Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/PCV5mGTyG_SgomelCPvCXt-eraw.roa
File: PCV5mGTyG_SgomelCPvCXt-eraw.roa (raw, json)
Hash identifier: Sr6ZqTMnZ5nUSCIYTgu1oovZ8jmYGb+qW35o9FtNPcg=
Subject key identifier: 3C:25:79:98:64:F2:1B:F4:A0:A2:67:A5:08:FB:C2:5E:DF:9E:AD:AC
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 019B76EB22ACBEAA0D5A8A8A8DE16DA30459
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/PCV5mGTyG_SgomelCPvCXt-eraw.roa
Signing time: Thu 01 Jan 2026 00:17:59 +0000
ROA not before: Thu 01 Jan 2026 00:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203810
IP address blocks: 185.46.52.0/24 maxlen: 24
185.46.53.0/24 maxlen: 24
185.46.54.0/24 maxlen: 24
185.46.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:22:ac:be:aa:0d:5a:8a:8a:8d:e1:6d:a3:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Jan 1 00:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c25799864f21bf4a0a267a508fbc25edf9eadac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:d6:ee:60:a1:70:5a:7b:de:8d:db:2d:09:
01:d4:f1:67:ec:a0:3c:f8:03:be:6a:a5:04:7e:34:
85:98:66:e4:70:70:57:18:59:4a:88:95:1e:96:61:
f6:c8:0f:da:e5:24:5f:f5:36:6d:af:87:02:bc:ee:
8e:02:26:cf:8a:94:97:15:57:29:cc:47:11:bc:e0:
6f:ce:7a:ad:b9:e6:38:6f:be:aa:e8:2b:54:4e:09:
39:da:8e:68:fc:54:22:30:89:3e:74:13:5f:96:e8:
52:30:9a:82:c3:b1:e9:c8:7f:ed:5e:19:cc:cc:27:
e6:eb:48:e7:79:16:14:66:e9:f2:e9:c9:3d:f5:87:
18:2f:2c:c8:78:6f:b6:88:22:e7:c3:e5:0f:a6:b2:
71:c8:c3:61:3e:c2:b7:c5:fb:14:fe:7d:de:aa:ec:
34:19:9a:67:6b:e4:25:1e:fd:77:b5:b5:c0:86:fc:
90:84:9a:4f:ff:48:04:64:6f:50:38:0f:a2:f8:a4:
6d:9c:e7:33:f8:9c:61:50:28:e6:60:6a:0b:1e:64:
10:ab:4c:fc:f4:64:a8:2e:26:f5:93:8e:2c:03:de:
a1:32:6b:bb:da:09:9c:16:18:dd:20:f7:2e:ea:bc:
c8:d5:85:b6:c1:74:14:b0:98:c5:17:03:7e:78:2d:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:79:98:64:F2:1B:F4:A0:A2:67:A5:08:FB:C2:5E:DF:9E:AD:AC
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/PCV5mGTyG_SgomelCPvCXt-eraw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:2a:59:3f:38:d4:fb:0a:06:eb:96:04:98:7e:14:e8:fc:38:
03:d4:30:e1:5e:84:2c:39:b4:d3:df:b9:8c:d4:b5:0f:21:fc:
b4:cb:55:86:7a:11:cd:87:29:f4:6c:de:e2:a3:81:49:31:29:
93:7c:1c:14:15:37:fe:f1:32:23:a5:cc:ef:b2:fb:a2:ac:a0:
71:c4:50:9e:73:85:06:89:82:4c:da:70:b9:b6:6c:4a:2c:d9:
17:20:43:31:50:e3:80:d5:8a:01:e0:8c:b9:b8:f1:0c:70:2f:
6b:12:24:f2:26:57:cb:d4:55:e5:d9:c7:dd:2b:6b:23:22:64:
57:8d:14:d6:c6:c2:3a:52:06:87:33:93:61:89:15:5c:73:50:
4d:95:24:6d:ee:c3:22:01:76:15:12:d0:5f:f2:df:77:aa:84:
f3:6d:14:eb:86:b0:b2:fb:2c:26:9c:35:d0:a7:c6:a7:c2:c1:
d1:25:25:45:1b:79:15:3e:98:04:e6:f8:f9:f9:05:64:34:1e:
56:18:a9:2f:39:88:e2:e9:d7:32:ea:21:81:fb:55:61:5f:57:
c5:07:d9:03:9b:fb:21:92:52:f3:0e:ce:3e:3e:1f:6f:17:f7:
d6:ee:7a:82:61:6a:7d:25:b9:e9:c0:86:94:2d:41:59:cf:f2:
ab:7d:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:31 2026 by rpki-client