Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/PSyjanuhqC4f8PoeId-FNS3SNIo.roa
File: PSyjanuhqC4f8PoeId-FNS3SNIo.roa (raw, json)
Hash identifier: vXnguE1OuAVVzynxYiMUKXKD0YQ4Gbcmn/CdRYPzOQI=
Subject key identifier: 3D:2C:A3:6A:7B:A1:A8:2E:1F:F0:FA:1E:21:DF:85:35:2D:D2:34:8A
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 019F899CAC9D7878137EB2EE7C75684AC4F5
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/PSyjanuhqC4f8PoeId-FNS3SNIo.roa
Signing time: Wed 22 Jul 2026 11:36:14 +0000
ROA not before: Wed 22 Jul 2026 11:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48631
IP address blocks: 194.62.140.0/24 maxlen: 24
194.62.141.0/24 maxlen: 24
194.62.142.0/24 maxlen: 24
194.62.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:9c:ac:9d:78:78:13:7e:b2:ee:7c:75:68:4a:c4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Jul 22 11:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d2ca36a7ba1a82e1ff0fa1e21df85352dd2348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:ed:b3:a1:45:9a:a3:ea:21:49:46:b4:1f:
a5:99:82:a2:17:3c:f4:ba:73:0c:d9:ba:46:2e:58:
11:03:b8:c1:df:3f:3c:44:69:b9:f1:9f:c3:28:6c:
9d:21:bd:cf:48:9e:b9:92:71:4c:7b:bc:f6:70:8d:
be:ba:4e:80:a2:f2:9b:c6:dd:f1:ca:24:ee:3f:e6:
99:f9:9e:8e:d3:9f:19:a6:97:69:e9:02:9a:cb:c8:
8a:5d:6f:e6:fa:a1:d9:6d:b8:05:4c:e9:ec:fe:b7:
8c:4d:2d:8d:64:c5:8a:86:ce:61:43:9a:8d:7c:1a:
d9:b2:65:db:5f:a9:2c:41:82:5b:cc:59:b5:f8:cb:
6e:84:e7:50:7b:4c:36:2e:96:b1:b6:90:66:75:06:
99:31:0a:cd:14:ee:a3:38:36:02:26:51:ed:8c:b5:
59:a3:1e:5e:87:1b:0f:87:84:ac:c1:92:ab:dd:ec:
2d:b9:8c:bd:8a:bb:ed:4e:e4:f6:01:da:f7:fc:08:
95:75:04:1a:fa:94:c6:09:04:7e:bb:8d:aa:37:87:
5d:32:82:0f:e9:c8:66:c9:6f:fa:00:66:af:f7:d8:
22:5f:df:42:ed:eb:8f:36:be:cd:86:d8:f9:af:47:
b2:48:7c:06:54:0b:ef:86:1f:52:a8:b0:79:6f:60:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:A3:6A:7B:A1:A8:2E:1F:F0:FA:1E:21:DF:85:35:2D:D2:34:8A
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/PSyjanuhqC4f8PoeId-FNS3SNIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:15:4f:0c:4c:41:1f:3f:38:71:04:3a:ec:c1:de:5e:ef:5f:
aa:fc:59:d5:17:63:60:90:eb:35:ab:80:d1:a7:86:0d:97:6c:
09:79:bc:36:2a:e1:e9:b6:d1:cc:b2:db:eb:e6:1e:25:02:c2:
11:c7:a3:4c:fe:04:28:10:7a:d2:11:f0:a2:54:e1:21:4f:46:
46:b0:96:04:a3:37:69:68:77:cf:ce:dc:e5:c7:a8:4d:f4:10:
12:7e:c1:67:e1:23:db:5b:20:1c:4a:19:6d:fc:cc:fe:74:e2:
64:fa:f9:79:7b:ef:63:57:af:74:f6:68:a4:34:20:4b:16:1e:
90:a1:65:0c:16:5b:3b:ef:c0:17:fc:5f:c1:e8:0c:cc:cd:81:
e8:65:c0:c1:f6:23:f1:fc:39:15:7b:89:d1:50:a5:ef:fc:d5:
9d:ef:02:26:e2:2a:95:32:9b:86:fc:37:e5:2d:46:99:bf:61:
a3:59:7b:88:6e:35:26:ac:ba:2b:b6:b6:f7:12:a7:a7:c9:04:
68:ea:c6:be:79:ba:37:15:4e:c8:f8:1e:83:22:18:81:bf:d7:
49:92:ea:65:8d:66:cd:15:e3:cf:87:1b:e1:f7:a6:db:b8:97:
4c:7d:c3:bd:8b:c0:dc:b0:b5:67:02:56:50:5a:19:23:ba:ef:
01:28:4d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:45 2026 by rpki-client