Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Pnka--Uaft0k6d-d5dFOZhU2_Ig.roa
File: Pnka--Uaft0k6d-d5dFOZhU2_Ig.roa (raw, json)
Hash identifier: u0wGS9O4c4kqSuMe8tNtxXRV3p9/PZvoDBDX64kx8u0=
Subject key identifier: 3E:79:1A:FB:E5:1A:7E:DD:24:E9:DF:9D:E5:D1:4E:66:15:36:FC:88
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 01A0C45F2EE094BDCA3EE10045A4611B8E27
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Pnka--Uaft0k6d-d5dFOZhU2_Ig.roa
Signing time: Mon 21 Sep 2026 14:29:27 +0000
ROA not before: Mon 21 Sep 2026 14:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1103
IP address blocks: 145.0.0.0/16 maxlen: 24
145.2.0.0/15 maxlen: 24
145.9.0.0/16 maxlen: 24
145.19.0.0/16 maxlen: 24
145.19.0.0/24 maxlen: 24
145.20.0.0/16 maxlen: 24
145.23.0.0/16 maxlen: 24
145.23.0.0/19 maxlen: 24
145.24.0.0/16 maxlen: 24
145.28.0.0/15 maxlen: 24
145.33.0.0/16 maxlen: 24
145.37.0.0/16 maxlen: 24
145.38.0.0/15 maxlen: 24
145.41.0.0/16 maxlen: 24
145.44.0.0/16 maxlen: 24
145.48.0.0/15 maxlen: 24
145.51.0.0/16 maxlen: 24
145.52.0.0/16 maxlen: 24
145.67.0.0/16 maxlen: 24
145.74.0.0/15 maxlen: 24
145.76.0.0/16 maxlen: 24
145.81.0.0/16 maxlen: 24
145.85.0.0/16 maxlen: 24
145.85.0.0/24 maxlen: 24
145.88.0.0/15 maxlen: 24
145.90.0.0/16 maxlen: 24
145.90.10.0/23 maxlen: 24
145.91.0.0/16 maxlen: 24
145.91.0.0/24 maxlen: 24
145.92.0.0/15 maxlen: 24
145.95.0.0/16 maxlen: 24
145.96.0.0/16 maxlen: 24
145.97.0.0/20 maxlen: 24
145.97.16.0/22 maxlen: 24
145.97.20.0/22 maxlen: 24
145.97.24.0/21 maxlen: 24
145.97.48.0/20 maxlen: 24
145.97.64.0/18 maxlen: 24
145.97.128.0/18 maxlen: 24
145.97.128.0/24 maxlen: 24
145.97.192.0/18 maxlen: 24
145.98.0.0/16 maxlen: 24
145.98.16.0/24 maxlen: 24
145.100.0.0/15 maxlen: 24
145.102.0.0/16 maxlen: 24
145.103.0.0/16 maxlen: 24
145.107.0.0/16 maxlen: 24
145.108.0.0/16 maxlen: 24
145.109.128.0/17 maxlen: 24
145.116.0.0/20 maxlen: 24
145.116.16.0/21 maxlen: 24
145.116.24.0/21 maxlen: 24
145.116.64.0/18 maxlen: 24
145.116.128.0/18 maxlen: 24
145.116.192.0/20 maxlen: 24
145.116.224.0/19 maxlen: 24
145.117.0.0/16 maxlen: 24
145.118.0.0/16 maxlen: 24
145.120.0.0/14 maxlen: 24
145.124.0.0/15 maxlen: 24
145.126.0.0/16 maxlen: 24
145.127.0.0/17 maxlen: 24
145.136.0.0/15 maxlen: 24
145.137.128.0/18 maxlen: 24
145.138.0.0/16 maxlen: 24
145.140.0.0/14 maxlen: 24
145.144.0.0/12 maxlen: 24
145.146.0.0/16 maxlen: 24
145.160.0.0/12 maxlen: 24
145.216.0.0/15 maxlen: 24
192.87.0.0/16 maxlen: 24
194.171.0.0/16 maxlen: 24
195.169.0.0/16 maxlen: 24
2001:610::/29 maxlen: 29
2001:610::/32 maxlen: 48
2001:610:130::/48 maxlen: 64
