Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PawWGq8W9IW9ChppxPUkhsiMvKI.roa
File: PawWGq8W9IW9ChppxPUkhsiMvKI.roa (raw, json)
Hash identifier: m/pQmXw5GyX96IT7tVp2Pfdp1q9jeq5d/BRJww4ztzY=
Subject key identifier: 3D:AC:16:1A:AF:16:F4:85:BD:0A:1A:69:C4:F5:24:86:C8:8C:BC:A2
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E17083E97911FA3A6001E19D766E6C7A2
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PawWGq8W9IW9ChppxPUkhsiMvKI.roa
Signing time: Mon 11 May 2026 12:34:36 +0000
ROA not before: Mon 11 May 2026 12:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 87.58.219.0/24 maxlen: 24
150.251.132.0/23 maxlen: 24
150.251.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:08:3e:97:91:1f:a3:a6:00:1e:19:d7:66:e6:c7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 11 12:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dac161aaf16f485bd0a1a69c4f52486c88cbca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:ed:46:3f:ea:e7:b4:a7:83:98:22:28:d7:
e9:d1:8a:d8:ed:48:4b:90:b3:5c:7a:0c:2a:cc:63:
ea:d4:e2:0a:f9:f4:81:d6:c1:ea:37:b5:a3:30:f7:
b9:6b:d0:09:a2:d6:a3:b4:61:ca:c7:b6:4f:1f:c0:
a1:cf:77:a4:57:77:96:73:d3:4c:49:e7:f9:a3:cf:
d4:01:fd:e5:b2:f2:99:a4:ca:72:ba:d3:5e:67:cf:
eb:06:93:2d:bc:25:4d:9e:86:b6:da:90:56:1e:c4:
4d:87:be:c8:61:59:7b:90:82:19:de:d0:af:0c:c9:
b0:e2:f5:9a:c6:59:0b:c4:e4:0e:82:71:25:4c:f8:
8b:d6:9b:35:3a:88:10:4a:31:ec:f5:0b:22:33:0f:
ad:7b:e0:68:06:fd:3f:fd:14:c7:7c:d7:9e:51:0b:
58:ac:51:87:68:f4:49:dc:9f:d7:f8:e5:32:9b:51:
1e:63:0c:46:01:9a:43:63:f1:f0:40:10:7f:0f:1f:
21:cd:51:22:58:df:0e:81:5c:08:93:96:8a:76:f8:
b0:a8:e7:00:e7:d7:e8:9e:4b:3b:47:93:b6:bf:1e:
a2:5e:20:9e:4d:ec:8f:96:75:db:26:c8:55:5c:e4:
87:d2:93:5f:2a:cb:f5:d2:01:7e:32:b9:e1:0e:06:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AC:16:1A:AF:16:F4:85:BD:0A:1A:69:C4:F5:24:86:C8:8C:BC:A2
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/PawWGq8W9IW9ChppxPUkhsiMvKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.219.0/24
150.251.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:62:0c:26:e3:1c:ee:5c:84:db:7d:d1:44:58:4b:7a:eb:f4:
4c:9a:e8:6b:9a:99:54:c2:99:56:8f:43:06:4d:9e:23:24:f7:
ad:19:3c:fa:76:ea:20:e1:15:3d:86:19:15:2d:b4:0a:dd:eb:
68:a4:d6:c2:58:c2:dc:79:08:cd:10:8f:cd:50:3a:d6:5e:af:
8f:b0:ec:a2:86:e6:6b:b5:47:99:29:21:94:10:78:1c:1d:a0:
8f:13:bd:61:e7:b7:ba:ec:19:1f:a7:c1:15:fb:86:56:22:d7:
8f:6d:92:61:72:bb:f5:f8:e4:57:52:10:26:f0:ba:e0:d9:e9:
c8:57:b6:5f:78:51:5f:f0:ea:83:cc:2e:45:b2:4d:1b:2f:4e:
34:c8:b1:55:2b:cd:87:ac:02:29:c9:22:87:c1:5d:b3:b4:13:
a1:c3:0f:56:1c:db:f3:e9:fa:8d:e6:6d:4a:20:50:a1:b4:ea:
ab:0a:01:b0:11:e3:aa:fe:c9:c4:cb:de:45:6c:81:da:67:ba:
c7:51:ac:8f:25:0a:d1:30:81:a2:3d:07:d5:dd:3a:62:7b:1e:
0b:de:d2:a8:b8:13:3d:72:f1:2b:1e:da:bd:6f:94:bb:c4:51:
f2:ea:05:8e:ba:5c:f5:de:0f:82:b0:3a:6b:bf:a5:88:65:01:
72:f1:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:35 2026 by rpki-client