Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pGPf8Gxlb_ru-SqU9z0CzXHkpbM.roa
File: pGPf8Gxlb_ru-SqU9z0CzXHkpbM.roa (raw, json)
Hash identifier: E2WHj5t4o+FhwAz86YiupmxP5Mtz05bj2eS9VBE9Dyw=
Subject key identifier: A4:63:DF:F0:6C:65:6F:FA:EE:F9:2A:94:F7:3D:02:CD:71:E4:A5:B3
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01A11217B50DC01FB91C6AC788BADE0E507B
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pGPf8Gxlb_ru-SqU9z0CzXHkpbM.roa
Signing time: Tue 06 Oct 2026 16:41:45 +0000
ROA not before: Tue 06 Oct 2026 16:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 46.20.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:17:b5:0d:c0:1f:b9:1c:6a:c7:88:ba:de:0e:50:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 6 16:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a463dff06c656ffaeef92a94f73d02cd71e4a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:68:cd:46:5f:2c:4d:49:56:70:6b:6e:a8:
5b:2f:bb:5b:ae:96:58:b8:43:fb:d8:ea:2f:07:73:
a1:e1:97:cc:d7:02:36:6b:8d:5d:0a:f6:10:91:f5:
c8:d1:5a:f8:00:a6:2c:dc:a7:02:f0:dc:8a:82:fe:
06:1b:60:66:04:e2:e6:61:36:ea:23:32:bf:42:97:
42:50:d4:d9:9a:6a:fd:5d:d8:3c:b2:4c:ec:f6:a9:
f1:0c:62:3c:47:e3:f8:5c:f9:b9:cb:02:9a:21:13:
2a:b3:06:a6:7b:99:3d:b4:08:ce:52:33:80:81:20:
e6:65:e4:68:61:c4:93:60:33:01:b4:e2:27:f4:72:
10:e0:2a:b1:25:9a:a5:8f:fc:95:6a:8d:b6:b6:76:
8a:bf:55:d7:21:7c:2a:1a:56:27:09:a7:09:b8:67:
89:47:81:9c:60:4d:68:c9:01:0e:c8:97:f9:f7:5b:
6d:33:eb:74:4a:cb:e5:ce:f8:a9:86:fd:47:21:46:
4d:54:9a:d6:dc:12:35:d6:2d:73:b7:06:d0:1b:15:
85:fa:20:e1:17:6e:2b:77:0f:22:e8:06:3e:a6:30:
91:fa:fd:3a:2f:be:8a:58:1f:07:46:97:2c:7f:60:
c0:84:39:f1:97:f6:6e:94:48:04:2b:91:cf:e0:e8:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:DF:F0:6C:65:6F:FA:EE:F9:2A:94:F7:3D:02:CD:71:E4:A5:B3
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/pGPf8Gxlb_ru-SqU9z0CzXHkpbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.108.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ef:77:92:05:f3:69:30:ec:22:1d:15:e3:04:cf:59:62:51:
ee:54:01:8d:8b:5e:37:10:f5:62:98:20:64:ac:3a:02:08:d2:
b6:40:bc:bb:54:72:60:ca:cc:47:f1:e9:99:23:18:2a:cb:1a:
89:e3:4f:b8:f5:1b:53:e6:93:f5:95:34:60:43:b6:a5:29:94:
9d:4b:d4:13:1d:b4:92:fb:36:65:8c:0a:0c:78:aa:06:f5:77:
03:56:59:ed:c8:ed:c6:56:aa:29:4e:53:e9:21:09:71:1e:34:
93:ce:ac:36:05:80:04:6f:09:e8:84:f6:a7:5e:bc:b3:80:8e:
48:45:73:94:38:9b:e9:c1:aa:56:3b:ff:f4:e1:e0:16:a3:6d:
bc:53:a4:03:8a:61:27:bb:13:a2:f3:fd:a2:93:b6:12:3f:11:
2e:06:73:7d:5b:73:ed:07:50:6b:2b:84:fd:a1:f5:2c:47:8a:
ac:89:11:5a:fa:3c:4f:ac:37:72:45:64:ec:6f:44:7c:4a:bd:
ee:79:e3:c7:45:1a:f6:51:ce:33:05:e0:da:67:14:4e:59:30:
91:70:86:2e:77:c8:16:14:32:30:85:28:77:0a:d0:f0:6b:0c:
68:1a:cf:8b:b5:a1:02:15:2f:1d:0f:4b:90:43:7c:db:f3:a3:
c4:08:88:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaESF7UNwB+5HGrHiLreDlB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjYxMDA2MTY0MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDYzZGZmMDZjNjU2ZmZhZWVmOTJhOTRmNzNkMDJjZDcxZTRhNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hNozUZfLE1JVnBrbqhbL7tbrpZY
uEP72OovB3Oh4ZfM1wI2a41dCvYQkfXI0Vr4AKYs3KcC8NyKgv4GG2BmBOLmYTbq
IzK/QpdCUNTZmmr9Xdg8skzs9qnxDGI8R+P4XPm5ywKaIRMqswame5k9tAjOUjOA
gSDmZeRoYcSTYDMBtOIn9HIQ4CqxJZqlj/yVao22tnaKv1XXIXwqGlYnCacJuGeJ
R4GcYE1oyQEOyJf591ttM+t0Ssvlzviphv1HIUZNVJrW3BI11i1ztwbQGxWF+iDh
F24rdw8i6AY+pjCR+v06L76KWB8HRpcsf2DAhDnxl/ZulEgEK5HP4Og+NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRj3/BsZW/67vkqlPc9As1x5KWzMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvcEdQZjhHeGxiX3J1LVNxVTl6MEN6WEhrcGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRsMA0G
CSqGSIb3DQEBCwUAA4IBAQBy73eSBfNpMOwiHRXjBM9ZYlHuVAGNi143EPVimCBk
rDoCCNK2QLy7VHJgysxH8emZIxgqyxqJ40+49RtT5pP1lTRgQ7alKZSdS9QTHbSS
+zZljAoMeKoG9XcDVlntyO3GVqopTlPpIQlxHjSTzqw2BYAEbwnohPanXryzgI5I
RXOUOJvpwapWO//04eAWo228U6QDimEnuxOi8/2ik7YSPxEuBnN9W3PtB1BrK4T9
ofUsR4qsiRFa+jxPrDdyRWTsb0R8Sr3ueePHRRr2Uc4zBeDaZxROWTCRcIYud8gW
FDIwhSh3CtDwawxoGs+LtaECFS8dD0uQQ3zb86PECIh1
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:10:23 2026 by rpki-client