Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/PKjsey5cBzrl0JWfe47IqGPiYsc.roa
File: PKjsey5cBzrl0JWfe47IqGPiYsc.roa (raw, json)
Hash identifier: hiWbQtDMwP7B1PYRdCuidEbqA+Byx4L5VqAKRcbQ+DU=
Subject key identifier: 3C:A8:EC:7B:2E:5C:07:3A:E5:D0:95:9F:7B:8E:C8:A8:63:E2:62:C7
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019DF8068DE76CA0F204EDCE49735D8BD698
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/PKjsey5cBzrl0JWfe47IqGPiYsc.roa
Signing time: Tue 05 May 2026 12:04:32 +0000
ROA not before: Tue 05 May 2026 12:04:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210064
IP address blocks: 91.219.116.0/24 maxlen: 24
2a14:f680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:06:8d:e7:6c:a0:f2:04:ed:ce:49:73:5d:8b:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: May 5 12:04:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ca8ec7b2e5c073ae5d0959f7b8ec8a863e262c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:0c:e1:04:60:35:a4:71:31:4d:34:99:1f:
71:58:5a:75:e2:fa:af:ae:0e:d3:e2:29:ee:db:c7:
03:c9:0b:85:3a:d4:4f:1a:62:c0:7f:77:03:65:71:
7f:c5:78:2d:5a:66:95:4e:7d:ab:fd:ca:53:15:a7:
04:c2:d0:34:6d:97:bc:08:40:2f:d4:71:43:58:82:
13:93:47:83:6f:66:fb:04:bc:02:cc:8f:64:35:ac:
93:7f:17:96:a1:df:e6:4f:8c:7a:73:63:46:61:72:
53:4d:55:1c:d2:cc:cd:e2:9d:d0:37:54:8e:9e:a1:
0b:39:93:d6:42:50:e7:37:c4:bd:01:49:8b:8d:7f:
19:3c:ef:23:33:c7:32:ff:3c:8b:c6:6b:a8:29:d5:
30:40:06:6c:11:72:87:09:e2:e8:14:ea:c4:31:e7:
39:5b:25:f0:81:c8:4d:21:b3:37:34:9a:a7:0f:32:
e4:9f:a7:01:2f:ac:d3:62:d6:38:64:cb:d1:99:2e:
b8:9e:9e:b3:1b:fa:ff:f3:f3:e1:df:3e:3d:18:42:
2b:2b:90:a3:e3:36:e8:dd:79:7b:f5:fd:7c:b3:20:
38:05:c4:f2:f2:d1:48:c4:14:12:f6:c2:aa:28:95:
d4:30:d7:83:58:77:3f:dc:52:22:9f:33:31:22:f6:
5e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:EC:7B:2E:5C:07:3A:E5:D0:95:9F:7B:8E:C8:A8:63:E2:62:C7
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/PKjsey5cBzrl0JWfe47IqGPiYsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.116.0/24
IPv6:
2a14:f680::/29
Signature Algorithm: sha256WithRSAEncryption
19:e7:ce:f1:09:cc:6b:f7:b1:61:64:e1:29:62:e8:4d:41:4a:
ad:a1:98:3b:c6:de:ae:c5:2c:f4:98:61:2a:ff:aa:13:74:af:
9a:35:14:a1:6b:10:94:0b:ea:61:10:35:7c:66:1f:8f:78:eb:
a5:bb:ee:cc:46:b1:50:a1:20:c7:4b:55:a5:fa:8d:8b:80:4e:
11:d8:de:c9:7d:11:b6:a2:ca:b3:a6:8a:7d:c6:c8:a3:cd:54:
02:70:34:b1:3f:f9:2c:da:1b:1a:bb:1d:7b:d6:6f:2a:ea:01:
3d:c8:69:24:76:6c:ef:cf:27:6e:12:4e:94:a5:c5:71:cc:96:
20:45:31:d3:d8:86:08:04:62:8b:4c:84:f3:8d:8d:84:54:f0:
17:44:56:fb:3b:05:b4:b1:d5:f8:14:63:59:bc:4e:74:70:94:
8a:b9:e6:e5:0f:27:6f:57:e4:64:28:02:e2:ab:42:17:90:15:
4e:4b:8a:18:58:04:58:0b:36:ac:fc:ee:83:cb:b1:64:88:b4:
eb:81:a2:e5:ca:a8:d9:61:da:c2:39:4b:c9:34:cb:32:40:a0:
d3:ee:f7:b2:31:88:a7:04:a1:ef:62:37:f9:b9:d4:71:bf:3a:
2d:ad:49:47:c7:28:90:10:ae:23:bb:9e:98:f4:1e:38:a0:ce:
12:90:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:41 2026 by rpki-client