Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/PlbevzEYKM-qoh1CjpvoAB1dXbA.roa
File: PlbevzEYKM-qoh1CjpvoAB1dXbA.roa (raw, json)
Hash identifier: YKiIoTrsFM0sqDV9b32wDyD2g4ipCQJX8lIN5RJ11x8=
Subject key identifier: 3E:56:DE:BF:31:18:28:CF:AA:A2:1D:42:8E:9B:E8:00:1D:5D:5D:B0
Certificate issuer: /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial: 01A09FE8773443E72C4575EFFDD75A397CBC
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/PlbevzEYKM-qoh1CjpvoAB1dXbA.roa
Signing time: Mon 14 Sep 2026 12:33:27 +0000
ROA not before: Mon 14 Sep 2026 12:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38913
IP address blocks: 88.214.28.0/22 maxlen: 22
88.214.28.0/24 maxlen: 24
88.214.29.0/24 maxlen: 24
88.214.30.0/24 maxlen: 24
88.214.31.0/24 maxlen: 24
2a09:8b00::/29 maxlen: 29
2a09:8b00:101::/48 maxlen: 64
2a09:8b00:252::/48 maxlen: 64
2a09:8b00:300::/48 maxlen: 64
2a09:8b00:9999::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e8:77:34:43:e7:2c:45:75:ef:fd:d7:5a:39:7c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Validity
Not Before: Sep 14 12:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e56debf311828cfaaa21d428e9be8001d5d5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:7e:d1:ba:49:b0:73:35:32:53:0d:c9:fa:
a6:58:3c:9b:23:a2:7a:56:4d:85:d6:3e:e4:ae:ad:
86:5c:c3:13:8e:5a:0e:d4:e6:3d:c2:a7:56:d8:41:
e1:b6:f2:8f:95:7e:b6:fe:5c:48:e2:89:31:02:ad:
df:36:ea:3e:b7:76:41:66:3b:6c:08:ab:80:ab:cc:
c9:1f:d0:a6:b0:76:a2:d3:11:b4:4c:e9:22:08:72:
3b:76:17:5d:ac:07:51:e7:1c:4a:4d:bb:f6:a8:98:
21:2e:6f:01:95:09:39:08:aa:8a:a8:74:8e:da:c2:
91:1d:51:53:9c:fd:d1:42:94:7c:f2:fb:c3:75:56:
af:72:76:2d:00:35:db:2e:9e:68:00:79:d8:9a:73:
e1:db:09:41:9d:de:ed:b6:b6:ec:cc:58:33:a5:d1:
04:17:ad:90:36:e7:4c:1a:78:8c:73:2a:4c:e3:90:
c1:04:05:d0:ef:7e:56:ac:12:da:c8:d1:59:71:d8:
d5:69:78:a8:95:cd:a4:1a:b5:fc:31:38:17:98:f6:
ec:7a:30:e2:d6:6c:9e:10:7d:33:34:6d:bd:37:b0:
14:44:aa:6d:f9:89:a8:87:d0:54:fa:60:44:25:79:
7d:ff:07:c9:3f:dd:91:c7:46:aa:65:e3:d9:f8:6b:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:56:DE:BF:31:18:28:CF:AA:A2:1D:42:8E:9B:E8:00:1D:5D:5D:B0
X509v3 Authority Key Identifier:
keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/PlbevzEYKM-qoh1CjpvoAB1dXbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.28.0/22
IPv6:
2a09:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
4a:a5:4a:72:e5:5a:f6:69:b5:aa:85:81:58:a0:06:0b:62:aa:
54:73:8d:ba:c0:21:13:91:d6:e6:88:b2:70:d7:88:d0:88:e3:
c0:04:85:75:1a:a4:af:92:27:c5:7b:91:8d:5f:fb:74:96:1e:
73:c1:93:32:97:45:60:5f:83:79:cd:a1:5b:06:c4:1f:2d:eb:
f7:6a:19:d4:ca:34:a0:b8:b6:9b:9d:8f:53:df:bc:07:20:88:
20:35:75:79:82:38:af:bc:d1:b0:70:5c:23:2e:78:28:ab:0c:
3c:00:e6:29:85:49:8d:99:13:74:4e:0c:09:6f:e4:89:9e:a6:
f0:b2:46:84:5f:ce:fb:44:eb:21:f0:8d:f9:45:fa:b3:37:0d:
ab:82:4c:db:41:59:1c:e3:31:fc:bd:a7:3d:77:92:51:2a:b6:
04:ca:10:ac:2d:59:f9:84:05:a4:30:9b:51:b9:19:7c:82:b7:
d7:8b:1d:ce:d4:59:26:3b:1d:23:9c:21:3c:c4:3a:f3:e3:71:
f7:b5:4b:c5:a0:95:31:d6:5a:40:f6:22:e5:29:8f:a3:b0:b0:
66:d4:81:3b:ea:3a:9f:d8:ce:72:99:c2:af:fc:3b:2e:35:06:
c0:cc:ea:84:22:c0:6c:ad:92:f5:25:8c:f4:d4:37:07:f6:72:
02:d6:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:11 2026 by rpki-client