2001:678:1334::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:5f:2e:e0:94:bd:ca:3e:e1:00:45:a4:61:1b:8e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Sep 21 14:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e791afbe51a7edd24e9df9de5d14e661536fc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:38:4a:2d:e4:4c:26:eb:b5:7c:89:cb:f0:
9d:e9:21:28:cd:9e:8e:18:e4:9e:b4:ef:cf:b1:43:
97:45:c5:46:e3:3c:cf:45:95:5c:ca:a8:0f:a0:b4:
d9:04:b4:d9:80:8f:3c:7c:5e:b3:36:e1:21:fa:b0:
ba:50:2c:b8:41:b1:62:e1:57:10:18:9a:8d:fb:f2:
11:b7:8f:8c:96:e9:c4:7f:54:fe:d7:ea:b3:b7:ba:
9a:8b:70:45:48:43:7f:2d:42:a2:d2:f6:56:4f:72:
15:d9:60:23:2f:48:aa:dc:3f:a0:f9:5f:97:5d:55:
f8:4c:13:d5:b3:9b:b8:2f:b3:f0:b0:9a:1a:2d:9b:
97:23:5c:d1:bb:92:31:46:e0:6f:e8:a0:f9:b7:7f:
ee:bd:02:eb:ee:d0:76:1b:d9:fc:fd:6e:ba:6a:ef:
1d:c0:17:50:08:ba:5b:08:07:99:c5:06:67:48:b8:
ed:8c:8b:28:5b:f1:9b:cf:90:3d:af:5c:e4:bb:2a:
f9:ec:1a:49:90:a4:82:3a:b3:cb:85:20:36:06:f6:
7e:cb:ff:57:f3:fe:2f:18:27:b8:b9:49:74:c4:21:
ce:fb:84:4c:b0:8d:dc:b2:70:5f:e6:bd:8d:79:f9:
f2:41:23:0a:67:e2:bc:bf:b6:fc:be:86:9f:00:82:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:1A:FB:E5:1A:7E:DD:24:E9:DF:9D:E5:D1:4E:66:15:36:FC:88
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Pnka--Uaft0k6d-d5dFOZhU2_Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.0.0.0/16
145.2.0.0/15
145.9.0.0/16
145.19.0.0-145.20.255.255
145.23.0.0-145.24.255.255
145.28.0.0/15
145.33.0.0/16
145.37.0.0-145.39.255.255
145.41.0.0/16
145.44.0.0/16
145.48.0.0/15
145.51.0.0-145.52.255.255
145.67.0.0/16
145.74.0.0-145.76.255.255
145.81.0.0/16
145.85.0.0/16
145.88.0.0-145.93.255.255
145.95.0.0-145.97.31.255
145.97.48.0-145.98.255.255
145.100.0.0/14
145.107.0.0-145.108.255.255
145.109.128.0/17
145.116.0.0/19
145.116.64.0-145.116.207.255
145.116.224.0-145.118.255.255
145.120.0.0-145.127.127.255
145.136.0.0-145.138.255.255
145.140.0.0-145.175.255.255
145.216.0.0/15
192.87.0.0/16
194.171.0.0/16
195.169.0.0/16
IPv6:
2001:610::/29
2001:678:1334::/48
Signature Algorithm: sha256WithRSAEncryption
2e:cc:bb:c6:b4:e0:c9:c1:ff:b8:bd:c0:08:2f:25:f2:c4:17:
d2:75:1f:61:c3:11:53:b7:a9:07:64:86:01:61:55:fd:fd:8b:
c2:8d:85:f2:49:4f:9a:06:a5:f4:7d:22:40:a8:32:34:15:80:
e2:b2:40:71:2e:50:03:28:ff:fd:04:e2:89:22:45:fc:19:02:
a8:9e:9c:0b:86:b8:6f:b7:be:1d:03:e8:69:3b:d8:85:a3:bb:
03:39:37:5c:f3:9d:94:8b:76:86:d6:55:be:94:23:37:4e:2f:
52:c8:ff:0c:7f:5d:f2:45:6e:ba:6d:b1:55:84:6c:c6:2d:1a:
24:e3:36:78:38:ec:77:9f:c8:e2:d4:fc:16:85:4d:f3:c5:0c:
ff:b4:e1:b4:dd:4b:59:e6:bc:2f:3a:cc:7c:1a:48:be:2e:48:
69:ff:c1:b2:09:c3:09:e8:9e:d0:2f:8c:72:57:98:93:aa:09:
b5:fa:5a:d0:ed:c2:61:0a:da:46:01:db:c6:d6:5a:ae:3f:de:
2e:97:36:d8:31:f2:53:ce:1f:1a:cb:cd:d0:8e:47:f8:bb:b4:
43:66:94:a9:ce:93:76:28:91:69:22:5c:2c:25:27:f2:8e:c4:
db:f9:1f:51:31:9c:93:43:9e:d7:0c:e8:3f:36:1f:d6:9e:ad:
d1:80:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:47:25 2026 by rpki-client