:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d65cb18552f318d5423edfde7beb79c6bbab957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:a3:f6:92:8d:48:4e:4b:5e:6b:3a:a0:36:
0a:76:fe:59:91:78:f2:dc:bd:12:27:ee:cf:03:f2:
dd:4f:6c:78:6e:ab:e4:25:e3:e3:88:27:e6:f9:1f:
13:38:9e:ec:d0:fb:e4:89:09:a8:b2:32:01:12:0b:
b6:4f:21:59:79:e2:0d:9d:70:c3:94:72:9e:e6:8c:
f8:d7:d5:8a:a6:88:5b:b9:73:8f:bf:e6:da:27:09:
52:55:fe:7c:75:b6:ca:50:82:86:9c:e2:26:f0:87:
66:4e:d4:a9:ec:5a:fb:89:ac:88:bb:19:30:32:32:
a3:a7:24:22:a5:20:f1:dc:df:2c:85:cd:a9:ee:5d:
78:43:46:9d:0a:74:47:5c:26:83:67:c7:8e:b6:7e:
18:26:b9:f1:1e:93:47:d5:2d:32:01:28:93:c9:02:
8b:4b:15:6c:d7:36:a2:00:e8:94:12:92:dc:80:5a:
86:7b:90:de:38:29:b0:dc:d2:29:7e:dd:84:98:9f:
a0:df:ee:5c:20:84:4f:a2:af:de:32:94:2b:cc:98:
39:9d:dd:8e:14:2d:b1:4a:68:cb:18:a6:3c:60:3d:
cd:e8:37:e8:f2:e5:35:0a:f4:10:1c:b0:b6:4a:b6:
85:7d:4b:96:5f:39:0c:5c:0b:de:e7:bc:35:c8:7e:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:CB:18:55:2F:31:8D:54:23:ED:FD:E7:BE:B7:9C:6B:BA:B9:57
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/PWXLGFUvMY1UI-395763nGu6uVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
96:db:31:ac:a9:b8:65:42:c7:03:31:c6:61:01:95:8d:0e:20:
fc:20:88:ea:f4:97:e7:a6:5c:87:4c:59:e4:2a:0e:0b:46:9e:
4f:46:90:3b:71:e2:85:69:59:c6:0b:6e:0b:41:69:52:e3:62:
38:da:59:af:5b:a7:b6:e5:2b:cf:6c:2a:29:85:2c:42:69:41:
eb:13:95:4e:7f:00:f2:32:01:44:da:cc:52:94:70:37:f9:4b:
00:c1:17:f2:12:d2:cb:2b:fc:b1:20:c9:0d:80:c6:00:6f:68:
62:e4:76:f0:48:17:4b:b7:4f:b0:9a:68:8d:9a:8b:dc:5f:6f:
ff:47:a1:49:a0:2c:68:b4:30:06:df:d3:c0:75:8b:39:eb:12:
a9:83:ec:d3:3b:c6:0a:71:91:5f:45:93:22:49:33:41:1f:2d:
d0:99:fb:c4:e8:e4:a5:8b:d7:8b:16:9b:44:a5:67:82:5f:98:
d3:0f:00:ed:df:3c:8e:33:c2:71:fc:51:64:5d:62:84:bf:91:
e2:db:c7:49:39:d5:16:f2:fa:f4:21:49:05:cd:41:89:36:07:
4d:fd:88:d4:ec:ce:21:03:73:d5:a3:3d:3c:62:de:2f:5e:7d:
99:ce:31:ff:d4:b5:81:70:ba:69:9c:e7:2f:0b:89:05:0f:e6:
c8:5c:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:02 2026 by rpki-client