Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/PrBQZObLRS8-7Om1E1-4U8i6lWo.roa
File: PrBQZObLRS8-7Om1E1-4U8i6lWo.roa (raw, json)
Hash identifier: JBCAfiaAJXri8pwh7MhRNEqe9ZCw5YBOEy5ZcQRbRYk=
Subject key identifier: 3E:B0:50:64:E6:CB:45:2F:3E:EC:E9:B5:13:5F:B8:53:C8:BA:95:6A
Certificate issuer: /CN=a61fe77fb78e949cd46b98dc6bb9c82c818a3ad0
Certificate serial: 019CEC06B9A0AD1CD6BB7840A39BE18C4B48
Authority key identifier: A6:1F:E7:7F:B7:8E:94:9C:D4:6B:98:DC:6B:B9:C8:2C:81:8A:3A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/PrBQZObLRS8-7Om1E1-4U8i6lWo.roa
Signing time: Sat 14 Mar 2026 11:06:29 +0000
ROA not before: Sat 14 Mar 2026 11:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15991
IP address blocks: 137.61.0.0/16 maxlen: 16
2a03:b100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:06:b9:a0:ad:1c:d6:bb:78:40:a3:9b:e1:8c:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61fe77fb78e949cd46b98dc6bb9c82c818a3ad0
Validity
Not Before: Mar 14 11:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eb05064e6cb452f3eece9b5135fb853c8ba956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:2b:61:d3:8e:6d:12:e9:39:52:cf:8f:d5:
1b:2a:5c:45:fa:04:60:9e:86:dc:35:5d:07:f1:25:
af:7d:9d:04:2e:a8:f6:19:60:c5:f3:46:19:51:61:
1b:a0:61:61:3f:3c:4e:c8:c1:1c:6f:78:f5:d2:80:
7c:a3:8d:f2:e4:a2:d7:81:30:7a:96:ef:e0:74:36:
a0:49:21:90:2e:8c:4a:53:55:73:1b:73:85:e9:19:
71:da:c5:8c:bb:0e:d3:cb:bf:e3:de:06:4e:69:c3:
91:70:98:56:15:b1:e7:75:fb:c4:0b:13:01:0b:24:
86:e8:e5:a3:3f:c7:8d:1d:7b:c1:92:f7:7a:8f:b5:
94:22:13:69:6b:f1:06:82:5d:ee:9e:aa:19:62:de:
81:3d:12:5c:ca:4d:bf:70:27:23:bf:6e:48:b7:e2:
48:17:3c:57:8d:fa:d0:38:c5:29:32:8f:4c:8f:62:
38:d5:50:ba:d8:d7:6f:c9:25:d4:62:23:8f:e7:d5:
09:32:28:af:64:87:58:4a:89:1d:6e:30:b6:ae:9a:
70:a7:1a:95:3e:45:aa:de:94:59:d8:df:d7:74:20:
b4:0e:a9:3d:9d:e4:30:e3:b2:9a:b8:97:24:05:52:
d1:e1:91:eb:e9:8f:09:88:69:9d:fb:90:a0:de:fb:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:50:64:E6:CB:45:2F:3E:EC:E9:B5:13:5F:B8:53:C8:BA:95:6A
X509v3 Authority Key Identifier:
keyid:A6:1F:E7:7F:B7:8E:94:9C:D4:6B:98:DC:6B:B9:C8:2C:81:8A:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph_nf7eOlJzUa5jca7nILIGKOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/PrBQZObLRS8-7Om1E1-4U8i6lWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/674dcc-2b5c-417a-8ef9-544c38317564/1/ph_nf7eOlJzUa5jca7nILIGKOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.61.0.0/16
IPv6:
2a03:b100::/32
Signature Algorithm: sha256WithRSAEncryption
60:e0:82:c1:cf:26:ec:b2:bc:a6:d1:31:fb:a2:27:35:1e:38:
ac:33:13:26:0e:37:59:fa:bd:ed:ca:e8:df:48:96:09:cf:a8:
6b:50:80:84:8e:70:aa:9d:d3:08:f5:d7:af:ae:6c:d5:68:de:
09:1a:14:ee:4b:62:2a:ec:d4:c9:cd:e8:3a:ba:00:08:e0:c2:
e0:b0:8b:81:06:0e:5c:5a:68:76:10:eb:18:81:6f:86:8a:1a:
bd:f9:41:d1:48:45:49:d5:d2:03:19:5f:e9:c9:38:73:77:b0:
96:08:77:10:0c:f8:79:4a:1e:8d:6a:8b:65:16:b9:3d:2f:f2:
7c:a9:38:91:e2:4c:ee:06:ce:35:e2:1d:59:35:e7:55:5f:22:
ca:ab:8b:3f:94:21:75:8a:3b:57:b7:bd:de:de:2f:dd:ae:e4:
2d:2b:b1:ca:ef:10:74:46:d1:e9:27:22:46:55:97:ff:76:9b:
a3:20:57:ca:b7:cc:e8:a3:3f:a9:a2:fe:b9:87:51:e5:68:f8:
04:84:c9:a3:fd:45:75:f1:67:3f:23:3f:5a:b3:1d:62:9b:82:
56:4d:15:22:6c:49:cc:79:14:ed:81:25:ef:01:24:17:5e:de:
cb:14:a1:e4:2f:36:8c:73:f5:e8:c1:bb:0e:15:22:d5:38:e7:
b0:47:81:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:08:07 2026 by rpki-client