Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa
File: PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa (raw, json)
Hash identifier: FXsrCUeyVdza65q3avYmUJtFZh5GIUafzTy0U+HiLQE=
Subject key identifier: 3C:A3:95:FE:44:FA:B8:61:E1:4E:7D:BE:E9:60:C7:54:1D:E1:A7:36
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F2368370CAA63D6B3DD2A80AE51FF3AB9
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35179
IP address blocks: 212.127.78.0/24 maxlen: 24
212.127.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:0c:aa:63:d6:b3:dd:2a:80:ae:51:ff:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ca395fe44fab861e14e7dbee960c7541de1a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:b2:25:a8:4a:71:25:1a:2f:0b:7b:df:51:
e2:b5:8d:05:32:83:c2:d7:7e:9f:07:80:a1:b0:f7:
12:cc:bb:94:7d:c3:7c:3c:80:2e:92:9d:5c:7a:58:
bc:52:61:a6:38:a7:65:f4:7e:6a:d7:a0:ca:33:22:
8f:d1:9e:ac:cd:24:d1:06:71:58:71:fe:f8:39:69:
ea:bd:ee:b5:fc:84:09:72:40:83:04:d5:80:20:37:
43:3b:fb:2a:30:4e:46:e2:76:14:5f:32:cd:5e:b2:
85:a2:e1:16:9d:c0:8d:57:0b:5d:35:ec:db:50:69:
ca:02:e1:c9:5d:37:db:fb:4a:89:a4:c8:81:94:fc:
f0:f7:a5:59:18:33:bd:64:05:58:61:d5:59:67:97:
3d:4b:91:55:02:c1:57:1c:69:26:9f:f4:b1:38:8b:
c6:d7:46:c2:93:22:85:ed:e1:1b:f1:cd:e6:e8:0d:
7d:68:f5:b7:f4:88:03:4b:2c:4b:ff:1a:ce:38:f0:
13:db:75:ff:34:04:88:6d:2d:83:ea:dc:09:c5:a6:
ab:3a:3a:90:a6:cf:c6:8a:24:0f:78:bc:d5:21:ca:
c6:75:c9:f9:bf:96:a6:83:bd:16:27:14:3d:ee:a9:
85:eb:85:c6:49:7d:da:64:ac:f2:03:b4:d4:21:63:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A3:95:FE:44:FA:B8:61:E1:4E:7D:BE:E9:60:C7:54:1D:E1:A7:36
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/PKOV_kT6uGHhTn2-6WDHVB3hpzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.78.0/24
212.127.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:2e:16:0f:ff:53:40:27:1e:98:77:c6:20:01:09:aa:3e:2a:
1f:cd:8d:db:08:35:6b:d2:76:87:e5:da:26:bb:54:21:d0:6c:
ae:ca:37:58:9c:d5:05:73:c6:47:e6:36:de:a1:ac:8d:bf:b5:
33:71:dc:13:94:29:7d:00:d0:59:a2:80:d8:ee:8c:ef:5a:dd:
82:1b:f1:1a:00:8e:91:34:e2:67:a8:34:31:51:f0:38:ac:2b:
0e:43:88:5c:d4:5d:c1:02:08:c5:f4:43:e3:7e:e9:dd:4a:0e:
7a:b7:f6:67:ce:c7:7c:35:96:ff:b1:0f:d0:82:bb:09:2e:e4:
81:f2:f7:d0:4b:61:fb:c7:9f:fd:e9:9c:9c:1e:c2:a7:8c:28:
28:e7:a6:ac:88:c5:36:ed:53:c9:a8:20:59:de:dd:86:ee:07:
23:67:6c:af:2d:89:51:b0:41:28:38:dc:23:df:c5:35:e5:67:
ed:8b:78:32:cc:bf:6c:ec:34:fe:4f:10:21:3d:e3:56:19:a4:
43:57:db:09:00:87:12:b4:8e:2d:ef:86:64:af:c8:42:85:21:
8d:69:6c:c8:43:e2:22:51:9f:2f:60:63:58:e2:1b:b1:20:d6:
8a:4f:a5:8b:9a:8e:c9:15:1c:4c:29:13:ec:15:be:0d:cd:08:
ad:a4:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:52 2026 by rpki-client