Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/cw-KXeWioyTYbIA1vAnNwGD9GhY.roa
File: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (raw, json)
Hash identifier: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=
Subject key identifier: 73:0F:8A:5D:E5:A2:A3:24:D8:6C:80:35:BC:09:CD:C0:60:FD:1A:16
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 019C42050C4173A9A61B5CCFF6A9AA19EDBC
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/cw-KXeWioyTYbIA1vAnNwGD9GhY.roa
Signing time: Mon 09 Feb 2026 10:49:12 +0000
ROA not before: Mon 09 Feb 2026 10:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 92.42.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:05:0c:41:73:a9:a6:1b:5c:cf:f6:a9:aa:19:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Feb 9 10:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=730f8a5de5a2a324d86c8035bc09cdc060fd1a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:c5:01:2e:9e:2b:9d:0a:99:85:fd:e3:67:
2b:dc:75:82:a6:19:96:0c:5a:70:04:50:95:66:ec:
09:08:97:da:97:4b:33:29:ff:6f:b9:a2:0a:94:13:
7c:bc:f8:b7:b6:13:73:03:8f:a0:2d:b8:85:10:39:
fe:08:bf:62:5f:a8:cd:9c:86:b3:71:4b:67:e1:3d:
69:7f:eb:ca:87:d8:79:90:91:39:43:7b:18:78:55:
e0:e0:19:1b:02:30:6c:d8:dd:3a:e0:94:0f:f0:81:
4d:52:47:38:d3:92:3c:2e:62:01:74:28:90:ea:a2:
d6:cd:d1:b4:95:1e:47:32:90:c4:52:7b:c7:20:af:
72:6a:3b:85:4a:7e:5e:5b:54:31:9c:2c:2f:28:cb:
c3:26:83:e8:b8:1f:90:54:12:24:a3:ea:89:42:fa:
78:a1:08:1e:69:42:f5:60:7c:30:32:2a:4c:cc:08:
25:12:7a:34:fd:4c:f3:14:48:30:bb:55:cb:ca:17:
bf:d3:0d:11:7a:da:ba:ba:6f:26:31:dd:2f:3f:89:
95:f7:e6:d9:41:d9:72:a4:f4:1d:4a:b0:40:8e:6d:
5b:c7:55:6c:40:93:6e:3d:01:c0:0d:dd:8f:a5:d7:
b7:17:06:0f:6e:e2:18:95:fb:e4:d4:7f:86:1c:54:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:8A:5D:E5:A2:A3:24:D8:6C:80:35:BC:09:CD:C0:60:FD:1A:16
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/cw-KXeWioyTYbIA1vAnNwGD9GhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.102.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9b:7f:9c:13:26:51:e8:0f:8c:83:d0:c6:e1:5c:7e:c1:e0:
66:78:58:7f:3a:33:3d:a0:9a:57:d5:2c:24:3d:70:f4:5b:16:
04:0b:77:1e:71:61:71:05:70:9d:30:63:d9:ae:c0:93:4c:c6:
3f:46:94:ab:8c:56:32:45:aa:62:f8:44:f5:4f:ca:fb:0e:f9:
3a:8c:26:67:98:c1:11:25:8b:45:f3:ef:3f:6a:be:b8:d2:32:
d4:c2:44:19:71:30:9f:5b:15:c1:a7:c2:3b:ed:4e:a7:5b:f1:
13:10:9b:42:2c:ce:a4:55:85:79:9a:25:7d:12:0f:ac:ad:06:
fd:04:73:66:c2:42:a5:81:93:1b:c7:10:de:80:28:7d:ee:06:
94:c7:71:ff:a5:28:d9:21:47:67:3f:7f:14:ef:bf:c6:e5:4a:
36:57:94:7a:ee:e2:f0:bc:e2:7d:2f:78:65:87:79:0d:cb:dc:
43:f9:d6:0b:10:d3:b9:24:1a:d2:1e:64:98:f1:9e:30:15:96:
f8:dc:c1:19:c0:d4:b1:9f:d6:9e:fc:5a:69:77:c5:34:0a:83:
b3:ef:b7:05:23:da:47:66:5e:c8:22:f4:d4:a8:8e:46:00:55:
6d:3a:64:23:77:78:75:ea:71:f1:82:93:ac:ea:1c:66:c4:7e:
5d:49:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:16 2026 by rpki-client