Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/PMUh_CeB1kKvaGLeBJYIic294CY.roa
File: PMUh_CeB1kKvaGLeBJYIic294CY.roa (raw, json)
Hash identifier: +eBM0O7yXapPeEEFqL/YF99B3PHfAKw0Egv5IPFdGT4=
Subject key identifier: 3C:C5:21:FC:27:81:D6:42:AF:68:62:DE:04:96:08:89:CD:BD:E0:26
Certificate issuer: /CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Certificate serial: 019DF67A63679F3AA81B0CA06543EBC4CA2C
Authority key identifier: 4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/PMUh_CeB1kKvaGLeBJYIic294CY.roa
Signing time: Tue 05 May 2026 04:51:49 +0000
ROA not before: Tue 05 May 2026 04:51:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30781
IP address blocks: 91.208.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f6:7a:63:67:9f:3a:a8:1b:0c:a0:65:43:eb:c4:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0717ae6da121bccf6f753d205b79db4c74aadc
Validity
Not Before: May 5 04:51:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cc521fc2781d642af6862de04960889cdbde026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:9e:33:c9:07:fa:8f:a8:5e:59:1d:ec:46:
a5:f2:71:0e:8c:5f:fe:ab:80:f0:e3:18:f7:f2:ea:
56:5b:09:a3:cb:51:d4:e2:eb:c7:1b:34:45:d3:9c:
64:89:6c:13:32:b2:08:8e:88:fd:73:0b:4f:17:19:
46:d1:6a:39:40:5b:39:99:8b:ca:8d:5b:81:97:78:
ea:f9:be:54:d4:4b:ee:c9:e4:fa:21:71:40:9c:ed:
61:81:4b:bd:48:54:78:d3:3a:09:42:59:b0:1f:3c:
fa:32:55:ae:5c:a2:dc:62:b4:08:83:b6:dc:66:24:
a5:c8:36:9d:48:e5:41:b9:02:e4:38:da:64:0b:74:
11:23:39:9f:9c:fa:6f:dc:48:35:33:a1:25:cf:e5:
d7:38:64:c0:37:d0:c9:a4:a3:2e:47:c1:60:c0:2b:
08:9c:63:43:be:8c:9d:d2:25:71:b4:cb:cf:d7:cd:
aa:04:f2:ea:c6:1d:4e:1d:b5:d4:a6:c7:dd:04:b3:
af:84:01:3d:9a:3a:65:5f:86:21:bd:16:be:03:4c:
cb:4a:48:01:24:7d:d3:35:32:21:e5:ae:70:21:96:
cb:49:f0:da:27:e4:56:ab:91:31:87:9c:7a:01:0f:
73:e4:01:d3:88:d8:8f:d8:3e:18:76:5b:54:4a:a3:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C5:21:FC:27:81:D6:42:AF:68:62:DE:04:96:08:89:CD:BD:E0:26
X509v3 Authority Key Identifier:
keyid:4E:07:17:AE:6D:A1:21:BC:CF:6F:75:3D:20:5B:79:DB:4C:74:AA:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgcXrm2hIbzPb3U9IFt520x0qtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/PMUh_CeB1kKvaGLeBJYIic294CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3768ac-ba49-443a-8a12-6f7c72f1c5e9/1/TgcXrm2hIbzPb3U9IFt520x0qtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.224.0/24
Signature Algorithm: sha256WithRSAEncryption
84:30:91:f8:21:ba:a4:29:04:ea:b0:83:52:ad:21:98:2f:f8:
b4:d1:53:8e:03:a1:7c:86:8b:20:a0:1c:86:84:ab:d4:d6:d0:
73:22:87:b2:ce:33:78:81:e5:17:bb:9b:b1:e8:cb:ba:c8:b2:
15:8d:d2:6c:d1:13:59:29:ad:f1:00:8a:11:d7:1a:c2:01:15:
a0:a2:8b:b0:03:59:46:a3:e0:18:fa:66:be:cd:9d:a3:60:a0:
f0:88:0e:1e:71:44:fb:88:1e:fe:f1:ac:90:ed:23:ea:dc:72:
d8:8b:d3:7f:7f:8f:00:d2:f1:82:f3:4d:4b:50:de:07:4b:bd:
cb:87:c2:0e:be:77:11:ac:6e:b2:1f:53:e6:1f:46:e0:df:0a:
3c:da:2c:3d:05:b1:9d:7f:9b:ae:75:24:02:c4:c5:76:37:25:
fa:8a:bb:5e:e5:11:d3:69:cc:cf:5c:71:0b:cd:19:62:56:05:
20:4c:c6:a9:da:a1:cb:e4:f9:be:db:ca:5e:a6:4f:96:33:bd:
36:dc:f2:79:0d:18:6e:f5:91:a2:74:95:8b:99:b4:4e:19:75:
89:9b:90:3f:af:5a:a1:22:a9:13:a7:ce:89:a5:86:95:4a:d8:
3f:f6:08:aa:40:5e:db:4a:bd:e3:fd:32:a5:33:13:1b:6d:2c:
9f:95:19:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:00 2026 by rpki-client