Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/PEeTD_e7dx7hFW1iLQ3ew6gIz8o.roa
File: PEeTD_e7dx7hFW1iLQ3ew6gIz8o.roa (raw, json)
Hash identifier: xJeio4jJjkE/7n1b6jV6Ukt36my2r5pZGhpD2SpLuTk=
Subject key identifier: 3C:47:93:0F:F7:BB:77:1E:E1:15:6D:62:2D:0D:DE:C3:A8:08:CF:CA
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0816AE53BB237965615D3B9427050978C
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/PEeTD_e7dx7hFW1iLQ3ew6gIz8o.roa
Signing time: Tue 08 Sep 2026 14:27:41 +0000
ROA not before: Tue 08 Sep 2026 14:27:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31463
IP address blocks: 37.209.208.0/20 maxlen: 20
45.140.136.0/22 maxlen: 22
46.245.248.0/21 maxlen: 21
79.99.64.0/21 maxlen: 21
94.228.32.0/20 maxlen: 20
94.228.38.0/24 maxlen: 24
109.74.20.0/22 maxlen: 22
178.17.32.0/20 maxlen: 20
178.17.36.0/24 maxlen: 24
178.17.39.0/24 maxlen: 24
178.251.32.0/21 maxlen: 21
185.4.128.0/22 maxlen: 22
185.34.208.0/22 maxlen: 22
185.160.164.0/22 maxlen: 22
185.167.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6a:e5:3b:b2:37:96:56:15:d3:b9:42:70:50:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:27:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c47930ff7bb771ee1156d622d0ddec3a808cfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:3b:55:2b:58:03:4e:59:49:51:24:70:35:
5e:cb:ae:3c:0f:c4:33:4a:f8:db:35:6d:e8:c5:d9:
95:3d:9d:ba:74:6c:4f:11:2b:8b:ca:2c:f6:0e:bb:
62:bf:f3:c0:53:2c:4f:3f:99:d0:a1:ab:1f:f1:25:
95:cd:51:08:77:f9:e9:21:72:97:38:eb:18:b2:d3:
56:0a:30:b8:c1:bd:8a:1d:48:1e:57:e9:26:73:b3:
1e:e5:fb:90:85:dd:e0:bf:16:00:10:61:59:7d:40:
4c:60:03:f9:04:9b:89:02:da:9d:32:63:63:93:b8:
f2:77:ac:9e:74:19:8b:1c:3b:4d:f7:79:6e:e3:fd:
e1:40:16:c6:3a:a1:57:29:9a:98:c1:38:ec:20:e1:
1e:10:92:2c:fc:8b:9a:fe:4f:f4:74:aa:25:fa:32:
86:3c:4c:2f:1e:6d:be:ad:e9:46:64:f3:a7:aa:33:
dc:b2:b2:55:88:64:9b:0f:93:7a:77:d5:e2:8e:cb:
bb:02:36:02:ee:40:f5:0a:e4:96:47:f7:be:2c:44:
53:67:af:ca:58:d5:0b:8e:6f:9d:91:e4:b4:c1:00:
6a:8c:c5:2f:97:7b:0b:53:94:85:5a:37:7b:79:fb:
49:a6:0e:10:e4:12:c9:0e:33:42:61:30:d1:f8:59:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:93:0F:F7:BB:77:1E:E1:15:6D:62:2D:0D:DE:C3:A8:08:CF:CA
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/PEeTD_e7dx7hFW1iLQ3ew6gIz8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.208.0/20
45.140.136.0/22
46.245.248.0/21
79.99.64.0/21
94.228.32.0/20
109.74.20.0/22
178.17.32.0/20
178.251.32.0/21
185.4.128.0/22
185.34.208.0/22
185.160.164.0/22
185.167.228.0/22
Signature Algorithm: sha256WithRSAEncryption
01:12:b9:2c:58:98:bf:5d:e7:4d:36:17:8f:8b:9c:9a:0e:7c:
82:dd:c4:a0:15:93:1d:0b:bc:f9:da:87:dc:2b:fe:70:10:aa:
2f:ee:bd:c9:26:85:b1:e0:de:39:9d:c5:83:a6:ce:72:47:7e:
48:92:5d:3b:5c:79:b8:25:1a:61:10:55:94:7a:97:0b:3c:65:
4f:be:17:21:a2:2b:8d:24:fb:d8:e7:80:e2:d5:4a:8b:39:86:
f9:f7:33:1e:ef:74:26:bf:1a:3f:34:a0:d3:49:d8:ca:7a:51:
40:71:a6:3d:64:ad:c8:cb:4a:af:95:b3:b5:1c:e6:29:b7:38:
b0:f0:3b:bb:72:2c:bc:e4:31:f5:8d:93:cd:c3:ea:90:33:ee:
65:d7:bf:e7:f1:bf:8c:2f:b6:21:ba:e1:94:bb:aa:e7:c2:09:
05:c2:96:74:6e:73:eb:5f:2d:cb:43:03:4e:b9:93:5b:b7:72:
03:88:9d:8e:db:45:20:20:cf:7c:ee:39:b1:ca:d4:86:60:ca:
ba:21:92:47:4c:cc:bb:ec:45:56:bf:d7:73:ed:79:24:35:0e:
a8:71:85:1a:b3:27:52:72:45:7b:8f:96:bf:f2:28:79:d1:21:
f6:bf:23:1e:be:e7:0e:30:4b:82:02:2e:91:0b:50:4b:df:40:
91:a8:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:58 2026 by rpki-client