Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PwKM_uo125DltUJ77OIARfSRLgs.roa
File: PwKM_uo125DltUJ77OIARfSRLgs.roa (raw, json)
Hash identifier: FXUDRgeRw0H8wPjPnCa3YOv3DtbblDhzd5OWVb3CUQg=
Subject key identifier: 3F:02:8C:FE:EA:35:DB:90:E5:B5:42:7B:EC:E2:00:45:F4:91:2E:0B
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A0B467F6177B3BF0C0974B047AB84E49AC
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PwKM_uo125DltUJ77OIARfSRLgs.roa
Signing time: Fri 18 Sep 2026 12:05:07 +0000
ROA not before: Fri 18 Sep 2026 12:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.241.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.203.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.207.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.195.0/24 maxlen: 24
195.114.196.0/24 maxlen: 24
195.114.197.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
195.114.200.0/24 maxlen: 24
195.114.202.0/24 maxlen: 24
195.114.203.0/24 maxlen: 24
195.114.205.0/24 maxlen: 24
213.220.0.0/24 maxlen: 24
213.220.2.0/24 maxlen: 24
213.220.4.0/24 maxlen: 24
213.220.6.0/24 maxlen: 24
213.220.7.0/24 maxlen: 24
213.220.11.0/24 maxlen: 24
213.220.14.0/24 maxlen: 24
213.220.18.0/24 maxlen: 24
213.220.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:67:f6:17:7b:3b:f0:c0:97:4b:04:7a:b8:4e:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 18 12:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f028cfeea35db90e5b5427bece20045f4912e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:b3:f6:76:a2:9e:e1:a6:f5:10:f1:14:39:
d2:99:bd:bc:d6:f8:5d:29:c8:f0:1e:3d:5c:96:89:
7c:6c:c8:15:45:25:fe:b1:1f:1b:57:4f:81:82:2d:
09:bb:20:93:08:36:ce:c4:6f:a3:2f:67:41:10:25:
ff:b6:15:a6:bb:67:3e:73:db:60:61:4c:e7:b7:ca:
42:09:7c:6a:48:4d:30:7f:ae:b1:02:c7:9c:17:7d:
63:24:70:f7:45:95:17:f9:2f:ee:06:01:18:5f:f8:
10:6a:e1:ce:68:9c:c9:48:0a:8f:b3:93:8c:2d:f7:
21:6c:3a:a2:1b:bd:f7:db:45:fc:48:57:77:b6:77:
c8:a6:6c:0d:dc:bf:da:72:4b:34:c6:8c:c6:37:6c:
5c:f0:f8:40:32:c5:2a:a6:d0:1d:eb:e3:4b:56:12:
68:dd:14:28:f5:36:c7:0a:6e:d0:b4:ec:04:ed:3c:
27:ff:8c:ce:f7:c7:cc:42:b4:53:41:3a:87:47:c3:
13:9c:cb:61:c4:1a:82:3f:9a:80:e7:b2:31:bc:50:
50:7f:8b:13:20:c1:40:19:f2:d6:ed:b4:ae:9c:4a:
93:6c:57:de:5c:ce:ff:dd:da:e5:4e:2c:4c:42:df:
bd:8a:ff:4e:c1:5d:ec:cf:0a:1f:1b:0c:7d:53:a8:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:8C:FE:EA:35:DB:90:E5:B5:42:7B:EC:E2:00:45:F4:91:2E:0B
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PwKM_uo125DltUJ77OIARfSRLgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0-45.155.242.255
194.143.203.0/24
194.143.205.0/24
194.143.207.0/24
194.143.209.0/24
194.143.218.0/24
194.143.221.0-194.143.223.255
195.114.192.0/24
195.114.195.0-195.114.198.255
195.114.200.0/24
195.114.202.0/23
195.114.205.0/24
213.220.0.0/24
213.220.2.0/24
213.220.4.0/24
213.220.6.0/23
213.220.11.0/24
213.220.14.0/24
213.220.18.0/24
213.220.50.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c6:ec:35:15:27:42:28:4f:7b:2d:44:a5:eb:bb:bd:6b:c2:
2f:f3:f4:1c:71:f7:9e:7e:26:09:43:10:fa:3a:e2:7b:bc:f2:
94:64:7e:e7:94:e9:44:28:02:69:fb:07:3a:8c:8a:03:22:21:
aa:6c:b8:60:fb:46:2b:67:e8:ef:3d:1b:41:eb:26:cb:65:6f:
0b:0e:41:63:5f:1c:9e:56:57:2f:02:cd:0c:f6:ad:47:4f:9e:
f3:30:c5:59:a9:0f:64:1e:1b:48:66:0c:67:29:71:fd:80:f6:
f4:e5:5a:4e:5d:68:79:f5:bf:d2:c3:39:10:90:41:e0:c7:be:
0a:b0:90:23:8b:33:5b:4f:2d:65:25:9c:a1:e5:dc:fe:41:cd:
6b:e4:63:c6:b6:59:48:88:0f:8b:77:e1:1c:31:ef:62:c4:74:
1f:1f:7d:da:bf:5b:7e:30:ef:d7:56:19:59:f4:b8:fc:9b:3e:
6c:1d:ec:95:f5:35:66:85:a9:c5:4e:4b:f0:76:38:63:73:ba:
01:65:db:81:3b:75:50:d1:da:bd:8f:e0:2d:53:0c:28:0c:e5:
12:74:8a:e7:c2:9a:26:9b:07:19:c5:ae:c6:5c:42:8f:8c:41:
11:cd:1e:0f:2b:2a:9b:2c:3e:ca:8a:22:7b:ff:58:68:d4:a1:
c7:70:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:35 2026 by rpki-client