Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PWCKCiM2n9d2HVQlz1epDmR9OLo.roa
File: PWCKCiM2n9d2HVQlz1epDmR9OLo.roa (raw, json)
Hash identifier: Ft2uNW2TtxrgggDgw6Rspf9etRjmqmAIRvpEQN2Kgms=
Subject key identifier: 3D:60:8A:0A:23:36:9F:D7:76:1D:54:25:CF:57:A9:0E:64:7D:38:BA
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A08BD3C80F722EA3F49CE527501EEBED97
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PWCKCiM2n9d2HVQlz1epDmR9OLo.roa
Signing time: Thu 10 Sep 2026 14:58:27 +0000
ROA not before: Thu 10 Sep 2026 14:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 83.245.36.0/22 maxlen: 24
83.245.104.0/22 maxlen: 24
89.167.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d3:c8:0f:72:2e:a3:f4:9c:e5:27:50:1e:eb:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 10 14:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d608a0a23369fd7761d5425cf57a90e647d38ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:9b:72:26:0d:64:22:c3:18:04:e5:b6:4e:
94:5a:47:e6:49:df:ce:e5:57:35:81:d7:fc:be:0a:
18:c6:14:3d:c5:8e:8c:b5:2f:ca:df:85:e1:9f:3d:
60:d1:0f:f7:45:5b:cd:de:42:28:06:d1:ea:c2:bd:
4a:d7:66:ae:3d:b3:22:6c:5f:55:3b:96:30:49:6f:
ea:b6:c6:25:51:25:e5:88:a3:b8:e0:81:19:90:e5:
ee:ce:76:fd:a0:ad:9b:f2:93:8c:c3:a7:b1:91:11:
88:58:5d:3a:82:2d:71:0f:d2:60:62:6b:be:bc:4f:
f6:75:45:27:38:8c:d7:b1:29:d3:6b:3b:02:45:d0:
97:4e:dc:46:61:1e:ca:a7:d9:b5:28:84:e9:44:79:
c9:8a:06:05:8e:8a:d4:a5:df:84:ff:9a:3c:d9:35:
19:6f:1e:ce:90:ea:fe:84:9b:be:c1:4e:19:6a:50:
cd:dc:23:1e:1a:1c:67:d0:0e:5d:53:56:31:ff:5f:
e5:c2:4b:06:7b:a1:90:d0:ce:da:75:2d:d3:0d:8f:
54:ea:1e:1d:07:63:fa:46:f5:2d:f2:35:03:c7:f4:
25:f2:1c:09:2e:a1:3f:20:09:7a:00:01:6e:03:28:
2a:c2:b9:35:a6:ec:ca:a6:f7:9a:fe:bf:82:4e:ff:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:8A:0A:23:36:9F:D7:76:1D:54:25:CF:57:A9:0E:64:7D:38:BA
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/PWCKCiM2n9d2HVQlz1epDmR9OLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.245.36.0/22
83.245.104.0/22
89.167.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:5e:87:cb:ab:fa:3c:10:34:e3:a9:13:22:19:9d:e1:1f:cb:
c7:3c:bd:f6:03:02:31:ee:43:09:6b:9a:d7:b3:b2:9a:e8:25:
90:40:2a:b2:24:b2:9b:8c:a9:fb:bc:10:bf:97:af:67:26:47:
16:29:8b:c9:fd:12:b7:b4:a5:35:e5:6e:f0:16:15:94:a4:45:
1b:bb:a2:65:e4:1f:be:e1:43:20:7c:56:c5:3e:b2:0f:9e:0b:
84:87:a2:af:51:c1:09:c4:a2:67:60:86:ba:6d:3b:ff:16:94:
fc:5e:35:42:31:1e:29:97:7a:96:60:cb:24:fa:d7:52:3c:90:
b2:24:00:55:fe:84:7e:ea:eb:4e:31:1d:73:c5:62:72:5f:37:
03:de:37:64:64:d5:9d:f8:07:f7:e8:a0:c6:b9:d6:2e:ea:87:
07:5b:87:36:40:c6:0c:d9:61:6f:cf:b3:00:1d:8d:7a:fa:6d:
16:bf:1a:2a:7c:f3:ce:e9:4b:bd:9d:62:1b:ec:b2:cb:4d:c7:
16:19:13:8a:f9:7b:b7:97:f5:ec:bc:02:5b:a6:dc:28:29:59:
95:25:d1:f5:40:6b:89:16:6a:b3:42:94:86:e0:c5:0c:ef:e4:
ba:76:c2:41:9c:09:ba:9a:5b:e7:87:e0:f2:47:ad:ab:7a:86:
fe:15:ba:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:47 2026 by rpki-client