Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/pvdxW0h9aFPze864ivZVpgPRpb0.roa
File: pvdxW0h9aFPze864ivZVpgPRpb0.roa (raw, json)
Hash identifier: 85/eS4oRTkOHemGg/ZPqiubdMegp/0IRFyauSlAmyRE=
Subject key identifier: A6:F7:71:5B:48:7D:68:53:F3:7B:CE:B8:8A:F6:55:A6:03:D1:A5:BD
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C8B0D6000B3C475B81A51778F1E1BE58
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/pvdxW0h9aFPze864ivZVpgPRpb0.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48274
IP address blocks: 2a11:74c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:00:0b:3c:47:5b:81:a5:17:78:f1:e1:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f7715b487d6853f37bceb88af655a603d1a5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:13:64:04:80:f6:9b:05:d0:dc:37:ce:95:
bd:da:be:e5:d4:4f:bf:97:17:6b:28:e1:a5:78:2f:
63:6c:22:32:51:d3:4b:71:d2:8c:87:21:73:e3:4c:
a0:ab:e9:e9:9f:e2:25:93:a0:df:82:03:a6:65:d0:
e1:c7:bd:79:7a:06:d5:b9:6c:53:48:29:65:8a:8e:
14:2b:dd:8e:ab:9d:97:41:2a:79:ac:87:b6:26:a0:
40:fd:6b:de:0e:8c:f1:bc:aa:01:d2:25:ac:1d:53:
d7:de:48:ba:80:28:87:03:fa:23:74:32:66:ff:00:
74:50:cd:c5:34:4f:57:84:2b:ba:83:ee:4e:a0:e5:
7a:b6:45:e0:e5:45:15:7d:b8:0c:bb:09:f8:64:57:
63:a2:ac:69:f5:ad:47:27:0c:65:c8:2a:73:bc:24:
a7:56:99:cb:1d:03:e1:01:b0:d0:b4:1c:2d:9a:28:
73:7a:4d:1c:1c:2d:02:0e:dd:9d:8a:71:81:52:79:
03:a8:ba:6f:43:24:c9:0b:15:53:ae:71:01:f5:a9:
0b:e7:9b:86:1c:0e:f1:f0:5d:0e:24:47:54:2d:6f:
6b:ba:cb:5e:72:fc:c8:94:9f:cc:22:02:1e:15:22:
e1:dc:90:c0:85:bd:c3:9b:87:c5:ac:ba:4e:70:e0:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:71:5B:48:7D:68:53:F3:7B:CE:B8:8A:F6:55:A6:03:D1:A5:BD
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/pvdxW0h9aFPze864ivZVpgPRpb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
86:d4:ff:1d:de:31:d2:69:5c:4c:bc:dc:0f:df:98:49:9c:05:
58:4a:01:1c:dc:e5:f0:3b:84:3a:53:11:c7:ca:3e:24:94:1e:
b1:31:a2:b3:5a:3d:2d:b0:bc:50:cd:c1:12:22:96:43:f8:9e:
19:3d:da:be:bf:ff:b8:15:b2:f2:16:1f:de:2c:ec:91:29:13:
0f:d6:77:8e:f2:3e:ca:1d:42:31:0c:ba:86:14:0e:8d:99:84:
48:c1:6c:28:7b:9b:f3:f4:ab:4c:ae:85:20:94:26:43:60:4f:
17:d2:ea:c0:e2:15:71:ab:9b:74:6f:ea:b2:8a:bf:30:b8:a9:
e5:86:91:f7:cf:a7:08:39:59:8b:ca:77:2b:17:77:db:c5:d2:
7b:8e:20:51:b0:c2:e8:cd:79:9c:08:95:3b:a5:c8:66:ea:b5:
3d:be:d2:e3:e9:ea:c9:2b:97:65:21:88:85:1c:d8:96:e0:09:
85:36:1c:6e:09:d5:4c:7d:e0:de:da:54:9d:de:87:a9:6e:49:
07:ca:9a:bf:d2:99:74:df:d7:f6:96:e0:10:bb:a2:f5:9d:c1:
d0:ed:36:6b:49:a0:0d:ba:2d:b6:5c:95:0b:d0:62:d0:1c:f8:
7e:bc:6e:15:88:13:29:8f:98:0d:0f:4b:fe:1e:c9:04:56:95:
53:93:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:41:15 2026 by rpki-client