Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/PoFYEuGutgHouWVg8Cb0Pk33vYA.roa
File: PoFYEuGutgHouWVg8Cb0Pk33vYA.roa (raw, json)
Hash identifier: X3Xo/sCZdu/v1GpBzfkHVMeep0fNTMPQZJIhKRC0j0k=
Subject key identifier: 3E:81:58:12:E1:AE:B6:01:E8:B9:65:60:F0:26:F4:3E:4D:F7:BD:80
Certificate issuer: /CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Certificate serial: 019F236922F9DDA37589A03ECF005DF6B626
Authority key identifier: 34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/PoFYEuGutgHouWVg8Cb0Pk33vYA.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216352
IP address blocks: 2001:67c:c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:22:f9:dd:a3:75:89:a0:3e:cf:00:5d:f6:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e815812e1aeb601e8b96560f026f43e4df7bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:bb:51:e4:c8:3b:1a:e8:9f:44:9d:9d:cc:
cd:77:00:d8:a3:14:10:47:4f:80:26:e3:4c:97:c9:
6c:96:89:76:97:de:81:cb:a0:c5:d3:20:24:e3:27:
bc:40:c8:05:b4:bb:a1:11:80:df:18:15:ce:a2:b2:
bb:cc:fc:29:e9:ed:34:d1:3f:c8:87:aa:bd:51:db:
9a:25:9f:ae:43:53:72:24:ea:73:e5:6b:1f:ae:d2:
5c:e2:ad:79:41:84:ed:44:5f:4d:71:15:52:18:d7:
ab:0d:08:0e:b3:04:68:c6:67:aa:f2:a9:41:7c:4e:
dc:50:1f:65:a7:d5:8a:e1:18:6e:3f:6e:95:6c:40:
50:e1:4f:2c:3f:94:99:6d:5a:3e:70:b3:8d:66:87:
b3:f4:92:b0:af:91:b7:c2:fe:8c:6e:91:81:d8:1a:
4b:a5:d2:41:3c:f7:4f:5b:f8:f6:a8:77:1b:d7:f7:
ed:22:6e:54:c5:a6:88:63:34:f3:fa:e2:e2:22:7e:
67:47:cf:77:02:6e:6e:9a:dd:01:8b:5b:bb:3c:d2:
0b:7c:00:99:39:0e:17:29:7e:df:6b:20:97:18:3d:
64:81:cd:8d:e1:33:e8:88:07:73:62:4d:d3:cd:03:
ef:7a:a6:28:e4:91:a5:1b:c0:bc:8d:65:4f:9f:05:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:81:58:12:E1:AE:B6:01:E8:B9:65:60:F0:26:F4:3E:4D:F7:BD:80
X509v3 Authority Key Identifier:
keyid:34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/PoFYEuGutgHouWVg8Cb0Pk33vYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c4::/48
Signature Algorithm: sha256WithRSAEncryption
5b:c2:28:47:b1:94:87:ab:90:66:c8:c5:d1:e7:d5:97:fc:99:
b3:6c:e7:cc:29:28:1d:bb:0b:80:7d:63:05:96:56:43:cf:cf:
ef:1e:02:a2:75:4f:9c:2e:38:02:9e:95:f8:71:2b:a5:e3:db:
da:ba:89:3e:0f:4e:1c:bd:40:4b:b2:9c:b4:4c:d7:e3:1c:0b:
02:7f:10:76:82:3e:98:5c:01:b0:00:10:35:82:34:e4:90:d2:
4e:db:0e:77:0b:04:4f:cf:70:52:42:73:4d:64:f8:fe:f8:31:
d4:a4:04:cd:42:ad:77:28:67:d8:5a:df:65:3b:bf:b8:d7:6b:
bf:9c:eb:a5:96:99:2c:1c:08:be:3e:4c:a9:62:da:89:64:be:
e6:d4:1c:27:35:d1:cc:45:27:54:32:cb:c4:5d:82:2b:4a:c3:
bd:65:91:72:3f:51:b1:d9:ed:4f:94:58:5b:56:bd:a5:c9:e3:
93:83:e9:a9:24:37:c3:d0:a1:79:5c:6b:2d:ec:48:e6:17:62:
5f:f3:eb:dc:19:e3:a6:40:dd:7f:49:9e:93:f8:17:07:b5:da:
33:35:8b:50:2a:2b:7b:b4:ac:16:c2:ff:30:4f:50:b7:8d:5b:
b3:d6:5b:e4:8a:ef:c5:bb:57:fd:0b:6c:2a:7c:89:73:6c:0f:
6b:18:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:44 2026 by rpki-client