Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/PX-PA_qvZ-1l6K3wNjSwdgT4Mdw.roa
File: PX-PA_qvZ-1l6K3wNjSwdgT4Mdw.roa (raw, json)
Hash identifier: HB/qGyQkIbjMupRljxbBaXBLXsVJ22JDc51zymfvPJs=
Subject key identifier: 3D:7F:8F:03:FA:AF:67:ED:65:E8:AD:F0:36:34:B0:76:04:F8:31:DC
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 01A0EC27210D8BF30D29FDCE2544968EF179
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/PX-PA_qvZ-1l6K3wNjSwdgT4Mdw.roa
Signing time: Tue 29 Sep 2026 07:53:02 +0000
ROA not before: Tue 29 Sep 2026 07:53:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64441
IP address blocks: 86.106.124.0/22 maxlen: 22
86.106.128.0/24 maxlen: 24
89.32.206.0/24 maxlen: 24
89.44.136.0/24 maxlen: 24
93.113.134.0/23 maxlen: 23
93.113.172.0/23 maxlen: 23
93.113.248.0/23 maxlen: 23
93.115.54.0/23 maxlen: 23
93.115.208.0/23 maxlen: 23
94.176.162.0/24 maxlen: 24
188.208.134.0/24 maxlen: 24
188.241.18.0/24 maxlen: 24
188.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:27:21:0d:8b:f3:0d:29:fd:ce:25:44:96:8e:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Sep 29 07:53:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d7f8f03faaf67ed65e8adf03634b07604f831dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:89:43:1f:46:71:78:4b:cc:cd:54:6e:41:
55:97:ab:8e:03:49:e0:81:85:cc:9b:46:f2:3a:d2:
cd:9f:23:8c:e0:ae:bb:4e:7b:a7:2b:70:25:b0:10:
58:cc:8b:a5:5a:a6:d1:5d:cc:bc:c1:2b:a4:b3:d7:
38:d8:28:9d:ab:51:58:62:6c:70:08:29:1f:61:32:
4c:68:bf:46:b7:35:f8:f5:19:a1:cf:eb:b9:76:3c:
2a:45:80:5c:73:f1:68:e0:5d:34:0c:ab:5b:6e:31:
0c:bf:34:7c:5a:f7:a5:17:78:fc:d0:1a:0a:6e:b4:
1d:59:71:15:e6:20:a3:7f:71:87:bf:44:c4:db:86:
89:b9:f3:6a:45:4e:29:6c:13:e3:b3:02:c9:de:bf:
27:cd:00:78:4d:4c:01:ec:20:0d:2b:2b:13:0f:2a:
27:42:f0:2f:5b:b0:96:5f:c9:0e:14:79:1d:c0:ed:
e2:68:06:f8:cb:31:64:be:93:ab:88:99:75:ed:54:
e2:84:e7:39:a5:a8:bb:79:4c:7c:cf:74:31:5f:19:
b2:b1:13:f9:13:43:f2:1f:b9:06:21:52:11:56:e3:
4c:98:d4:37:08:e5:78:65:4a:95:df:45:95:b4:f8:
e8:9c:a3:11:15:55:62:95:ca:a7:62:41:79:26:63:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:8F:03:FA:AF:67:ED:65:E8:AD:F0:36:34:B0:76:04:F8:31:DC
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/PX-PA_qvZ-1l6K3wNjSwdgT4Mdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.124.0-86.106.128.255
89.32.206.0/24
89.44.136.0/24
93.113.134.0/23
93.113.172.0/23
93.113.248.0/23
93.115.54.0/23
93.115.208.0/23
