Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GWnwP1AQMRZv69dFYerjFDhOT5E.roa
File: GWnwP1AQMRZv69dFYerjFDhOT5E.roa (raw, json)
Hash identifier: Zl+8vWvBaHrqBkSv+uhHpOMY7xVbiKanNR9dKqsC4eA=
Subject key identifier: 19:69:F0:3F:50:10:31:16:6F:EB:D7:45:61:EA:E3:14:38:4E:4F:91
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0945A66E3C3F3B663C0179589863E72B5
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GWnwP1AQMRZv69dFYerjFDhOT5E.roa
Signing time: Sat 12 Sep 2026 06:42:27 +0000
ROA not before: Sat 12 Sep 2026 06:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.98.197.0/24 maxlen: 24
85.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:5a:66:e3:c3:f3:b6:63:c0:17:95:89:86:3e:72:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 12 06:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1969f03f501031166febd74561eae314384e4f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:e7:0d:d2:52:c1:03:b2:4e:1f:79:64:65:
a0:ea:1c:29:90:16:42:67:b6:f3:c6:39:bf:c7:55:
9b:fe:66:eb:6a:df:79:9a:61:d3:a0:2f:cf:e4:26:
d2:d3:87:46:e2:f2:8a:02:42:60:39:4e:32:1b:f0:
01:27:e7:7a:f3:a6:7a:d5:d5:9c:2b:de:35:84:df:
e6:09:f9:f7:5f:88:6a:0e:ed:d9:7c:b6:f0:f0:2b:
9d:02:79:90:eb:4f:d9:69:12:31:82:a2:09:4d:d5:
d7:47:20:c7:28:62:c8:c5:9b:2a:0f:c6:ba:01:7d:
07:14:2c:14:b3:23:49:ab:9c:2c:fa:54:f7:46:b7:
fa:5a:5c:1b:32:b0:0e:5a:2d:e0:04:41:48:79:a4:
3d:df:65:23:74:67:df:b7:88:0d:9b:13:be:be:18:
5c:82:31:26:4b:cd:db:32:a4:fb:a4:0b:f6:a0:86:
7f:74:ad:8a:e8:9f:76:3f:6e:2b:49:66:c0:b5:63:
82:35:49:84:c6:94:51:1f:1c:03:e7:78:c9:7b:a9:
3f:34:08:26:cb:a7:4f:95:a2:33:ee:e0:c0:24:50:
fb:f3:8b:6e:6b:af:c0:a6:9c:51:51:2d:a5:af:5a:
cf:b0:01:a0:44:81:9a:d6:a6:f0:7f:13:07:24:70:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:69:F0:3F:50:10:31:16:6F:EB:D7:45:61:EA:E3:14:38:4E:4F:91
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/GWnwP1AQMRZv69dFYerjFDhOT5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.197.0/24
85.222.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:17:62:58:83:10:05:5a:e7:e4:fa:b2:e4:99:5a:92:ab:bb:
cd:f1:0a:2b:a7:e5:c2:7b:db:f6:61:90:b7:83:b8:c9:4e:2e:
a4:df:d5:a2:a4:8d:a1:4c:4d:d6:e6:9d:5b:8d:f8:0d:f2:d2:
0a:0d:ed:89:5f:f2:ca:91:1a:09:89:bb:c0:4a:69:a6:08:07:
3b:69:6f:a7:c5:60:dd:09:2f:66:15:cc:44:69:f0:78:76:09:
10:bd:13:63:ea:29:47:fc:d4:a1:b0:9d:1e:c7:c7:26:0b:d2:
51:35:1e:53:a4:de:b3:33:0f:92:a8:ab:df:41:ba:2e:78:f0:
10:a6:9a:ea:a1:87:ac:dc:72:0d:dd:03:45:cb:cb:7f:a3:c1:
0d:5a:96:aa:d5:4e:93:b4:c5:26:bf:f1:b3:ed:c4:92:4c:be:
4b:1d:55:bf:d6:b0:79:a4:8a:8f:10:f5:c8:bf:e1:11:c8:c2:
f3:f8:1f:ba:a2:aa:a4:42:f3:1c:bc:26:dc:8b:21:38:1a:67:
29:5e:c7:e3:08:3b:f1:7c:95:38:f1:c5:67:88:0a:b9:10:d1:
25:be:2f:bb:bc:a7:27:52:7e:89:62:f5:ab:16:6a:27:38:1c:
57:19:44:ec:00:9e:04:4c:30:41:de:36:8c:28:1e:c7:cf:cd:
b9:29:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:23 2026 by rpki-client