Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/pwG_-p96WEJCkBCjvw8vR6C4NJk.roa
File: pwG_-p96WEJCkBCjvw8vR6C4NJk.roa (raw, json)
Hash identifier: ReJzrM9LBiTAk6u/wPTtG7YxGNkyrsPS+099hU3DXtU=
Subject key identifier: A7:01:BF:FA:9F:7A:58:42:42:90:10:A3:BF:0F:2F:47:A0:B8:34:99
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A0542D088CF0317074C9C5641017EC2381
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/pwG_-p96WEJCkBCjvw8vR6C4NJk.roa
Signing time: Sun 30 Aug 2026 19:37:12 +0000
ROA not before: Sun 30 Aug 2026 19:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219172
IP address blocks: 87.199.154.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:2d:08:8c:f0:31:70:74:c9:c5:64:10:17:ec:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Aug 30 19:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a701bffa9f7a5842429010a3bf0f2f47a0b83499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:3d:40:30:7a:61:b9:16:a9:11:b5:dc:4e:
67:f3:88:7e:e9:e6:3a:8a:cb:6d:d2:32:bf:25:ae:
23:11:a5:86:95:6f:70:98:53:ee:10:17:78:79:06:
4a:61:41:36:d1:a6:30:0d:cb:ab:ae:2c:f5:77:b2:
bc:87:e4:20:90:69:29:72:9a:59:a0:94:4f:18:26:
56:c1:f0:df:2b:ed:6f:47:52:3e:06:10:35:62:f9:
fc:43:60:c6:2f:b0:a2:bd:fe:74:d8:66:91:ff:8c:
c7:2e:af:5e:55:1e:ca:21:af:c5:84:dc:00:11:6b:
fe:13:09:54:f8:cc:0b:8a:bf:e2:1b:c2:1f:4f:73:
c6:f4:bb:ec:d0:51:0f:27:0c:f1:0a:ba:7e:8b:39:
97:be:d1:f0:b7:56:99:28:62:2f:e6:a1:5b:96:73:
64:b2:fa:80:ca:2f:88:c4:e9:0a:63:be:8f:29:70:
f4:6a:77:a5:e3:58:bb:86:82:70:b8:d3:db:54:dc:
1d:ee:ec:60:18:6c:8a:e8:c6:77:12:da:a7:21:67:
78:88:a9:12:7d:35:6a:03:24:f9:3b:c8:3b:65:57:
33:40:45:09:d6:ef:14:03:81:8b:79:ab:d9:da:18:
3d:36:53:e8:c9:c5:3e:a9:4f:f4:4f:ca:df:50:35:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:BF:FA:9F:7A:58:42:42:90:10:A3:BF:0F:2F:47:A0:B8:34:99
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/pwG_-p96WEJCkBCjvw8vR6C4NJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.154.0/24
136.148.151.0/24
Signature Algorithm: sha256WithRSAEncryption
86:22:82:51:cc:43:1f:97:b3:a1:33:b7:20:40:ca:02:2b:0c:
0d:ed:55:66:af:25:ea:65:4d:93:ab:85:06:2e:8c:26:9e:59:
a1:26:9e:64:7f:53:60:40:cd:39:47:37:2f:d4:4d:4b:88:fb:
17:88:66:b8:c8:31:1b:ba:c6:0e:e4:14:02:44:f6:6f:50:03:
65:91:d9:c3:87:11:3c:08:72:0b:d0:34:f4:a3:3c:0a:a6:44:
65:f4:10:4f:7f:51:f8:78:e8:9f:d7:ff:0d:45:bc:eb:86:67:
80:44:18:61:01:85:b7:53:ac:c1:1e:ee:e7:9b:1b:1c:17:43:
aa:6e:bc:bb:2a:99:44:8e:0e:60:29:74:4b:4d:50:62:cb:ee:
6b:e6:ea:6f:8f:fe:da:d9:f0:85:ee:de:92:ef:f6:68:1c:57:
94:8b:81:85:f1:13:98:e8:a1:d4:9e:4c:17:18:51:95:2f:29:
75:16:de:fe:c4:0b:b7:1d:c9:64:b4:b0:1b:62:d4:38:d3:03:
d7:6f:32:d2:84:22:d8:3d:13:37:86:6b:92:b9:a5:49:d7:14:
94:71:69:0a:0a:ce:64:56:4c:74:f3:56:8c:30:b6:5d:45:7f:
93:c5:a5:9e:ad:0b:fe:15:fd:4f:bb:2b:46:f7:99:d9:df:fe:
1f:42:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:52 2026 by rpki-client