Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pcJB0suH0TKhOCtzCq1NTEmpZsc.roa
File: pcJB0suH0TKhOCtzCq1NTEmpZsc.roa (raw, json)
Hash identifier: tQGobMEI0P8YC5UfhZCi3AUw8KkzMyZmbnGWFolo9VE=
Subject key identifier: A5:C2:41:D2:CB:87:D1:32:A1:38:2B:73:0A:AD:4D:4C:49:A9:66:C7
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1932608F95885D8AEEF89BEE114164109
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pcJB0suH0TKhOCtzCq1NTEmpZsc.roa
Signing time: Sat 31 Oct 2026 18:08:25 +0000
ROA not before: Sat 31 Oct 2026 18:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36231
IP address blocks: 195.216.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:26:08:f9:58:85:d8:ae:ef:89:be:e1:14:16:41:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 31 18:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5c241d2cb87d132a1382b730aad4d4c49a966c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:20:29:77:fc:ef:45:13:3a:54:f1:79:96:
ee:24:f5:04:10:7d:01:a6:31:11:11:82:01:8f:e2:
8c:1e:10:92:22:18:47:24:9d:0a:ee:21:43:b4:45:
6f:3a:cc:25:bb:d8:00:81:40:4e:ae:85:09:26:55:
69:51:b5:43:d1:12:34:a3:b4:4a:16:5f:e1:b6:d5:
ff:2e:95:5b:19:5f:70:a3:c7:61:8a:14:6f:30:99:
c3:5b:57:53:d9:80:bb:a3:bd:25:48:c9:7e:2d:f5:
1e:ac:99:e2:a0:69:e2:2f:f9:6d:7b:6e:ee:c6:7b:
f5:e8:cc:f2:be:33:2d:50:e4:0b:fa:0a:36:1b:58:
17:9d:c1:3d:6b:a4:0c:96:fb:2b:8a:cc:55:67:7b:
df:c4:fd:25:b2:86:97:98:29:ae:f5:58:4f:4b:35:
9c:c5:93:00:83:f3:57:de:7e:da:b5:84:fb:bd:62:
a1:a9:90:23:a0:ef:52:3b:5b:ca:c0:07:c2:13:d8:
b4:43:b7:93:fd:22:6b:cb:47:31:ab:fc:6f:1e:0f:
23:25:37:c4:b5:7b:20:c0:ec:19:07:6e:fb:ca:71:
d3:f3:ef:6b:bf:3c:47:e0:a1:56:18:9a:f4:9d:f1:
a1:cf:46:26:44:d6:3f:ee:12:14:c4:e1:94:fb:8d:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:41:D2:CB:87:D1:32:A1:38:2B:73:0A:AD:4D:4C:49:A9:66:C7
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/pcJB0suH0TKhOCtzCq1NTEmpZsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5f:df:c5:59:d4:d8:23:21:81:77:fa:d2:a4:7c:70:29:bc:
39:45:a4:be:07:16:bd:17:96:c7:45:87:cb:4e:46:ba:b9:96:
9b:c3:63:e1:77:0e:91:8f:8f:af:5f:2e:2b:60:e0:c0:3e:37:
63:98:24:66:ae:e0:6b:13:46:cf:4e:43:e5:a6:cf:9a:97:ef:
83:93:30:7e:a2:86:89:c1:67:d4:32:76:11:7d:ce:3d:84:87:
29:ed:9b:82:c6:3b:f3:e5:82:17:6a:ef:93:dc:97:e5:5d:2e:
e5:a2:95:da:df:61:37:0e:94:a3:d8:11:6c:0c:26:4d:bb:17:
c9:e9:43:1e:07:ea:27:a6:00:1d:21:07:c6:78:57:f0:6b:eb:
f1:37:a3:6b:aa:42:be:a8:c0:34:97:47:19:99:47:89:c7:33:
da:3a:68:5b:a3:ed:38:43:6c:7c:53:86:58:b7:41:08:e8:b1:
d7:07:57:2d:84:53:cd:5a:c8:63:d2:3a:b9:7f:b7:9d:c6:36:
38:9f:04:0c:d3:83:e9:a8:a4:2b:78:25:4b:fc:c8:93:ef:cf:
16:b4:9e:ff:e9:fd:ed:50:24:b2:90:ce:bf:0f:64:b4:b7:d0:
f7:ce:de:7d:33:56:d0:2a:d9:4d:16:89:9e:c2:d9:b6:66:53:
b0:27:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:19 2026 by rpki-client