94.176.162.0/24
188.208.134.0/24
188.241.18.0/24
188.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f1:a0:7e:2e:91:ee:c2:d2:ca:ca:da:26:6b:54:0c:22:ae:
da:54:a8:96:0f:8d:d8:7f:33:bf:cc:77:c8:3a:0e:f3:37:6f:
71:fa:25:52:c8:54:13:e5:cb:57:2a:d1:36:52:51:90:c1:e3:
97:42:e5:78:cb:cb:5c:5e:61:50:a7:f0:e4:db:fc:2d:32:6f:
94:9b:3a:dd:87:f8:cc:30:55:7b:15:4e:65:07:23:48:ca:4f:
e8:9b:81:0c:d0:75:d2:d2:9e:3e:93:1f:9c:63:3c:43:84:6d:
e3:65:3f:e7:61:de:4c:6a:be:2f:87:35:2a:00:76:76:75:29:
0e:11:8f:ad:8b:7c:af:e1:25:ef:cf:08:ee:19:39:af:a0:ff:
5c:da:3b:a9:4a:00:77:cb:67:2a:70:47:15:86:e9:06:38:e5:
00:5b:73:55:23:3f:9b:17:09:42:33:1e:98:e9:2f:52:b0:34:
1d:62:75:48:85:63:d4:ae:30:c7:8a:96:ac:e0:5b:94:92:cc:
00:14:58:10:b3:2f:67:cf:7a:b1:7d:1f:98:88:db:4e:8b:9a:
54:d0:7c:37:a6:2f:35:a1:94:3d:f5:ea:2c:39:d4:8b:94:55:
58:09:4e:cb:ba:8d:17:20:65:aa:db:c3:a1:92:73:d9:fc:e6:
b2:25:32:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAaDsJyENi/MNKf3OJUSWjvF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4
OWZhYWYwHhcNMjYwOTI5MDc1MzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdmOGYwM2ZhYWY2N2VkNjVlOGFkZjAzNjM0YjA3NjA0ZjgzMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRmJQx9GcXhLzM1UbkFVl6uOA0ng
gYXMm0byOtLNnyOM4K67TnunK3AlsBBYzIulWqbRXcy8wSuks9c42Cidq1FYYmxw
CCkfYTJMaL9GtzX49Rmhz+u5djwqRYBcc/Fo4F00DKtbbjEMvzR8WvelF3j80BoK
brQdWXEV5iCjf3GHv0TE24aJufNqRU4pbBPjswLJ3r8nzQB4TUwB7CANKysTDyon
QvAvW7CWX8kOFHkdwO3iaAb4yzFkvpOriJl17VTihOc5pai7eUx8z3QxXxmysRP5
E0PyH7kGIVIRVuNMmNQ3COV4ZUqV30WVtPjonKMRFVVilcqnYkF5JmMwRwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFD1/jwP6r2ftZeit8DY0sHYE+DHcMB8GA1UdIwQY
MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt
MWIxOTIzNzFmNDQyLzEvUFgtUEFfcXZaLTFsNkszd05qU3dkZ1Q0TWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy
LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBAJWanwD
BABWaoADBABZIM4DBABZLIgDBAFdcYYDBAFdcawDBAFdcfgDBAFdczYDBAFdc9AD
BABesKIDBAC80IYDBAC88RIDBAC88VUwDQYJKoZIhvcNAQELBQADggEBAGTxoH4u
ke7C0srK2iZrVAwirtpUqJYPjdh/M7/Md8g6DvM3b3H6JVLIVBPly1cq0TZSUZDB
45dC5XjLy1xeYVCn8OTb/C0yb5SbOt2H+MwwVXsVTmUHI0jKT+ibgQzQddLSnj6T
H5xjPEOEbeNlP+dh3kxqvi+HNSoAdnZ1KQ4Rj62LfK/hJe/PCO4ZOa+g/1zaO6lK
AHfLZypwRxWG6QY45QBbc1UjP5sXCUIzHpjpL1KwNB1idUiFY9SuMMeKlqzgW5SS
zAAUWBCzL2fPerF9H5iI206LmlTQfDemLzWhlD316iw51IuUVVgJTsu6jRcgZarb
w6GSc9n85rIlMqY=
-----END CERTIFICATE-----
Generated at Mon Oct 12 01:01:50 2026 by rpki-client