Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa
File: pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa (raw, json)
Hash identifier: N796Zom1skp7/3+RCtSYa/r7JVVy/XIYs8YxWI+wUD8=
Subject key identifier: A4:20:17:9D:E8:DB:38:E2:69:EE:6E:72:14:F9:BC:54:FC:1F:D1:4C
Certificate issuer: /CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Certificate serial: 019CC217365F05758AC9BCF724CD6014E467
Authority key identifier: ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa
Signing time: Fri 06 Mar 2026 07:40:26 +0000
ROA not before: Fri 06 Mar 2026 07:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43626
IP address blocks: 91.195.84.0/23 maxlen: 24
91.195.84.0/24 maxlen: 24
91.195.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:17:36:5f:05:75:8a:c9:bc:f7:24:cd:60:14:e4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6a3127ed75acd24600db35a8f230e2f324ba0e
Validity
Not Before: Mar 6 07:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a420179de8db38e269ee6e7214f9bc54fc1fd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:75:2d:97:fe:56:1b:a3:93:41:ca:7b:dc:
a9:2a:ff:4b:1e:f4:f2:a7:ea:6c:b4:18:02:b3:ef:
7e:db:c2:26:59:6c:7e:72:b3:9f:b8:e5:ce:73:d1:
1a:df:64:af:37:57:f8:cf:41:9d:2d:0c:db:e9:b6:
c3:96:38:2e:89:8e:fc:61:ea:07:25:08:40:e1:56:
c9:4c:21:c4:de:04:86:b9:bc:84:99:3f:e2:9b:25:
d1:45:d7:3c:fe:d2:66:8a:f3:2e:5a:60:04:33:13:
47:ab:f4:8b:e9:b2:9a:b7:5d:01:70:e4:2f:46:41:
2e:71:6e:52:21:37:61:e7:d2:f3:21:1e:53:78:1c:
06:5b:a3:47:04:4f:54:d6:e5:c7:ce:0a:fa:e8:55:
35:7d:b5:d2:b4:29:0f:9d:28:78:c5:8b:f4:bb:0f:
37:15:5f:bc:2c:95:75:f2:0d:b9:42:e9:9c:38:47:
29:74:3b:d9:f6:79:c3:e6:48:2d:46:6b:c0:c6:cf:
03:41:38:c2:10:52:05:df:aa:50:a5:70:5e:08:7e:
67:75:8d:76:bc:5e:8c:78:6d:70:4b:a6:30:22:bd:
10:86:77:62:16:a3:a0:aa:d7:b5:67:d8:91:bb:3b:
78:9f:f6:d5:00:06:05:41:c6:21:3b:ea:70:04:97:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:17:9D:E8:DB:38:E2:69:EE:6E:72:14:F9:BC:54:FC:1F:D1:4C
X509v3 Authority Key Identifier:
keyid:ED:6A:31:27:ED:75:AC:D2:46:00:DB:35:A8:F2:30:E2:F3:24:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WoxJ-11rNJGANs1qPIw4vMkug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/pCAXnejbOOJp7m5yFPm8VPwf0Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3e0703-f253-48e1-89a4-2dc6030c6ff2/1/7WoxJ-11rNJGANs1qPIw4vMkug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.84.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:43:1a:e4:b7:22:f1:08:8b:ca:da:43:8c:81:e0:02:0a:3a:
c7:6e:27:44:a7:a5:d3:2e:36:f6:77:9a:27:26:37:04:e9:ef:
85:75:4f:6b:9d:3a:d3:43:4f:61:ab:48:97:2e:bc:ed:79:2e:
b3:bd:34:ce:7e:b8:d2:81:f5:db:20:15:91:7f:eb:a8:a0:09:
3f:c4:1b:1f:85:15:70:b4:13:d6:61:4f:b9:39:6f:73:e2:4b:
b5:5d:3b:77:3f:f0:d5:6d:39:54:9a:07:87:65:97:2a:f1:0d:
9f:2b:63:1d:70:dc:8b:38:ad:30:53:3d:2e:f0:3d:ab:f4:c7:
90:c2:a2:a0:aa:65:39:2c:15:6b:2b:70:7b:2c:f7:26:2a:5e:
e4:77:b0:71:87:fe:05:a0:1d:ca:b8:f5:39:e1:e5:ff:e0:77:
7d:44:0c:db:8e:06:d8:e8:01:4d:21:b9:6a:26:08:4c:66:0f:
32:79:e6:a8:da:13:8d:58:64:8c:52:e4:9c:11:79:84:41:08:
90:5a:eb:16:94:d7:09:a3:7d:b4:97:e1:aa:d1:84:d9:b0:48:
b2:74:c9:b6:ee:ae:96:14:60:01:13:d5:ab:5c:65:a5:a8:30:
d9:37:46:15:e0:a7:74:97:7c:43:11:3a:27:54:c7:97:96:18:
76:2f:d0:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzCFzZfBXWKybz3JM1gFORnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmEzMTI3ZWQ3NWFjZDI0NjAwZGIzNWE4ZjIzMGUyZjMy
NGJhMGUwHhcNMjYwMzA2MDc0MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDIwMTc5ZGU4ZGIzOGUyNjllZTZlNzIxNGY5YmM1NGZjMWZkMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y11LZf+Vhujk0HKe9ypKv9LHvTy
p+pstBgCs+9+28ImWWx+crOfuOXOc9Ea32SvN1f4z0GdLQzb6bbDljguiY78YeoH
JQhA4VbJTCHE3gSGubyEmT/imyXRRdc8/tJmivMuWmAEMxNHq/SL6bKat10BcOQv
RkEucW5SITdh59LzIR5TeBwGW6NHBE9U1uXHzgr66FU1fbXStCkPnSh4xYv0uw83
FV+8LJV18g25QumcOEcpdDvZ9nnD5kgtRmvAxs8DQTjCEFIF36pQpXBeCH5ndY12
vF6MeG1wS6YwIr0QhndiFqOgqte1Z9iRuzt4n/bVAAYFQcYhO+pwBJe9UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQgF53o2zjiae5uchT5vFT8H9FMMB8GA1UdIwQY
MBaAFO1qMSftdazSRgDbNajyMOLzJLoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dveEotMTFyTkpHQU5zMXFQSXc0dk1rdWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZTA3MDMtZjI1My00OGUxLTg5YTQt
MmRjNjAzMGM2ZmYyLzEvcENBWG5lamJPT0pwN201eUZQbThWUHdmMFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZTA3MDMtZjI1My00OGUxLTg5YTQtMmRjNjAzMGM2ZmYy
LzEvN1dveEotMTFyTkpHQU5zMXFQSXc0dk1rdWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8NUMA0G
CSqGSIb3DQEBCwUAA4IBAQCOQxrktyLxCIvK2kOMgeACCjrHbidEp6XTLjb2d5on
JjcE6e+FdU9rnTrTQ09hq0iXLrzteS6zvTTOfrjSgfXbIBWRf+uooAk/xBsfhRVw
tBPWYU+5OW9z4ku1XTt3P/DVbTlUmgeHZZcq8Q2fK2MdcNyLOK0wUz0u8D2r9MeQ
wqKgqmU5LBVrK3B7LPcmKl7kd7Bxh/4FoB3KuPU54eX/4Hd9RAzbjgbY6AFNIblq
JghMZg8yeeao2hONWGSMUuScEXmEQQiQWusWlNcJo320l+Gq0YTZsEiydMm27q6W
FGABE9WrXGWlqDDZN0YV4Kd0l3xDETonVMeXlhh2L9Cs
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:54 2026 by rpki-client