Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RWMSDlIB3uhWclPzzZc58Fvch-Y.roa
File: RWMSDlIB3uhWclPzzZc58Fvch-Y.roa (raw, json)
Hash identifier: gENioNipLIRxi5/XPFp+fGJ9ncRXoeXIoKxNJJBgF0Y=
Subject key identifier: 45:63:12:0E:52:01:DE:E8:56:72:53:F3:CD:97:39:F0:5B:DC:87:E6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A17ECFBD19D78363A1E50131A013095CC9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RWMSDlIB3uhWclPzzZc58Fvch-Y.roa
Signing time: Tue 27 Oct 2026 19:21:45 +0000
ROA not before: Tue 27 Oct 2026 19:21:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 82.110.157.0/24 maxlen: 24
217.79.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:cf:bd:19:d7:83:63:a1:e5:01:31:a0:13:09:5c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 27 19:21:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4563120e5201dee8567253f3cd9739f05bdc87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:90:e0:81:4e:91:6e:15:b8:5c:b3:f9:c2:
91:96:4d:64:2f:cf:ca:2d:40:53:95:11:28:eb:30:
9c:ad:b2:bd:16:4f:6e:c5:e6:5f:8d:e8:14:70:49:
a6:b4:db:c1:ed:0b:b9:b3:eb:f2:da:e5:49:7f:32:
9d:46:8b:58:c0:7d:06:42:f0:09:04:a5:02:ba:56:
a4:be:a7:c1:57:c0:a0:1a:8f:63:97:97:37:75:0a:
cb:d7:29:13:19:79:15:3c:ee:2a:d3:45:c5:d6:81:
a8:87:64:93:bb:bd:14:ce:25:e2:ac:1a:bd:db:4c:
78:f0:23:41:6e:0a:33:bd:94:55:b4:bf:19:66:25:
7c:c5:b0:1a:f0:ba:2e:f8:a8:92:35:53:e6:49:81:
ed:75:a9:28:e3:5a:ef:d9:39:67:b4:3a:34:ec:09:
c9:5d:fd:bf:5c:ee:9d:87:60:d0:f4:d0:3e:47:1c:
1a:df:d4:dc:7b:67:01:0a:ce:15:b1:8a:5f:8d:c2:
ba:db:7a:61:6f:7a:77:ab:b1:c8:70:f2:18:4e:33:
80:3b:0e:31:95:ea:35:86:7f:19:a7:c2:d3:b8:00:
b3:76:20:19:54:11:93:ab:c6:2f:6b:2b:e6:6b:66:
5a:f5:99:f1:16:ee:f8:5f:e3:51:c8:01:67:7e:d8:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:12:0E:52:01:DE:E8:56:72:53:F3:CD:97:39:F0:5B:DC:87:E6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RWMSDlIB3uhWclPzzZc58Fvch-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.157.0/24
217.79.122.0/24
Signature Algorithm: sha256WithRSAEncryption
81:71:cc:4e:5e:b8:6f:88:2f:24:e1:30:25:2b:b9:a0:f1:59:
9a:1b:36:9e:93:94:a7:bb:eb:45:ad:db:bf:05:54:ee:5b:67:
d6:a1:23:17:ae:f4:12:4a:e4:9b:d9:5d:38:51:2f:42:74:de:
f0:92:dd:5c:31:f3:4e:b6:58:d7:e8:c5:e7:75:d0:78:0a:74:
93:f9:bc:90:b4:21:78:e9:b2:ba:b8:38:2a:08:14:c6:71:61:
9e:9b:14:e4:15:52:1f:ed:06:02:5e:7a:65:91:5b:b5:97:c0:
e1:91:fe:e1:d2:08:c5:2b:f5:d4:cc:b8:f7:42:9b:2b:96:54:
ca:4b:e3:ec:88:ed:cd:bd:d2:7b:f0:64:5a:cc:94:e5:02:87:
f8:37:ad:60:6d:83:24:03:0f:6a:4a:9f:24:fc:20:06:f3:7b:
ea:c4:ad:e4:58:c6:9a:46:3c:a1:ab:36:9b:46:d9:95:ed:58:
c5:77:c4:a9:d6:f1:3a:63:62:07:2d:c1:8a:cf:5c:95:e7:c6:
b9:d3:5c:d7:22:c3:a6:bd:5e:9e:f4:a0:a1:59:fd:c3:9b:e7:
a8:de:fb:40:4c:98:b1:e7:46:c4:cd:98:d0:23:6f:aa:cf:c3:
db:7c:36:7d:fc:ae:0b:46:c5:94:85:24:ef:9f:59:8e:5e:03:
e8:18:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:09 2026 by rpki-client