Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/PSrDqXs0FAMiClbGKd2ncHp1ulo.roa
File: PSrDqXs0FAMiClbGKd2ncHp1ulo.roa (raw, json)
Hash identifier: UyrfgvdhyYVvon6niRVNaqZutKpEtAdg9Da8vKCqYjM=
Subject key identifier: 3D:2A:C3:A9:7B:34:14:03:22:0A:56:C6:29:DD:A7:70:7A:75:BA:5A
Certificate issuer: /CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Certificate serial: 019F27A0969676EAF8DE9C2591E8F1C09B96
Authority key identifier: FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/PSrDqXs0FAMiClbGKd2ncHp1ulo.roa
Signing time: Fri 03 Jul 2026 10:57:43 +0000
ROA not before: Fri 03 Jul 2026 10:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5405
IP address blocks: 185.242.76.0/23 maxlen: 23
185.242.76.0/24 maxlen: 24
185.242.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:a0:96:96:76:ea:f8:de:9c:25:91:e8:f1:c0:9b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc3f5ca4792d94d1aa36eb5ea3aa1b4043cd014
Validity
Not Before: Jul 3 10:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2ac3a97b341403220a56c629dda7707a75ba5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:64:26:07:87:5e:cf:25:38:12:d5:16:20:
09:4d:39:be:b8:52:52:05:0c:2d:8d:e6:9f:53:bf:
3d:ac:ea:60:31:b0:04:64:e5:91:de:5a:ad:2b:0e:
97:3a:1f:38:41:2a:ed:ce:19:0f:86:c1:99:d2:1c:
7c:fc:48:69:51:2e:c7:ec:52:0c:41:5a:8c:ba:f4:
67:ce:4e:56:71:21:a0:81:9d:5d:4b:12:9a:79:b3:
bb:e4:e7:86:21:4d:c3:32:8c:76:31:36:12:d7:4f:
b2:91:32:29:91:21:ab:f8:aa:6d:7a:bb:56:0c:00:
5c:a4:4e:ec:95:c4:6a:5b:99:e8:71:29:53:75:df:
19:7f:8c:f9:ef:20:c6:a6:86:28:ad:79:92:ca:89:
7d:a0:6b:f3:b6:21:4a:4b:1f:5a:41:75:c7:d2:6e:
92:2d:e1:43:6c:af:df:4b:91:f6:df:c4:8d:c8:b6:
14:94:8d:2b:e1:9c:73:55:fb:09:0e:f6:35:8d:ac:
21:84:39:5b:e4:c0:10:7c:d0:da:07:f7:41:4e:85:
ad:dc:0d:a6:fe:79:0f:f2:d4:a2:3a:45:11:9b:be:
31:a1:03:73:e4:e6:f4:6c:45:0e:48:7a:40:b7:da:
39:1b:d0:55:3a:c4:7a:bf:4a:b3:2f:a9:36:be:ab:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:C3:A9:7B:34:14:03:22:0A:56:C6:29:DD:A7:70:7A:75:BA:5A
X509v3 Authority Key Identifier:
keyid:FF:C3:F5:CA:47:92:D9:4D:1A:A3:6E:B5:EA:3A:A1:B4:04:3C:D0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8P1ykeS2U0ao2616jqhtAQ80BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/PSrDqXs0FAMiClbGKd2ncHp1ulo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fd6963-d25c-402f-9ea1-28ed0f928133/1/_8P1ykeS2U0ao2616jqhtAQ80BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:1a:5e:30:fc:3e:a1:9e:d1:30:bd:9a:8d:ce:9c:9b:c1:f0:
11:f3:5c:27:cc:41:c6:e7:52:49:af:11:39:58:d0:28:06:4b:
87:65:a0:eb:3b:21:bc:7a:a9:25:48:ae:dd:b9:0e:00:92:4e:
c0:bc:8c:d5:79:a1:75:e9:e8:53:18:63:71:53:53:1e:32:1e:
27:8b:3b:f2:9d:ee:1f:d9:73:a4:da:f2:4f:00:8f:e3:f8:1d:
4a:91:8c:12:3e:fa:5e:12:da:4a:80:f3:cd:0f:29:d9:40:1d:
3e:7a:e1:d1:d2:6b:a9:8d:f8:6a:07:9b:aa:91:69:d9:83:ef:
23:32:5a:59:d7:ea:87:2c:e3:b1:b9:35:a0:f6:c8:05:ea:54:
85:f9:a1:f2:31:ed:40:f4:3b:fb:3e:2f:67:d6:35:dc:22:db:
cd:df:62:8d:70:69:6c:b1:9b:27:0d:cb:9e:79:9b:85:3d:f1:
e6:44:a0:00:60:bb:57:b7:21:04:ca:f3:5f:dd:c1:60:12:e5:
24:5b:53:d0:fd:3d:15:2f:40:83:87:c2:27:78:16:d1:a8:93:
c3:60:0b:3c:95:ee:ec:10:a2:0f:97:87:fa:78:a6:d5:57:f0:
02:a1:f1:a7:ca:3f:83:2c:48:41:06:d7:b4:dd:2e:b8:d9:01:
3a:68:1b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:50 2026 by rpki-client