Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/P-rcMMO_fjyH9-5FPxKDVsKq-mE.roa
File: P-rcMMO_fjyH9-5FPxKDVsKq-mE.roa (raw, json)
Hash identifier: fPAhnWMlIRT551H6V2P9EY40pk+kisQBtU5rWAsMZe4=
Subject key identifier: 3F:EA:DC:30:C3:BF:7E:3C:87:F7:EE:45:3F:12:83:56:C2:AA:FA:61
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019DB37A5D3284934543BF0171098C3C8A46
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/P-rcMMO_fjyH9-5FPxKDVsKq-mE.roa
Signing time: Wed 22 Apr 2026 04:37:14 +0000
ROA not before: Wed 22 Apr 2026 04:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211071
IP address blocks: 2a11:b44:c000::/48 maxlen: 48
2a11:b44:c001::/48 maxlen: 48
2a11:b44:c002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:7a:5d:32:84:93:45:43:bf:01:71:09:8c:3c:8a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Apr 22 04:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3feadc30c3bf7e3c87f7ee453f128356c2aafa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:b6:f7:23:32:79:5a:91:a1:7e:98:a8:ff:
c4:a5:1a:a4:9e:fc:23:e0:1e:96:fb:8b:82:88:be:
39:b9:08:4f:63:9c:d5:87:13:4b:40:44:4e:e1:3e:
06:16:d8:39:50:c3:13:5d:10:92:a8:c8:1d:ee:43:
3b:5d:35:ec:50:bc:df:b2:30:f8:4e:f3:2b:87:21:
00:6f:e3:41:8d:47:0d:55:4c:95:15:7c:6b:b2:ab:
f3:35:7c:9f:12:83:c2:96:d5:44:49:db:29:35:c9:
92:02:e0:4c:23:bc:ea:b7:a4:39:af:a6:7a:03:46:
ed:83:54:14:6b:97:84:1e:40:0d:2c:fa:21:fa:41:
c8:9d:f0:f9:5c:89:79:43:51:76:05:2a:61:97:5a:
c1:45:b1:1a:23:63:5d:2e:cb:0c:cc:5a:80:e1:19:
26:77:50:2f:20:1f:99:b1:83:91:05:82:5a:52:65:
43:e6:cd:09:79:e6:83:0b:8c:70:e7:db:db:17:95:
bd:0c:25:dc:21:db:66:85:c0:b5:bc:3b:20:12:9c:
87:8c:e1:18:d7:30:fb:4a:7d:7f:1d:7a:6f:1e:f5:
55:d3:cd:49:f6:12:77:13:47:4e:c6:14:96:d8:73:
3d:78:d5:ac:88:6d:2e:1b:c9:03:aa:ce:39:69:10:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:DC:30:C3:BF:7E:3C:87:F7:EE:45:3F:12:83:56:C2:AA:FA:61
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/P-rcMMO_fjyH9-5FPxKDVsKq-mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b44:c000::-2a11:b44:c002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:bb:be:cf:01:05:2b:6c:d0:41:10:a5:20:14:12:24:e1:8a:
0a:e9:f5:b2:8d:51:b5:36:76:17:7c:86:ab:e6:ad:5f:88:8c:
9c:54:02:c3:ca:7e:c1:50:f2:20:49:34:91:35:1d:81:a9:0b:
76:2f:86:3a:43:85:6d:fe:d0:8d:b7:06:bc:3b:db:7d:13:d4:
e4:1c:50:89:00:df:54:a1:a7:95:88:58:ac:71:1e:01:d4:b2:
35:6b:53:9c:d0:99:87:41:b0:f2:40:be:53:e0:26:42:8a:99:
67:da:c1:b2:45:07:ac:4f:3c:9f:fe:6c:06:7d:1c:78:83:59:
5a:cb:5a:b0:fc:8a:9e:15:16:b2:1f:24:e4:86:0d:7b:f9:54:
f8:7a:97:79:72:07:be:3e:6a:43:dd:d4:5b:08:3d:55:37:c3:
03:62:f4:ce:b1:57:af:1f:97:76:a9:52:d8:9f:7f:b4:ac:c7:
eb:58:c0:fe:c2:73:9b:c8:dd:e0:87:ea:cd:75:b3:eb:a2:0a:
27:08:41:19:3f:33:cb:0d:18:95:77:07:29:c9:7b:45:d3:e3:
6d:ed:1a:42:c4:66:2e:a6:cf:fc:5b:03:83:a3:54:c0:ae:5c:
32:13:5d:28:05:f6:f6:c0:8f:13:42:0c:f3:18:4d:cd:9b:b9:
31:32:84:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ2zel0yhJNFQ78BcQmMPIpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTNkYTM1ODJhMjI4MzBlYzRlNjc1NDdlNzVmYTNiOWRh
MjBiMjMwHhcNMjYwNDIyMDQzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmVhZGMzMGMzYmY3ZTNjODdmN2VlNDUzZjEyODM1NmMyYWFmYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBi29yMyeVqRoX6YqP/EpRqknvwj
4B6W+4uCiL45uQhPY5zVhxNLQERO4T4GFtg5UMMTXRCSqMgd7kM7XTXsULzfsjD4
TvMrhyEAb+NBjUcNVUyVFXxrsqvzNXyfEoPCltVESdspNcmSAuBMI7zqt6Q5r6Z6
A0btg1QUa5eEHkANLPoh+kHInfD5XIl5Q1F2BSphl1rBRbEaI2NdLssMzFqA4Rkm
d1AvIB+ZsYORBYJaUmVD5s0JeeaDC4xw59vbF5W9DCXcIdtmhcC1vDsgEpyHjOEY
1zD7Sn1/HXpvHvVV081J9hJ3E0dOxhSW2HM9eNWsiG0uG8kDqs45aRBl1QIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFD/q3DDDv348h/fuRT8Sg1bCqvphMB8GA1UdIwQY
MBaAFMvj2jWCoigw7E5nVH51+judogsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUt
NmUzNmIyZjE3MDZiLzEvUC1yY01NT19manlIOS01RlB4S0RWc0txLW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82OGNmYzUtMmVjNi00YjU5LWIxMmUtNmUzNmIyZjE3MDZi
LzEveS1QYU5ZS2lLRERzVG1kVWZuWDZPNTJpQ3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgYqEQtE
wAMHACoRC0TAAjANBgkqhkiG9w0BAQsFAAOCAQEAT7u+zwEFK2zQQRClIBQSJOGK
Cun1so1RtTZ2F3yGq+atX4iMnFQCw8p+wVDyIEk0kTUdgakLdi+GOkOFbf7QjbcG
vDvbfRPU5BxQiQDfVKGnlYhYrHEeAdSyNWtTnNCZh0Gw8kC+U+AmQoqZZ9rBskUH
rE88n/5sBn0ceINZWstasPyKnhUWsh8k5IYNe/lU+HqXeXIHvj5qQ93UWwg9VTfD
A2L0zrFXrx+XdqlS2J9/tKzH61jA/sJzm8jd4IfqzXWz66IKJwhBGT8zyw0YlXcH
Kcl7RdPjbe0aQsRmLqbP/FsDg6NUwK5cMhNdKAX29sCPE0IM8xhNzZu5MTKE3A==
-----END CERTIFICATE-----
Generated at Wed May 13 06:19:44 2026 by rpki-client