Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/wM_Sw4ahBAkfr443I5qHovMGK-E.roa
File: wM_Sw4ahBAkfr443I5qHovMGK-E.roa (raw, json)
Hash identifier: ccI5LSYVnusEqxoS6Xu8BRqRTEsPmP2LEixuhNACjdg=
Subject key identifier: C0:CF:D2:C3:86:A1:04:09:1F:AF:8E:37:23:9A:87:A2:F3:06:2B:E1
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019C75AEC2762843C35507C4CBADF2041D32
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/wM_Sw4ahBAkfr443I5qHovMGK-E.roa
Signing time: Thu 19 Feb 2026 11:35:13 +0000
ROA not before: Thu 19 Feb 2026 11:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398704
IP address blocks: 81.17.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:ae:c2:76:28:43:c3:55:07:c4:cb:ad:f2:04:1d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Feb 19 11:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c0cfd2c386a104091faf8e37239a87a2f3062be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:ec:ee:c2:0d:56:80:a5:91:84:39:9a:0f:
2c:d1:f9:52:94:78:3a:6b:81:e5:97:4d:32:86:c0:
46:2d:1e:ac:8d:8d:61:e5:e3:a1:0b:22:c3:6a:a4:
17:b9:c4:77:28:38:24:dd:f8:dd:c0:fd:c4:7d:b6:
fa:d3:27:6e:46:bb:e9:33:9c:ce:c7:b3:0a:35:68:
28:59:fb:a8:05:50:7b:ea:10:8e:64:f5:e9:7f:6e:
e4:3e:c2:41:48:6a:e1:a2:40:7f:c2:a1:3d:45:70:
6b:a3:19:10:6e:b4:d9:b9:c1:95:9d:55:e0:ae:fe:
25:85:2f:3d:46:9c:3d:a3:f8:73:64:ed:48:88:c6:
c2:5a:75:20:06:71:12:1d:71:b5:ed:e5:78:d7:48:
d8:ce:51:e2:a7:08:62:08:cb:66:22:ec:91:d8:ad:
d6:09:40:ee:ca:05:c9:7f:23:60:8b:8e:d9:f6:30:
63:d1:73:4f:3c:8c:cc:94:92:55:49:b2:91:d1:d8:
91:d4:63:a3:3d:43:35:73:bf:d6:69:93:29:37:9b:
b0:90:df:f9:b2:5f:2a:cb:ca:f6:0a:97:38:ac:bb:
ad:3c:e6:93:28:fd:39:cd:4f:88:47:77:41:74:68:
27:60:99:c6:57:18:b8:ad:e8:15:36:4d:4c:bd:c8:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:D2:C3:86:A1:04:09:1F:AF:8E:37:23:9A:87:A2:F3:06:2B:E1
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/wM_Sw4ahBAkfr443I5qHovMGK-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.168.0/21
Signature Algorithm: sha256WithRSAEncryption
31:f8:be:c9:93:d7:7d:94:b6:c9:29:e0:f5:f7:8d:a8:d4:d5:
87:58:5c:9c:a0:77:02:eb:b3:52:c9:e1:03:ba:37:79:fb:8f:
98:e1:b5:33:57:54:3c:20:d5:0f:d2:c7:b7:a9:92:a5:fb:6f:
43:65:91:5b:93:78:e8:55:5a:33:a3:a3:c8:92:9f:4d:4a:d0:
ac:7c:76:0e:58:99:0c:b5:40:cf:7c:6a:59:31:75:d0:02:04:
22:39:ae:66:b9:09:51:91:d1:a0:14:18:ed:8a:ad:d2:16:8c:
dc:0d:8f:0c:18:41:b6:00:a0:c3:24:d3:d1:48:42:d8:2d:26:
f3:91:7b:21:e7:05:8e:63:3a:f8:ea:94:c4:a3:69:68:ba:70:
c2:1b:3e:25:b5:4d:33:df:c5:6e:92:a5:60:35:2f:bd:dd:6f:
ed:b2:e8:7a:1d:21:4d:16:96:fd:0c:80:cc:b2:9e:22:75:7f:
7c:04:6c:9b:e0:28:a3:af:6e:fe:7d:2c:74:31:21:a5:4d:04:
e4:e1:84:96:e5:2a:29:92:f8:5e:b7:74:a9:4c:ae:8d:02:01:
71:73:d5:37:27:74:80:00:16:78:1d:4c:ca:2d:2e:af:26:11:
b0:1c:8e:2a:21:3e:e3:d2:ec:f0:d7:d3:d8:bf:28:63:25:03:
24:d1:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:09 2026 by rpki-client