Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/pOAwtv3oQJH41toyc3-E5JthOJs.roa
File: pOAwtv3oQJH41toyc3-E5JthOJs.roa (raw, json)
Hash identifier: wtG0+KFgN0eCbjfcXDWDwmbRVVhbjWhn4sWPMdUHZ6w=
Subject key identifier: A4:E0:30:B6:FD:E8:40:91:F8:D6:DA:32:73:7F:84:E4:9B:61:38:9B
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019C7707E90840585FFD50D15E09431B55CD
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/pOAwtv3oQJH41toyc3-E5JthOJs.roa
Signing time: Thu 19 Feb 2026 17:52:13 +0000
ROA not before: Thu 19 Feb 2026 17:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 193.178.33.0/24 maxlen: 24
193.178.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:07:e9:08:40:58:5f:fd:50:d1:5e:09:43:1b:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Feb 19 17:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4e030b6fde84091f8d6da32737f84e49b61389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:e8:f5:8f:19:24:76:18:d1:84:b8:64:aa:
b1:5c:f0:66:f1:5f:1b:96:17:1c:0c:60:04:30:ea:
dd:ea:4a:7f:0f:56:7c:c3:35:21:54:02:53:df:1c:
e6:32:aa:a8:67:7e:cd:5b:25:67:6f:ea:76:a3:cf:
56:31:5f:0e:6d:83:57:ae:37:ca:8f:d9:12:8b:ab:
da:cd:c4:d5:20:7e:5a:64:93:0f:9c:10:17:e8:46:
76:70:5c:09:7a:6f:2b:79:58:4c:67:5f:5f:91:3d:
a2:9c:f3:49:1a:77:f0:21:01:0b:18:1a:b7:d1:78:
42:e8:7b:a5:c5:ca:d2:e2:2a:6b:fc:a4:5c:0f:15:
06:d8:05:93:e1:f1:86:95:72:a0:4f:e0:41:91:90:
c8:d0:eb:6b:d7:2e:18:78:12:50:93:ac:78:e9:0b:
c0:27:3d:08:b4:f2:74:fe:22:c6:df:cf:f0:be:99:
65:18:b1:44:9a:82:f4:1e:13:06:f0:ee:59:42:5b:
fc:d5:60:6d:04:21:ce:f0:02:ae:88:e3:1b:74:0c:
ac:bc:cc:83:f6:f5:10:28:7f:31:d5:09:88:1d:05:
cf:18:8c:89:16:c0:2e:7b:c9:37:41:f6:38:c9:d7:
95:fc:97:7c:cf:42:78:c2:1f:63:f7:13:1c:de:79:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:30:B6:FD:E8:40:91:F8:D6:DA:32:73:7F:84:E4:9B:61:38:9B
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/pOAwtv3oQJH41toyc3-E5JthOJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.33.0/24
193.178.52.0/24
Signature Algorithm: sha256WithRSAEncryption
59:06:f2:4e:10:58:59:45:6e:57:14:bd:8b:46:28:5a:1e:7e:
ec:8c:ce:4a:37:0a:45:e6:01:a9:7a:93:f1:7b:bc:8d:b6:6f:
cc:95:45:b4:b6:31:60:42:25:7d:ab:3b:b9:78:b7:fc:54:56:
b4:59:33:fd:e1:82:fd:2d:a5:1a:fb:4d:06:53:80:a6:3e:8d:
c4:33:09:e8:43:92:ea:ac:d4:d7:82:cd:4d:ef:37:d3:9c:7d:
b8:93:a1:92:4d:9c:56:14:48:99:47:54:9a:2c:ea:90:d3:ed:
4a:e3:0e:b9:15:a6:0d:2c:98:fa:ec:83:35:89:8f:08:4e:d7:
90:22:05:16:b6:f6:17:2d:86:24:dd:06:9e:87:7b:fc:22:08:
b0:41:16:97:d5:3d:08:1f:35:46:dd:49:cb:46:64:0a:f3:65:
f9:5b:b6:eb:ce:70:fa:c0:63:b4:9b:5e:94:a7:a6:95:87:9b:
a0:71:8c:c7:b7:16:a9:8d:31:b8:4a:23:1b:1d:c6:7c:10:6f:
d9:05:7b:6d:4b:af:3c:91:06:1a:d2:e1:57:27:61:4d:f6:b9:
c0:13:d8:71:76:67:94:06:e3:52:c0:d2:fb:d2:89:82:53:09:
a4:be:3a:2d:71:84:4c:93:17:35:82:2c:18:4a:a1:0c:99:53:
15:af:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:09 2026 by rpki-client