Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/1PegFidzqa2jEGY6aRNdbc8ZvFw.roa
File: 1PegFidzqa2jEGY6aRNdbc8ZvFw.roa (raw, json)
Hash identifier: rBbRvlKZ86ihH7yzRublzSZuYgedTJoavy+02XEH8Ro=
Subject key identifier: D4:F7:A0:16:27:73:A9:AD:A3:10:66:3A:69:13:5D:6D:CF:19:BC:5C
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019DFC1202A00A2FB20777C119248D5C8649
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/1PegFidzqa2jEGY6aRNdbc8ZvFw.roa
Signing time: Wed 06 May 2026 06:55:31 +0000
ROA not before: Wed 06 May 2026 06:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 95.142.112.0/24 maxlen: 24
95.142.113.0/24 maxlen: 24
95.142.114.0/24 maxlen: 24
95.142.117.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.120.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
95.142.125.0/24 maxlen: 24
95.142.126.0/24 maxlen: 24
95.142.127.0/24 maxlen: 24
185.54.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:12:02:a0:0a:2f:b2:07:77:c1:19:24:8d:5c:86:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: May 6 06:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f7a0162773a9ada310663a69135d6dcf19bc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e4:65:09:42:9f:81:3a:d0:26:3c:c6:39:3e:
3a:fb:18:a5:df:95:c2:01:86:cc:c0:45:63:ce:5e:
d8:0a:e0:d1:e0:97:c7:40:d5:5e:fa:e9:59:78:ac:
95:8f:49:5c:c3:0c:b0:b2:a6:74:c9:42:d9:b5:50:
55:43:bc:a4:45:5b:d2:4d:70:2b:92:99:92:02:e8:
bc:31:60:30:6d:55:2a:ec:86:5e:f4:22:2f:82:3e:
c6:c0:91:65:36:ca:ad:d2:b8:56:c2:7f:ae:59:1b:
b3:5e:9c:d3:f0:28:3c:18:6b:0f:36:28:7d:b4:2e:
c0:3f:b4:61:ff:89:40:f0:ca:bb:e1:0f:67:3b:1b:
52:6b:81:2a:5a:5f:bf:5d:3a:31:25:09:5a:15:45:
ce:5d:bf:c8:b0:9b:74:91:98:1e:16:56:3f:c2:27:
ac:1b:8b:8d:b4:5a:20:53:0c:ec:4e:f6:ca:77:5a:
17:47:35:8d:92:f1:e7:66:11:c8:8d:39:29:ee:44:
dd:f4:b1:f0:b7:4e:39:71:11:7f:e2:c4:cd:c4:74:
45:78:d8:f4:49:38:85:e0:33:a3:c4:95:15:86:d8:
82:7b:29:7e:1d:be:26:0d:e8:bb:06:54:66:b5:11:
a3:81:96:03:86:9c:5e:27:04:17:6b:9b:f1:aa:c9:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:A0:16:27:73:A9:AD:A3:10:66:3A:69:13:5D:6D:CF:19:BC:5C
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/1PegFidzqa2jEGY6aRNdbc8ZvFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0-95.142.114.255
95.142.117.0/24
95.142.119.0-95.142.120.255
95.142.122.0/23
95.142.125.0-95.142.127.255
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4a:fb:fd:0b:71:c7:a2:d6:7f:9c:cd:a9:53:1c:9e:f0:68:
d1:44:d0:ad:6d:8c:a2:82:c1:d6:33:15:7d:2b:5d:90:86:bd:
c3:e9:26:82:09:58:27:eb:29:ad:dc:7b:36:ae:b8:de:85:0d:
ba:63:8a:c6:82:9b:ce:35:d0:b9:a2:54:e0:57:4b:c8:a3:5d:
81:db:79:61:0d:ac:46:84:30:de:17:6c:e9:0a:65:ed:85:1a:
b8:5d:2e:a5:ea:06:1c:7f:cd:1e:76:4f:f0:44:c2:24:ee:a2:
89:b8:f3:95:6b:de:aa:84:fb:50:35:16:b7:ba:dc:30:c3:c1:
62:3c:88:8c:24:62:48:f2:ce:d5:c1:0f:a2:4a:c2:74:fa:b0:
8d:01:2c:02:48:b8:24:78:f7:cb:49:9b:2d:93:eb:8b:49:1b:
a9:d0:c4:fa:71:e3:86:6b:da:bc:1b:66:72:58:7a:9d:b4:ed:
01:fb:c0:96:eb:87:fb:68:72:dc:a9:dc:0f:3a:8f:7b:c5:31:
c9:d3:47:9e:7b:cb:16:b5:dc:46:a3:15:0d:9a:f1:a2:05:90:
77:44:1f:be:d5:cd:82:9a:4e:42:49:83:aa:4c:30:1e:9f:f9:
75:10:0f:c0:96:8e:1c:f2:a4:ae:7b:88:b0:e0:af:45:74:7f:
04:b4:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:55:27 2026 by rpki-client