Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/PnSrpyg070tMOIwyiNhw0-W4FDA.roa
File: PnSrpyg070tMOIwyiNhw0-W4FDA.roa (raw, json)
Hash identifier: jaKFKeXtXWWExrND1Xfgv0FErZ4X9Jpr+UHvdRhnlrs=
Subject key identifier: 3E:74:AB:A7:28:34:EF:4B:4C:38:8C:32:88:D8:70:D3:E5:B8:14:30
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01A1C4F17FF0E00AE75DCF5C42779FC9CD0E
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/PnSrpyg070tMOIwyiNhw0-W4FDA.roa
Signing time: Tue 10 Nov 2026 10:12:03 +0000
ROA not before: Tue 10 Nov 2026 10:12:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 194.62.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:f1:7f:f0:e0:0a:e7:5d:cf:5c:42:77:9f:c9:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Nov 10 10:12:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e74aba72834ef4b4c388c3288d870d3e5b81430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:73:2c:14:8c:21:12:32:34:94:2b:2a:78:
86:21:ab:08:38:9f:cb:7d:cb:61:25:6d:bd:fe:3e:
97:23:29:5c:96:24:8f:1d:dd:dd:6e:7b:96:01:45:
12:7a:5e:70:75:a6:d6:e7:06:dc:74:88:04:7f:0e:
c5:fb:4c:b4:27:84:84:23:40:93:05:44:e8:76:20:
27:c3:aa:75:ac:c0:f8:f3:da:f4:dc:c1:63:8f:3b:
e6:e2:3f:cc:59:ee:13:5b:9f:5f:62:9a:e4:06:c9:
b5:25:59:f9:a9:c9:11:90:01:e3:73:a4:13:e4:9a:
5f:dc:2a:e3:41:31:a6:44:df:67:25:36:6b:66:a5:
1a:58:ae:19:3c:ed:63:f0:37:27:6d:81:12:43:21:
f4:d4:60:6e:fc:48:7e:12:0a:e2:14:28:a7:b2:aa:
d1:d0:33:51:65:02:f5:ab:fa:53:9d:4f:01:ee:2b:
ac:ec:a5:f7:44:61:b6:4a:e7:a1:3e:88:78:52:94:
ce:1b:5a:20:61:d3:f5:b3:37:91:05:62:b8:4e:1c:
a8:ee:ff:c7:66:07:db:75:88:cf:66:46:fa:0a:a2:
5f:51:ce:88:0a:0c:06:29:9b:e6:c5:d5:2c:a8:93:
00:d9:74:b9:7b:91:fd:bd:4a:93:70:54:33:1a:8e:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:74:AB:A7:28:34:EF:4B:4C:38:8C:32:88:D8:70:D3:E5:B8:14:30
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/PnSrpyg070tMOIwyiNhw0-W4FDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.73.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c8:e1:25:3e:1f:35:f8:9a:c1:85:28:30:52:7e:cf:f8:1e:
69:25:d9:e0:5e:84:15:54:02:7a:49:e3:76:6c:35:9e:42:22:
58:45:a2:af:89:74:cd:88:28:5e:0e:3b:6c:f3:2c:3e:f0:22:
75:14:86:41:b9:04:94:23:fd:70:02:07:47:83:37:40:7a:49:
6e:58:56:49:af:b7:21:f3:dc:19:a9:7a:a8:97:d8:1f:12:0e:
04:45:e9:43:36:c7:d1:56:97:91:55:52:83:87:91:fe:25:12:
36:1d:e7:17:be:7a:64:a3:90:8d:89:cf:b9:7a:a3:40:2b:1b:
47:3e:a5:37:ea:47:14:20:ee:6d:4e:17:42:54:6f:0f:4e:8a:
e9:0f:a7:ea:c3:4b:ba:7d:c1:04:c5:6d:8b:4b:d5:a6:8c:1a:
08:4f:8a:f5:27:6f:b7:b6:19:8a:45:04:95:db:02:88:26:51:
25:35:c0:ea:58:0a:43:c0:8b:47:ec:eb:df:83:43:b0:52:5c:
fb:21:3f:fc:bb:8b:1d:28:52:cd:a4:e5:4b:f7:1f:28:5c:a2:
9b:e6:0b:3c:e9:d5:f3:44:ac:06:fb:48:3f:ab:30:b1:89:bf:
85:56:41:5c:4e:75:e1:c2:68:13:7f:9d:0f:7b:28:2b:4b:47:
29:c6:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:10 2026 by rpki-client