Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/PTxGryENH4mD20Ccz3IFvC8h74s.roa
File: PTxGryENH4mD20Ccz3IFvC8h74s.roa (raw, json)
Hash identifier: 3zw+NEm8FaAvgwVFX3LBOptNCA81ya5MsfkEuiCj8Eo=
Subject key identifier: 3D:3C:46:AF:21:0D:1F:89:83:DB:40:9C:CF:72:05:BC:2F:21:EF:8B
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01A0CD8DF292A808B49D54C2F0EC42219188
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/PTxGryENH4mD20Ccz3IFvC8h74s.roa
Signing time: Wed 23 Sep 2026 09:17:07 +0000
ROA not before: Wed 23 Sep 2026 09:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198034
IP address blocks: 217.194.80.0/23 maxlen: 24
217.194.82.0/24 maxlen: 24
217.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8d:f2:92:a8:08:b4:9d:54:c2:f0:ec:42:21:91:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Sep 23 09:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d3c46af210d1f8983db409ccf7205bc2f21ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:f0:d1:3c:ed:de:fe:90:82:22:12:51:e8:
b6:f4:19:42:17:b7:7b:03:5c:1c:a0:c2:91:9a:4f:
3b:6c:45:c1:90:cc:ee:c0:e6:32:1e:30:af:26:a5:
9a:3d:60:78:70:9c:b6:70:ab:b9:a2:51:e5:37:82:
08:18:70:d0:b7:aa:23:58:c8:4c:5f:c2:53:a3:c5:
3a:b9:98:b2:31:c0:c2:81:05:86:7f:9f:1b:1b:36:
63:48:65:5c:a7:5c:85:f5:5e:18:29:cf:d5:6c:7f:
ba:7c:a8:a2:77:30:33:6c:d5:b7:e0:2d:29:e7:e8:
61:c1:f6:1b:89:b2:74:1b:09:c1:f6:e0:78:e2:a7:
2b:b9:0f:5b:24:69:29:80:32:1d:ef:c2:36:64:2c:
47:2f:cb:d2:88:a6:15:8b:c3:64:00:6c:15:4b:8c:
d7:3c:ac:c9:a8:b9:2a:32:c8:eb:5d:14:a2:94:0c:
4c:67:d6:a1:2b:6e:61:85:d8:9f:1d:c4:9e:0c:fa:
15:20:dd:15:92:7b:9d:7f:fa:90:92:6d:20:c0:ef:
61:5d:af:a0:94:89:f9:3e:c3:13:2e:13:81:9e:85:
b1:64:98:b6:88:8d:d3:35:58:a8:24:c2:67:39:1f:
72:af:23:5d:8e:aa:85:45:81:9b:6e:6e:85:54:5f:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3C:46:AF:21:0D:1F:89:83:DB:40:9C:CF:72:05:BC:2F:21:EF:8B
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/PTxGryENH4mD20Ccz3IFvC8h74s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.80.0-217.194.82.255
217.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:11:01:6d:37:1c:ac:21:00:23:5d:50:7a:a0:f5:fb:07:2b:
1d:5e:c1:b6:9f:d5:7c:32:d7:b0:06:08:e8:9a:4f:6a:e0:5f:
c9:46:2f:af:39:ef:df:94:e7:11:6d:36:94:d2:23:ae:50:6e:
07:2a:08:f6:ad:90:cc:63:c2:19:fe:84:12:0d:fb:db:1a:df:
f4:26:ca:2d:4e:b8:34:59:76:d9:d5:81:97:05:34:55:32:73:
6d:f1:09:d0:91:93:ea:19:5f:f2:06:e7:01:32:58:53:9f:08:
8d:23:b8:1e:1c:e9:71:21:4a:c7:14:e0:d0:63:ea:86:f0:a1:
ec:6a:36:69:71:5b:d9:cb:10:83:96:4f:9a:4d:cc:8d:70:ff:
78:fe:0a:90:94:01:f2:78:3a:25:bb:85:a7:cc:8f:b7:49:3a:
87:4a:fc:aa:a8:7b:92:9c:1f:b5:44:a8:99:e0:ef:26:70:e7:
6c:c6:e6:fe:14:ff:33:96:b4:9e:86:71:d5:b4:1c:ce:4a:34:
3f:22:d9:89:41:fc:75:fe:56:12:5a:fb:89:d7:c2:0e:4a:f9:
99:72:28:4f:f2:62:29:2a:8b:5e:93:d2:15:46:5c:99:65:e8:
80:e0:3a:e2:15:69:8e:33:df:f5:26:c0:47:9f:11:82:ba:97:
99:2c:d6:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 1 02:13:14 2026 by rpki-client