Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/rwnmDRqOKZ4XobKPk7EfioXDUHU.roa
File: rwnmDRqOKZ4XobKPk7EfioXDUHU.roa (raw, json)
Hash identifier: XenrA46Tl2A6yQoz5IgLxyvlUvV4GMGTev0IO4loosw=
Subject key identifier: AF:09:E6:0D:1A:8E:29:9E:17:A1:B2:8F:93:B1:1F:8A:85:C3:50:75
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019E446121E5A5DE415F185BB7590B3FB827
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/rwnmDRqOKZ4XobKPk7EfioXDUHU.roa
Signing time: Wed 20 May 2026 07:54:36 +0000
ROA not before: Wed 20 May 2026 07:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208591
IP address blocks: 45.84.208.0/22 maxlen: 24
185.216.58.0/23 maxlen: 24
2a0e:a180::/29 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:61:21:e5:a5:de:41:5f:18:5b:b7:59:0b:3f:b8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: May 20 07:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af09e60d1a8e299e17a1b28f93b11f8a85c35075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:df:9b:67:b7:ec:c7:f4:4e:0c:d1:9c:0d:
02:0f:73:14:88:f4:99:ae:9c:da:30:c7:2d:66:d6:
7a:d8:fd:b4:a7:67:45:31:f6:e5:d5:c2:ef:b7:ee:
b6:8a:53:8f:af:ec:89:0a:d1:1b:59:95:8a:13:a2:
75:42:b2:ab:1e:55:16:8b:ae:ec:71:61:38:5d:72:
4d:c3:27:17:91:07:2a:b1:20:ab:8a:0c:4e:3c:f1:
86:ad:35:19:6e:0c:06:80:b9:c7:e0:9a:9a:81:04:
37:5b:3b:b9:4f:c5:35:be:f2:83:b6:75:c3:77:91:
56:cf:5b:83:83:b2:8a:7a:b9:d6:b3:19:31:17:64:
dc:ea:a9:ba:42:69:af:5e:73:76:2b:fd:ec:8c:58:
2b:15:de:8f:b6:ba:8f:fc:da:de:81:6a:1e:66:83:
eb:c6:78:18:5d:aa:bd:6e:26:2d:64:4d:03:0c:dd:
1a:1f:f0:0f:a8:ac:16:1e:9d:77:6f:e8:ef:2c:b1:
1a:e0:bb:18:e4:16:56:e6:d7:ff:20:10:a4:3b:57:
0f:d2:3d:6d:5a:86:43:40:2c:03:78:fd:9f:dc:c2:
ea:01:1e:b6:92:e0:d5:84:bd:b7:d1:af:c2:46:db:
df:4e:fa:ea:66:15:cc:49:0d:39:42:03:1f:71:9a:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:E6:0D:1A:8E:29:9E:17:A1:B2:8F:93:B1:1F:8A:85:C3:50:75
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/rwnmDRqOKZ4XobKPk7EfioXDUHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.208.0/22
185.216.58.0/23
IPv6:
2a0e:a180::/29
Signature Algorithm: sha256WithRSAEncryption
84:65:3f:cc:bb:b2:d4:2e:04:4d:95:b7:e9:22:13:39:0a:02:
53:51:6d:d3:4f:30:68:9b:7b:d3:13:f4:07:fa:fe:0d:a1:a9:
8f:9a:95:15:1f:21:e7:b4:48:29:d1:ca:69:7d:e7:8a:0c:2d:
0b:4f:b4:21:cd:e3:e7:6d:22:9d:02:8a:49:26:d3:bd:92:82:
11:5e:d2:03:4a:de:64:63:71:6a:ff:02:11:fb:86:f8:e0:d5:
24:d5:8d:87:f4:11:0f:d7:e2:80:f6:be:c3:1a:9d:e3:71:4a:
0c:66:de:ae:68:d2:91:d6:4a:4b:4c:95:63:47:14:2b:ab:fc:
44:ee:0e:a0:23:1d:7f:82:9c:5d:a6:7b:13:e6:04:b1:bc:05:
fd:60:03:7f:51:58:0f:a5:3f:83:35:d0:51:26:f5:1f:b6:50:
37:18:c2:9c:35:56:93:98:8a:24:d2:39:f2:80:20:10:27:2e:
23:c4:10:9c:ad:09:51:10:58:85:bf:ca:d5:8d:03:9b:a0:65:
f9:1d:09:96:97:6d:84:2f:2f:0b:6f:d4:b9:5a:24:05:11:67:
28:e9:89:77:04:40:48:e9:66:2d:44:87:be:6c:12:8b:c2:b2:
87:ab:10:a0:e2:52:10:1e:df:b3:37:7d:bf:f1:3b:cc:e0:be:
c2:81:93:cc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ5EYSHlpd5BXxhbt1kLP7gnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjYwNTIwMDc1NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjA5ZTYwZDFhOGUyOTllMTdhMWIyOGY5M2IxMWY4YTg1YzM1MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lHfm2e37Mf0TgzRnA0CD3MUiPSZ
rpzaMMctZtZ62P20p2dFMfbl1cLvt+62ilOPr+yJCtEbWZWKE6J1QrKrHlUWi67s
cWE4XXJNwycXkQcqsSCrigxOPPGGrTUZbgwGgLnH4JqagQQ3Wzu5T8U1vvKDtnXD
d5FWz1uDg7KKernWsxkxF2Tc6qm6QmmvXnN2K/3sjFgrFd6PtrqP/NregWoeZoPr
xngYXaq9biYtZE0DDN0aH/APqKwWHp13b+jvLLEa4LsY5BZW5tf/IBCkO1cP0j1t
WoZDQCwDeP2f3MLqAR62kuDVhL230a/CRtvfTvrqZhXMSQ05QgMfcZrt3QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFK8J5g0ajimeF6Gyj5OxH4qFw1B1MB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvcndubURScU9LWjRYb2JLUGs3RWZpb1hEVUhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVTQAwQB
udg6MA0EAgACMAcDBQMqDqGAMA0GCSqGSIb3DQEBCwUAA4IBAQCEZT/Mu7LULgRN
lbfpIhM5CgJTUW3TTzBom3vTE/QH+v4NoamPmpUVHyHntEgp0cppfeeKDC0LT7Qh
zePnbSKdAopJJtO9koIRXtIDSt5kY3Fq/wIR+4b44NUk1Y2H9BEP1+KA9r7DGp3j
cUoMZt6uaNKR1kpLTJVjRxQrq/xE7g6gIx1/gpxdpnsT5gSxvAX9YAN/UVgPpT+D
NdBRJvUftlA3GMKcNVaTmIok0jnygCAQJy4jxBCcrQlREFiFv8rVjQOboGX5HQmW
l22ELy8Lb9S5WiQFEWco6Yl3BEBI6WYtRIe+bBKLwrKHqxCg4lIQHt+zN32/8TvM
4L7CgZPM
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:29 2026 by rpki-client