Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/Pw-Xbx-fd_nGa-aW9QVLLMGC8dk.roa
File: Pw-Xbx-fd_nGa-aW9QVLLMGC8dk.roa (raw, json)
Hash identifier: 3F6mzRTDsqLi9XQZrpR35u3u1uvU+/gi5C4g1Sy4VTE=
Subject key identifier: 3F:0F:97:6F:1F:9F:77:F9:C6:6B:E6:96:F5:05:4B:2C:C1:82:F1:D9
Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial: 01A0AA04A68F64DD1F6DDDDC15BC961AAB87
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/Pw-Xbx-fd_nGa-aW9QVLLMGC8dk.roa
Signing time: Wed 16 Sep 2026 11:40:26 +0000
ROA not before: Wed 16 Sep 2026 11:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20507
IP address blocks: 85.223.101.0/24 maxlen: 24
85.223.126.0/24 maxlen: 24
217.149.192.0/19 maxlen: 24
217.149.192.0/24 maxlen: 24
217.149.201.0/24 maxlen: 24
217.149.202.0/24 maxlen: 24
217.149.203.0/24 maxlen: 24
217.149.217.0/24 maxlen: 24
217.149.218.0/24 maxlen: 24
217.149.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:04:a6:8f:64:dd:1f:6d:dd:dc:15:bc:96:1a:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
Validity
Not Before: Sep 16 11:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f0f976f1f9f77f9c66be696f5054b2cc182f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:cf:51:fb:34:62:57:e6:a9:dd:30:ff:f9:
19:35:fe:30:94:85:33:f6:f6:e0:7a:88:61:b9:ea:
1f:21:e4:17:3d:25:55:aa:48:1c:e1:6a:52:f6:86:
ce:8d:80:50:d4:a9:90:43:1d:ef:fd:88:b9:60:e2:
6e:20:b5:e3:2c:7f:89:c9:4e:da:4e:c0:86:67:7c:
b1:1f:91:e5:36:fd:3d:f1:09:f1:ac:cb:5e:d1:a5:
06:ea:92:fd:88:f2:4a:e2:84:6f:8e:0b:9c:5e:d1:
e8:8b:6c:9e:09:b7:bd:62:58:68:51:b5:74:90:48:
36:4f:61:cf:3d:e1:7d:f1:fd:ff:e0:2b:01:de:a4:
75:1a:ce:6d:a5:db:3a:ce:61:c7:b8:1a:6b:07:97:
34:39:f4:6a:0a:6d:0d:8d:9d:b5:d1:1a:44:62:e0:
91:68:9b:6e:b9:b3:d1:61:76:a8:29:8b:5c:3f:63:
97:cd:f7:43:3e:c4:51:25:ab:f4:ac:52:fb:ec:6f:
96:87:53:d2:bf:16:ba:9c:13:ba:fa:42:4b:75:45:
c6:be:e4:f2:ac:89:88:d1:70:5f:08:94:29:82:6a:
c8:de:c1:20:8a:36:26:a6:d8:de:0a:ba:f1:70:a3:
1b:53:c2:d9:27:2d:e1:90:91:99:2b:2e:56:d1:97:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:97:6F:1F:9F:77:F9:C6:6B:E6:96:F5:05:4B:2C:C1:82:F1:D9
X509v3 Authority Key Identifier:
keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/Pw-Xbx-fd_nGa-aW9QVLLMGC8dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.223.101.0/24
85.223.126.0/24
217.149.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:d7:9b:6a:82:45:2d:bf:d4:93:dd:52:ec:79:fa:63:26:04:
16:60:d5:f9:f9:48:e6:b3:37:de:c0:45:cd:93:de:d7:a0:4d:
0c:54:b4:51:04:d6:2a:64:1f:92:48:a3:62:9d:2a:e3:4b:1b:
16:0c:75:16:d6:25:45:3e:13:7e:f5:6f:bd:01:7d:54:27:6a:
04:95:28:75:b2:79:24:e8:b1:f4:05:9b:d6:2b:41:b3:04:ce:
8d:b0:5f:d9:2d:12:3e:b5:3d:d5:bb:ae:34:93:13:35:40:9f:
37:97:1c:c9:ad:8c:64:75:9a:c5:f2:08:ee:e3:50:bb:38:fa:
b5:a1:f8:f7:2e:10:b5:e5:5f:fa:54:ab:6d:b2:4a:74:41:de:
4c:10:54:9b:5a:13:70:f3:32:59:4c:4e:cb:18:12:03:35:61:
27:e1:8c:f7:34:7d:93:84:c4:0c:18:1a:84:ee:7d:78:46:7f:
cc:72:10:df:1b:9c:3b:dd:56:cc:aa:eb:b5:63:18:f5:86:9f:
c7:57:a5:9c:13:33:08:86:97:4d:25:4e:ab:b5:35:c3:84:f4:
bc:a7:51:0f:58:69:ac:76:06:aa:c5:d6:19:c4:25:12:c3:3c:
81:2c:7a:da:74:97:57:94:b2:09:b0:be:d5:af:6c:bc:bb:5a:
1f:00:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:33:39 2026 by rpki-client