Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PbKKecc5xYicPQ269vzo6KLip00.roa
File: PbKKecc5xYicPQ269vzo6KLip00.roa (raw, json)
Hash identifier: T7zyf0LfykgCHj8oTWt0BEQrD80w/KyCZmK2TaUcwbw=
Subject key identifier: 3D:B2:8A:79:C7:39:C5:88:9C:3D:0D:BA:F6:FC:E8:E8:A2:E2:A7:4D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A19C3421D714A2B34090CA0DB50EFD27D5
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PbKKecc5xYicPQ269vzo6KLip00.roa
Signing time: Mon 02 Nov 2026 12:20:24 +0000
ROA not before: Mon 02 Nov 2026 12:20:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218229
IP address blocks: 2a0c:9a40:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:34:21:d7:14:a2:b3:40:90:ca:0d:b5:0e:fd:27:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 2 12:20:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3db28a79c739c5889c3d0dbaf6fce8e8a2e2a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:37:2b:07:d4:09:9c:0d:fa:9f:ae:62:72:
63:d4:6b:cd:9c:7e:90:a8:28:f8:d2:a2:20:5a:27:
48:b3:b6:12:c1:e7:84:54:51:87:ba:f6:25:4f:dc:
de:28:a1:b8:10:66:fb:4d:08:63:cc:39:7f:d3:16:
ad:01:5a:99:7c:e5:54:d6:35:d1:c0:32:b5:3a:07:
cf:57:27:38:2a:a4:e6:39:8f:11:32:7b:8f:ac:f6:
b7:e2:58:34:af:c8:9a:86:ea:80:d8:c3:1a:79:37:
5e:f3:64:6f:71:9c:fb:71:90:0e:28:96:9a:51:e3:
c6:c1:39:74:f8:85:4e:98:09:d0:ec:af:9f:f9:f4:
f5:6a:aa:de:b4:03:d8:86:24:9c:4b:d4:0a:00:43:
80:d6:6a:92:00:4a:be:e8:23:a6:81:f3:b4:ac:05:
e9:97:25:c1:09:d3:7c:a8:c9:d9:3d:03:c8:6a:fb:
fa:0b:53:c8:45:a2:35:dc:4f:d1:32:1c:86:43:23:
a3:0a:9b:ea:9f:c7:1a:97:73:56:bf:c7:bc:f1:dd:
a3:bb:d3:6f:c9:2d:d9:57:d3:45:42:ae:21:28:57:
f4:22:99:2f:c8:6a:4d:02:33:15:05:26:8a:41:ba:
36:e1:73:f7:0b:97:f4:ae:f0:cf:d6:39:4a:e0:57:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:8A:79:C7:39:C5:88:9C:3D:0D:BA:F6:FC:E8:E8:A2:E2:A7:4D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PbKKecc5xYicPQ269vzo6KLip00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e080::/48
Signature Algorithm: sha256WithRSAEncryption
3a:c6:c7:cb:c5:28:56:75:14:e1:78:ea:fe:cd:2d:4b:48:fa:
41:99:da:45:55:20:7b:52:9c:b1:6f:40:e0:5e:dc:5e:fd:0b:
d7:20:a9:d6:83:d8:d6:5a:a3:38:f1:07:15:42:45:ec:cb:4a:
9b:1a:90:68:04:c5:11:e0:6a:5f:6e:48:f9:33:89:69:4d:6f:
41:f8:e3:69:54:0f:c5:7e:b4:83:47:76:f1:fe:43:28:20:b4:
d0:fd:b2:e4:82:5f:59:94:7c:8e:be:a8:41:3e:2b:bd:e7:9a:
44:f8:09:66:ed:2b:5a:4e:26:ac:2e:7c:b2:33:7b:1e:f9:a5:
ca:4c:54:65:67:57:d5:11:72:c3:c5:f8:ed:70:72:16:82:fd:
0b:17:8d:9e:72:ca:0f:cf:8e:26:65:b3:f5:d1:a8:19:90:9b:
85:50:65:5f:29:1c:62:0b:16:97:ba:43:1b:e5:c0:17:a0:73:
8d:b2:a4:6e:4a:15:a9:7f:ba:46:97:ee:c6:e3:29:14:05:b9:
7e:f7:2d:da:95:82:78:a9:3f:44:48:b1:6d:ef:76:a1:15:b2:
a1:9a:1e:3d:ef:b3:c8:75:53:8b:69:2e:a4:0b:e0:d9:ae:49:
22:aa:06:b1:5c:00:c7:3a:57:86:10:26:18:a7:eb:66:cc:29:
e2:8f:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:26 2026 by rpki-client