Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pl_z_W5pAslnDDyZuiMfLoC05yw.roa
File: pl_z_W5pAslnDDyZuiMfLoC05yw.roa (raw, json)
Hash identifier: 3nPkjxs26EgT4lAu8OVx1qawV9XyBnuRGXYX1jgeJ0g=
Subject key identifier: A6:5F:F3:FD:6E:69:02:C9:67:0C:3C:99:BA:23:1F:2E:80:B4:E7:2C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6024B2BE91C0C80CB91C32A61B0FFCE1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pl_z_W5pAslnDDyZuiMfLoC05yw.roa
Signing time: Tue 14 Jul 2026 10:20:45 +0000
ROA not before: Tue 14 Jul 2026 10:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 151.242.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:24:b2:be:91:c0:c8:0c:b9:1c:32:a6:1b:0f:fc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 10:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65ff3fd6e6902c9670c3c99ba231f2e80b4e72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:35:34:fe:15:42:9e:c0:9f:12:dd:90:cc:
3d:d6:25:b1:e1:20:3b:2d:17:5e:e0:71:c3:eb:ff:
06:dc:1a:17:1e:05:44:dd:c7:e4:b2:f2:2f:85:9b:
77:09:f5:46:1d:19:af:d1:07:ed:d1:31:4b:08:2d:
40:dc:70:fe:69:c8:a5:22:55:a8:d3:80:04:3b:68:
f7:7a:9b:b8:85:60:63:fe:64:79:86:47:23:56:12:
cc:a8:30:a8:f5:3c:d3:99:43:b1:28:19:e8:fc:1e:
8f:af:af:ea:a9:b9:a0:93:af:83:cf:f8:43:80:49:
e7:b8:2d:e9:91:08:2e:af:62:fc:cf:de:ea:4e:dc:
4f:1b:9c:3b:f3:77:4d:21:da:94:13:a4:96:cb:fa:
4a:f2:87:0c:3c:e6:dd:1a:58:da:38:7b:3d:3f:ac:
65:50:e6:c6:30:8e:86:39:af:19:69:c8:3f:c7:20:
2b:71:8c:83:05:d1:a0:e5:1d:b3:dc:10:2e:89:86:
f9:43:43:73:e9:95:8c:d5:0f:20:cc:8d:80:61:96:
29:ae:95:e6:58:5d:b3:57:68:76:99:cf:20:9b:81:
5c:33:9d:53:3c:3e:e5:58:84:4c:b6:c3:62:b0:52:
7c:d7:94:ce:51:ff:4e:85:c2:b8:21:37:2d:85:98:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:F3:FD:6E:69:02:C9:67:0C:3C:99:BA:23:1F:2E:80:B4:E7:2C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pl_z_W5pAslnDDyZuiMfLoC05yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.148.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bf:8b:ea:fd:cd:e3:ea:de:fa:70:d4:e6:02:c6:ec:f4:2d:
30:08:96:70:b9:a1:b8:a2:ae:73:e7:8e:7e:de:ed:02:86:45:
4c:f9:83:42:3c:21:5b:9b:d8:53:8e:75:1b:d1:fe:56:85:4b:
67:7a:eb:a5:ef:33:7c:99:78:ec:d6:6e:77:43:1f:57:37:ef:
2d:a8:c2:ab:06:e3:9e:7f:46:79:0d:a1:52:ed:15:1c:0a:66:
c2:4e:c6:32:54:72:d5:23:7f:f1:75:1f:99:67:6a:58:2b:81:
6e:4d:0b:47:5e:e4:93:c8:1f:c0:2c:a8:a7:92:ea:4d:b3:80:
21:ba:66:ee:e6:f3:60:68:5b:f4:b0:9c:0b:27:52:27:d4:a1:
2d:b3:12:a7:4a:a9:1c:8d:14:47:d0:30:3a:14:a9:de:89:f4:
00:e2:b3:74:7b:e8:27:7e:b1:29:97:ad:12:0d:1e:51:10:e1:
d3:62:9d:a4:15:90:f1:d3:54:e0:6e:69:ae:4e:f0:87:fd:a9:
e9:0e:69:66:a7:af:7c:2a:24:32:ea:3a:cd:d4:fb:05:f5:fc:
24:11:97:e3:b4:22:f4:8e:ab:49:bf:b3:57:22:91:ae:e9:57:
bb:99:1c:b1:d2:d5:ad:87:a5:5f:e6:a7:d8:db:a9:a9:5e:15:
e8:59:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:35 2026 by rpki-client