Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pWklxIeCMmmx8TxRlb0tZOnNeEc.roa
File: pWklxIeCMmmx8TxRlb0tZOnNeEc.roa (raw, json)
Hash identifier: 8EIChPBymoZJRX5GrmoY1PG1BkFIti2ZW1g/4ygLdl0=
Subject key identifier: A5:69:25:C4:87:82:32:69:B1:F1:3C:51:95:BD:2D:64:E9:CD:78:47
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019F26DCAB7464CCBF26B840C3D27579DF8C
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pWklxIeCMmmx8TxRlb0tZOnNeEc.roa
Signing time: Fri 03 Jul 2026 07:23:43 +0000
ROA not before: Fri 03 Jul 2026 07:23:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 9.151.0.0/19 maxlen: 19
9.151.208.0/20 maxlen: 20
9.151.248.0/21 maxlen: 21
9.233.48.0/20 maxlen: 20
9.237.96.0/19 maxlen: 19
9.237.128.0/18 maxlen: 18
9.237.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:dc:ab:74:64:cc:bf:26:b8:40:c3:d2:75:79:df:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 3 07:23:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a56925c487823269b1f13c5195bd2d64e9cd7847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:f5:5a:9a:d0:88:db:7f:7d:fd:92:6d:0b:
75:cf:35:1d:9b:af:6e:89:99:8b:3e:51:c7:93:17:
c2:f8:eb:10:49:6b:83:65:1d:6d:7f:5e:60:d8:4e:
6b:47:df:ca:25:15:3b:f7:99:a4:cb:ca:ed:d1:e4:
e4:26:c5:7c:6a:28:21:5f:a1:23:b3:03:01:d6:d9:
d6:4c:8b:70:e2:64:10:27:57:28:79:0d:9e:19:26:
6f:16:37:14:b6:c5:cb:99:65:2b:11:7a:ff:d9:f2:
1a:0d:d4:ef:db:62:02:6a:18:b8:7a:3e:ff:e9:fe:
bc:a0:aa:05:21:24:73:67:bf:98:63:20:66:5f:e7:
e8:f2:08:bc:a5:97:ad:af:e1:ff:b5:99:2c:db:9d:
cf:4c:3d:94:d0:4d:b6:e6:d9:d7:08:2b:7c:03:cf:
ee:11:51:71:65:ea:94:84:c9:fe:d1:ca:f4:53:01:
91:0b:51:96:4e:a6:b3:78:34:a2:e6:3e:8c:c3:eb:
0b:81:5f:ad:d7:4b:6d:8d:15:29:a9:d0:d4:c0:07:
b9:64:c0:73:66:f4:5e:de:4c:9b:29:3d:8e:fe:69:
d5:e4:38:26:4a:dc:a7:a4:51:9d:e3:df:5a:62:26:
8f:97:ad:e5:bf:de:6c:29:71:dd:6b:c5:32:5e:55:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:25:C4:87:82:32:69:B1:F1:3C:51:95:BD:2D:64:E9:CD:78:47
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pWklxIeCMmmx8TxRlb0tZOnNeEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.0.0/19
9.151.208.0/20
9.151.248.0/21
9.233.48.0/20
9.237.96.0-9.237.223.255
Signature Algorithm: sha256WithRSAEncryption
49:65:07:a4:68:8e:a9:eb:bc:7d:08:17:8a:ef:33:3e:a1:c0:
fc:b7:2f:8d:75:88:2b:97:66:a6:be:eb:be:13:44:7b:4f:5d:
e5:47:34:00:2f:b1:34:d9:c1:c0:35:82:e0:ea:e0:99:df:89:
61:b6:2d:2a:dc:1e:3c:fa:11:b4:55:03:87:95:7b:93:25:0f:
bf:0e:79:fe:54:59:43:37:5d:78:b6:ad:3c:4a:21:36:54:3b:
a2:1b:f2:3f:96:dc:cd:61:45:ac:1e:d3:53:c6:68:5c:3f:03:
bc:33:02:d8:a0:eb:82:82:c1:96:42:40:47:9b:2b:a9:e7:c0:
f6:ea:39:e0:1f:29:85:6a:11:fb:e7:ff:ee:b2:7a:63:c4:ee:
8f:e0:7f:38:50:fa:19:45:45:fe:7f:b7:84:61:21:f4:80:63:
de:b7:28:24:25:a0:5e:2f:08:d5:a8:bb:65:5d:34:b4:c5:ab:
24:33:8e:f0:e9:2f:7c:fe:09:36:b4:89:f2:01:7d:84:39:d0:
15:f3:eb:ef:b5:34:d8:26:00:42:fa:74:7b:55:7e:2c:9f:24:
35:7b:9c:92:76:3c:16:fc:cc:62:b2:12:05:cc:aa:d5:ff:00:
ee:9c:b4:cd:b2:e1:39:ec:92:b1:48:3b:45:7d:ec:46:bf:31:
ab:3f:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:27 2026 by rpki-client