Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWPX_-k0JE5RJbPRkEb6MPdAqLk.roa
File: RWPX_-k0JE5RJbPRkEb6MPdAqLk.roa (raw, json)
Hash identifier: Nf+zJA6aIHHjvCKVZrrY8N5WQ8KPwlPUbq02FJNnbRA=
Subject key identifier: 45:63:D7:FF:E9:34:24:4E:51:25:B3:D1:90:46:FA:30:F7:40:A8:B9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C23A0405CCB8ADB06810DF73275DBB905
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWPX_-k0JE5RJbPRkEb6MPdAqLk.roa
Signing time: Tue 03 Feb 2026 13:10:30 +0000
ROA not before: Tue 03 Feb 2026 13:10:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 45.87.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:23:a0:40:5c:cb:8a:db:06:81:0d:f7:32:75:db:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 3 13:10:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4563d7ffe934244e5125b3d19046fa30f740a8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:84:9b:4f:21:95:12:e2:91:e0:9a:e4:9e:
6d:72:4a:91:0f:fd:ed:ba:01:34:83:75:5b:2a:eb:
4f:44:bd:f8:9e:48:c6:98:c4:17:a8:a3:ba:8c:f6:
19:0d:0d:6a:bc:f7:37:2a:f2:a6:16:80:d6:e1:6f:
7c:13:7b:9a:20:0f:e6:60:7d:b0:a7:1e:a3:f6:78:
55:03:57:b5:d1:15:15:94:75:bc:a4:f5:d3:7a:40:
19:ad:27:74:e4:a1:d0:b4:7c:2a:0a:51:49:49:d6:
eb:1e:f6:c1:4a:f3:cc:e9:4d:85:5b:eb:f5:c8:be:
5b:33:cd:cc:f4:05:6a:40:41:e4:c9:17:75:68:00:
40:23:18:a0:d7:72:55:10:c6:b4:db:4a:95:c2:f7:
b3:fa:c9:3c:41:06:7a:d4:0f:46:8a:0a:8f:2a:b5:
bb:d3:4e:86:1a:6a:5e:e3:ff:f4:03:f2:82:ee:78:
64:2c:72:c3:19:93:43:51:60:ae:aa:7e:f8:a9:a5:
78:09:89:e8:b2:6c:ce:f3:d0:8c:45:0c:92:36:c3:
7a:6c:a5:f7:d1:ed:f0:47:15:54:c3:07:f7:8a:6e:
0d:e5:b1:2d:90:88:f5:67:13:71:56:e4:4e:11:c1:
40:68:5e:9f:60:7a:37:2a:fc:c9:00:1b:28:5e:3c:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:D7:FF:E9:34:24:4E:51:25:B3:D1:90:46:FA:30:F7:40:A8:B9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWPX_-k0JE5RJbPRkEb6MPdAqLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.248.0/24
Signature Algorithm: sha256WithRSAEncryption
39:67:2c:63:be:53:c0:d6:58:f5:25:07:8c:5e:e6:17:d7:8a:
6a:4c:45:c0:3b:90:02:8f:c4:53:80:e4:07:59:45:18:60:0b:
a9:f1:49:b9:de:40:cf:40:fc:1f:fc:ee:93:70:9d:58:33:1c:
1e:b4:4f:63:62:d5:9e:9e:52:6b:e5:90:ab:f2:f4:11:65:91:
35:6e:73:24:5e:a7:50:11:1d:a9:46:48:ad:f4:91:c8:e3:4e:
f5:7d:5d:08:d6:06:cc:4e:44:0b:0e:61:86:1e:31:4d:6d:6b:
82:4d:d6:f2:af:26:3d:eb:19:43:fb:54:12:b5:c3:96:2b:5d:
0e:e7:2a:5a:bf:86:3d:e5:f1:24:29:ca:07:1c:db:3b:f0:e2:
80:49:74:7d:20:d6:fa:33:e1:03:f9:3c:d1:44:1d:f2:1c:42:
f3:33:b6:7f:1f:88:7d:33:56:f0:05:f1:aa:9c:11:d3:ef:61:
bd:d8:91:aa:ae:ee:49:c5:a4:70:c2:2c:83:d2:ad:37:81:3c:
9b:60:e4:64:b2:66:12:5f:db:90:66:55:26:1d:26:30:01:61:
f0:bc:19:99:f7:6b:5f:96:60:0c:7a:88:53:cf:2e:44:83:d6:
13:30:fd:c0:b9:9e:77:62:d0:8b:92:9e:42:b3:c1:f0:8a:ea:
a3:e8:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:57 2026 by rpki-client