Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa
File: PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa (raw, json)
Hash identifier: jz0AWqz5TrCrCZOL8S5rk8ZUwf9/3LQqBKen3hyQ+JU=
Subject key identifier: 3C:50:04:B2:EF:DE:D1:3A:00:C1:EA:99:FE:56:0E:28:13:3B:8C:C6
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 019F2368D51F2021EE8A8FE9427B25744CAD
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43016
IP address blocks: 146.66.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:1f:20:21:ee:8a:8f:e9:42:7b:25:74:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c5004b2efded13a00c1ea99fe560e28133b8cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:f5:79:0e:84:52:46:62:8a:b9:4b:57:6e:
94:3a:0d:61:f5:68:45:d0:71:29:6e:2b:f7:d4:17:
49:2b:06:27:15:af:1e:ab:8f:82:ad:db:d0:14:ac:
39:90:52:3b:1b:d8:36:c3:f2:5f:3a:e0:b7:d5:5c:
a3:b5:32:ee:4c:09:57:db:82:87:ac:e3:37:e9:c7:
0f:49:db:34:c4:47:df:8d:10:56:1e:7e:d0:22:68:
5e:a7:24:a4:21:b6:7b:17:5b:a4:4c:de:75:4b:97:
99:c6:51:4e:36:91:91:a2:0f:d9:f3:9b:ac:b5:6b:
9f:ba:03:b3:c5:84:ec:b4:b6:4c:93:c0:f0:a6:e9:
3a:4b:32:19:08:01:32:7f:8a:f0:ef:d2:83:e1:9b:
f9:9c:ea:25:51:21:9b:68:45:98:43:f7:21:61:df:
27:1a:9d:f8:f0:d4:e0:12:31:9b:4f:44:c2:32:ed:
b7:63:dd:39:ad:1c:2c:ad:2e:e6:72:0b:0c:00:84:
f3:e9:30:da:9e:6e:2c:59:80:ca:a5:3b:09:a7:13:
a6:dd:a1:1c:9c:f5:80:49:90:d9:3b:cd:c8:c6:dd:
63:cb:1c:d4:1d:ab:1b:e3:c3:38:a8:31:2a:4a:81:
45:e1:53:cd:16:b0:3c:6b:b4:39:5a:83:54:c8:c0:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:04:B2:EF:DE:D1:3A:00:C1:EA:99:FE:56:0E:28:13:3B:8C:C6
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/PFAEsu_e0ToAweqZ_lYOKBM7jMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:61:c5:15:0b:a6:7a:74:a5:11:45:ac:a0:fb:c2:fb:5a:79:
0c:39:8e:ca:66:97:40:9b:5b:da:3b:e7:f5:4b:04:38:13:39:
67:0a:6a:28:97:76:b1:ef:4b:54:cc:1c:01:f4:63:23:2a:75:
21:b2:cd:60:f8:5f:12:17:34:48:25:bb:52:ac:69:1a:a1:55:
27:bb:61:8a:b3:9b:cf:f1:3c:f3:59:d4:3e:a8:46:de:5e:eb:
71:a9:99:fd:0b:a0:1b:89:f0:7f:d6:03:c0:1d:23:e3:89:2e:
ef:7f:a9:38:e9:81:ed:49:f8:de:e2:8d:eb:24:4c:21:a0:b1:
eb:b3:bb:5f:cb:ff:36:c1:b3:3f:de:2e:68:18:13:bf:9f:16:
4d:8a:ab:02:f9:2b:13:64:5f:fe:55:4c:ae:ca:2c:9f:c1:fc:
32:ec:ad:4f:f5:8f:dc:6d:7b:d4:65:09:4b:46:fc:d6:02:f1:
fa:4d:18:3d:a6:de:be:4a:31:b8:61:c9:35:29:96:8e:a4:4a:
ae:14:de:f0:a9:b9:16:6f:db:97:5a:3b:cc:2c:f5:94:b0:fc:
fd:70:f3:68:c7:b8:c4:53:15:5f:fe:7e:3f:f7:4e:8a:d5:13:
6a:c6:e8:a7:7e:88:16:cd:d9:e4:c1:fd:49:52:b4:87:d5:e9:
a8:59:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:44 2026 by rpki-client