Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/PVwPhYKLtJ1NqdIeINS1i-PMklo.roa
File: PVwPhYKLtJ1NqdIeINS1i-PMklo.roa (raw, json)
Hash identifier: LLpYJpjoR2ZiSBq/lFV1+fNxk1oL13m8O/kJtCUEbxo=
Subject key identifier: 3D:5C:0F:85:82:8B:B4:9D:4D:A9:D2:1E:20:D4:B5:8B:E3:CC:92:5A
Certificate issuer: /CN=e07e0fed6878b990a06095898a1d906a474df75d
Certificate serial: 019F2368BF416FF48C10BF7841B82C351654
Authority key identifier: E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/PVwPhYKLtJ1NqdIeINS1i-PMklo.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15600
IP address blocks: 37.35.112.0/21 maxlen: 24
46.255.168.0/21 maxlen: 24
77.239.32.0/19 maxlen: 24
185.74.112.0/22 maxlen: 22
2a00:d420::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:41:6f:f4:8c:10:bf:78:41:b8:2c:35:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e0fed6878b990a06095898a1d906a474df75d
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d5c0f85828bb49d4da9d21e20d4b58be3cc925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:13:23:64:e1:da:2e:db:bb:b5:e1:98:5c:
54:e5:82:1b:41:be:bf:d2:b5:8d:3f:a2:ce:17:19:
3d:ff:ec:93:f3:51:a4:eb:02:a8:82:2b:39:c9:89:
bf:b6:27:c8:be:74:99:5d:26:8d:48:25:47:81:44:
c8:6f:3b:d7:3f:a3:cb:90:78:71:ec:f8:4f:a5:bd:
db:69:7c:d3:21:c2:36:b9:9e:9b:b0:64:61:b3:7b:
ae:e0:54:ad:00:87:66:a9:7e:0b:10:3f:ab:3f:44:
6b:46:a7:da:34:f6:c8:e3:7d:c6:06:78:a8:a0:4a:
37:34:49:96:94:1e:5b:64:44:e9:a9:91:82:2f:c9:
4f:67:e9:c5:92:ef:0c:31:e8:c2:9b:75:ea:17:fa:
97:a9:e3:a2:b9:43:88:62:5f:a6:87:26:c9:f1:74:
75:9a:28:4e:bd:4c:4f:81:68:24:3b:62:ee:b0:3a:
f1:ac:85:61:59:f2:d3:73:b6:fd:d0:8e:b3:ea:cb:
7a:e0:aa:c5:08:4a:f0:88:e2:ed:d2:a6:2a:a2:ab:
58:68:89:ee:92:97:9f:b5:2e:81:b7:4f:62:06:69:
12:bd:1c:36:19:b9:ec:e6:c1:e5:70:71:cf:4f:d0:
b5:ee:01:56:35:4c:25:e5:17:d0:1f:16:11:a0:1e:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:0F:85:82:8B:B4:9D:4D:A9:D2:1E:20:D4:B5:8B:E3:CC:92:5A
X509v3 Authority Key Identifier:
keyid:E0:7E:0F:ED:68:78:B9:90:A0:60:95:89:8A:1D:90:6A:47:4D:F7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4P7Wh4uZCgYJWJih2QakdN910.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/PVwPhYKLtJ1NqdIeINS1i-PMklo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/4H4P7Wh4uZCgYJWJih2QakdN910.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.112.0/21
46.255.168.0/21
77.239.32.0/19
185.74.112.0/22
IPv6:
2a00:d420::/29
Signature Algorithm: sha256WithRSAEncryption
3e:2a:fb:4c:ad:90:43:1a:14:41:64:52:92:f3:dc:c7:21:03:
ba:65:0d:06:13:ca:c3:4b:a8:80:87:01:7d:fd:96:71:13:7c:
87:8d:2b:57:78:ce:da:ae:07:ba:92:37:e8:14:f6:c0:32:21:
45:b7:d9:df:ad:03:2e:f4:d2:79:70:14:e7:5d:db:00:b5:2f:
eb:46:20:b0:5d:3a:ee:91:94:61:50:01:19:c6:e0:cb:82:71:
79:9d:48:76:f5:fa:3c:f6:ef:cc:c8:bc:d5:45:bc:f8:24:64:
69:44:e4:0f:0d:79:cf:a2:c0:70:d7:a8:e9:3b:5e:b4:ca:65:
ea:f7:c5:dd:c7:b4:54:d3:ee:a1:6b:d2:f6:0e:c6:a0:77:c3:
c3:18:a8:c6:7e:6a:73:36:b7:d9:33:c1:76:3e:d4:94:30:3d:
87:c3:30:c2:e8:1a:aa:44:5a:3a:47:cf:97:0c:8d:50:7d:75:
55:1e:e5:b5:5e:1e:31:62:04:60:2c:fb:95:cb:7d:ca:0c:f2:
20:40:02:0b:b4:4d:39:1a:57:c9:1b:ed:9d:8a:6a:4c:65:17:
d5:86:59:77:0f:95:d8:f5:e6:68:fd:3a:3d:bd:d2:2b:76:83:
56:22:69:98:e5:9a:03:f8:4c:f4:d8:81:49:00:3e:58:8a:43:
d4:2b:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:15 2026 by rpki-client