Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/Pe6pU1w1-3oImrUTYMsg2-RDUvc.roa
File: Pe6pU1w1-3oImrUTYMsg2-RDUvc.roa (raw, json)
Hash identifier: PDX4kEdLxscaSnuFTHs+iMM3oSNxgA0DBzG4z7rglco=
Subject key identifier: 3D:EE:A9:53:5C:35:FB:7A:08:9A:B5:13:60:CB:20:DB:E4:43:52:F7
Certificate issuer: /CN=ddb2f866b3794972120dd8a53665d3d0fb120bba
Certificate serial: 01A0B37383864A7556C5FDDA453B9CF4A803
Authority key identifier: DD:B2:F8:66:B3:79:49:72:12:0D:D8:A5:36:65:D3:D0:FB:12:0B:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bL4ZrN5SXISDdilNmXT0PsSC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/Pe6pU1w1-3oImrUTYMsg2-RDUvc.roa
Signing time: Fri 18 Sep 2026 07:38:07 +0000
ROA not before: Fri 18 Sep 2026 07:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8192
IP address blocks: 185.153.120.0/22 maxlen: 22
185.153.123.0/24 maxlen: 24
195.66.192.0/20 maxlen: 20
195.66.192.0/24 maxlen: 24
195.66.193.0/24 maxlen: 24
195.66.194.0/24 maxlen: 24
195.66.195.0/24 maxlen: 24
195.66.196.0/24 maxlen: 24
195.66.197.0/24 maxlen: 24
195.66.198.0/24 maxlen: 24
195.66.199.0/24 maxlen: 24
195.66.200.0/24 maxlen: 24
195.66.201.0/24 maxlen: 24
195.66.202.0/24 maxlen: 24
195.66.203.0/24 maxlen: 24
195.66.204.0/24 maxlen: 24
195.66.205.0/24 maxlen: 24
195.66.206.0/24 maxlen: 24
195.66.207.0/24 maxlen: 24
195.66.208.0/24 maxlen: 24
195.66.209.0/24 maxlen: 24
195.66.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/3bL4ZrN5SXISDdilNmXT0PsSC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/3bL4ZrN5SXISDdilNmXT0PsSC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bL4ZrN5SXISDdilNmXT0PsSC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:73:83:86:4a:75:56:c5:fd:da:45:3b:9c:f4:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb2f866b3794972120dd8a53665d3d0fb120bba
Validity
Not Before: Sep 18 07:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3deea9535c35fb7a089ab51360cb20dbe44352f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:b8:40:fb:61:a2:25:13:d0:4b:ce:6d:43:
b0:00:2c:4e:17:22:62:ad:00:40:fa:b5:f4:ee:59:
8d:22:97:31:c9:3c:bc:98:a3:67:df:56:b3:0e:64:
e4:e5:d1:c4:23:05:7c:a7:92:7b:8b:df:74:de:f7:
2e:b8:20:8f:cd:f3:b3:7b:b5:64:cc:6c:1f:c4:c5:
08:19:31:bf:f7:17:a0:e7:57:18:67:0a:e6:2a:cf:
53:a3:68:88:d2:26:e8:be:f6:2c:72:25:cb:b1:1f:
f4:28:1f:cc:40:34:1b:17:36:2e:63:14:a7:6d:23:
bd:df:93:f9:98:fa:21:69:4a:9a:29:49:e2:ce:2a:
d5:ab:39:85:bd:ec:56:6a:72:88:eb:56:06:02:2b:
ab:05:9d:95:74:47:c0:7c:31:1c:eb:9d:31:7b:82:
c2:8a:9f:80:ff:bc:82:a0:90:89:f9:d3:71:51:a5:
6a:65:be:75:d3:90:b6:fe:b4:b6:a2:1a:13:81:f9:
e0:98:1d:69:1a:4c:d0:3f:4b:22:b3:f2:70:18:b2:
e4:c1:96:04:98:2b:94:6a:69:cd:90:f6:54:dd:bc:
e2:cb:de:10:6d:39:53:bb:f5:65:b7:d7:da:b4:6c:
f8:25:39:7a:f6:c0:52:b3:32:a6:94:fc:ec:7c:e0:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:A9:53:5C:35:FB:7A:08:9A:B5:13:60:CB:20:DB:E4:43:52:F7
X509v3 Authority Key Identifier:
keyid:DD:B2:F8:66:B3:79:49:72:12:0D:D8:A5:36:65:D3:D0:FB:12:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bL4ZrN5SXISDdilNmXT0PsSC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/Pe6pU1w1-3oImrUTYMsg2-RDUvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/180b08-01e4-4b74-b98e-4e57ebf82351/1/3bL4ZrN5SXISDdilNmXT0PsSC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.120.0/22
195.66.192.0-195.66.209.255
195.66.211.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4c:01:19:80:55:18:a5:62:ac:aa:2c:4c:89:24:e7:e2:ea:
06:3f:d1:25:a3:8a:eb:69:e2:95:36:df:c1:26:c8:71:f4:6c:
ac:8f:84:0d:43:3c:7b:ba:e2:b5:3f:d9:8d:08:84:bb:66:a0:
fa:67:63:83:68:65:fc:0e:a0:e4:fe:4f:50:c7:f9:5c:80:0a:
83:0f:62:ad:08:35:31:32:74:44:44:dc:52:dd:21:95:c1:94:
fe:03:a1:48:f4:22:1c:f8:1e:90:31:9c:6f:e1:fb:cf:ce:e5:
ef:6a:a6:d6:d2:2b:0f:58:d4:2a:31:65:c0:ab:e1:ba:a5:3e:
0a:3f:58:a3:cc:4c:69:3e:84:33:a9:b7:71:4e:c8:0e:c2:75:
85:c1:90:30:5d:a6:51:bb:55:55:28:c2:b3:9d:e8:f4:e2:b2:
98:40:f3:25:96:61:34:9c:03:2c:a4:27:f7:90:d7:13:1d:18:
7e:e6:5c:a9:b4:b0:33:04:6a:be:63:4a:65:0c:6b:50:2c:5c:
d5:a5:93:9e:04:8e:88:4c:bd:ee:89:04:14:a1:6a:e6:ae:96:
cd:72:60:31:c8:9a:4c:0c:e4:50:83:a3:bc:c7:97:8a:62:ae:
b6:b5:1c:e4:0d:0d:35:c9:83:88:c9:42:63:93:20:75:75:37:
22:73:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:21:34 2026 by rpki-client