Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/E49_PkP793V5I4YZCHvag_165PI.roa
File: E49_PkP793V5I4YZCHvag_165PI.roa (raw, json)
Hash identifier: UXhuh1q1LOISHVBMZXe7sQENj99zD9a6dTROADJKZCI=
Subject key identifier: 13:8F:7F:3E:43:FB:F7:75:79:23:86:19:08:7B:DA:83:FD:7A:E4:F2
Certificate issuer: /CN=e360387485e8cf7958cec936357502ff46657319
Certificate serial: 019F2368A46D4829B645E91DDEC8967C9643
Authority key identifier: E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/E49_PkP793V5I4YZCHvag_165PI.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 185.125.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a4:6d:48:29:b6:45:e9:1d:de:c8:96:7c:96:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e360387485e8cf7958cec936357502ff46657319
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=138f7f3e43fbf77579238619087bda83fd7ae4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:32:81:ad:df:1d:bb:a2:73:f3:b6:5b:60:
20:02:76:25:0f:b5:43:0d:d9:ef:84:32:e6:79:d6:
b7:df:72:db:bb:88:f3:f5:08:3f:97:d7:98:45:5a:
3f:b1:3f:3a:29:fb:20:4a:85:8f:a1:f1:f1:e7:cb:
ee:c0:1d:e2:79:a8:be:c8:cc:b4:ca:b3:4c:88:8f:
3d:8e:d9:12:0e:95:be:f6:72:cb:79:06:e9:29:94:
95:da:ee:a9:be:f2:b7:7d:c3:cd:1f:cd:e7:85:da:
a7:84:dd:f2:8f:4e:76:51:85:ce:b9:04:dc:9f:32:
72:45:68:f7:a5:3f:6a:7c:0e:93:ab:0f:11:85:d1:
e6:de:1e:dd:30:bc:00:c1:e0:fd:fb:22:47:98:18:
dc:41:fe:88:00:d8:57:e5:d7:b1:28:af:f0:54:f7:
32:18:30:57:53:e9:0a:ab:eb:11:ae:52:10:59:07:
6a:d1:a5:20:e3:a9:b3:2d:69:43:f9:d8:f9:43:51:
bf:67:c7:0f:35:f9:cd:9a:cd:81:86:dc:ae:7d:95:
8c:fc:25:7b:4e:03:6d:6e:5f:e7:d3:36:a2:95:27:
60:ff:04:a3:1a:8f:0c:0b:91:8e:d1:29:c0:d7:c8:
6a:bc:7c:19:05:de:9a:70:0a:d0:7f:85:2e:27:06:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:7F:3E:43:FB:F7:75:79:23:86:19:08:7B:DA:83:FD:7A:E4:F2
X509v3 Authority Key Identifier:
keyid:E3:60:38:74:85:E8:CF:79:58:CE:C9:36:35:75:02:FF:46:65:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42A4dIXoz3lYzsk2NXUC_0Zlcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/E49_PkP793V5I4YZCHvag_165PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/42A4dIXoz3lYzsk2NXUC_0Zlcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
28:78:7f:72:20:92:69:28:db:a5:61:d1:07:db:ef:ab:5d:9a:
3a:62:ee:b3:5a:ac:11:18:09:6d:17:82:24:e8:27:42:a1:8c:
af:d3:d4:e1:60:00:4f:ad:c7:3d:b0:c5:e0:b9:f6:69:e8:4d:
63:bf:12:3d:dc:57:1b:5f:cd:20:ab:d5:ec:ae:34:95:fe:86:
81:4e:54:ec:24:df:b2:54:62:7b:cc:cc:e7:38:8f:70:ef:aa:
9b:9b:20:44:0f:6f:ba:e0:be:2e:66:81:f2:6b:29:38:3c:fe:
e5:f8:e8:77:4b:09:c3:48:bb:67:df:40:f5:dd:40:ea:2d:2e:
0d:3e:e9:c7:1c:2a:bd:ff:7b:e7:a2:e0:05:44:a7:59:5d:b6:
c2:b1:62:a2:66:6f:e4:70:30:81:a4:21:9f:03:e6:e3:81:84:
12:f7:31:37:d8:8d:10:e1:1e:80:24:b8:1a:0f:59:f1:a0:d1:
60:d9:52:59:4b:5e:cd:7b:3b:91:4a:c9:d6:04:8c:28:8f:5e:
82:1b:e8:43:05:2c:1b:fc:92:c1:51:8d:67:f4:5a:46:cc:c8:
ea:7b:22:4d:8d:72:b5:29:e6:58:cf:49:41:92:e3:3c:ff:bb:
60:b2:9e:0f:e1:72:e3:14:fd:a0:03:09:07:a1:90:78:f1:28:
ac:53:9d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKRtSCm2Rekd3siWfJZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNjAzODc0ODVlOGNmNzk1OGNlYzkzNjM1NzUwMmZmNDY2
NTczMTkwHhcNMjYwNzAyMTUxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzhmN2YzZTQzZmJmNzc1NzkyMzg2MTkwODdiZGE4M2ZkN2FlNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZUyga3fHbuic/O2W2AgAnYlD7VD
DdnvhDLmeda333Lbu4jz9Qg/l9eYRVo/sT86KfsgSoWPofHx58vuwB3ieai+yMy0
yrNMiI89jtkSDpW+9nLLeQbpKZSV2u6pvvK3fcPNH83nhdqnhN3yj052UYXOuQTc
nzJyRWj3pT9qfA6Tqw8RhdHm3h7dMLwAweD9+yJHmBjcQf6IANhX5dexKK/wVPcy
GDBXU+kKq+sRrlIQWQdq0aUg46mzLWlD+dj5Q1G/Z8cPNfnNms2BhtyufZWM/CV7
TgNtbl/n0zailSdg/wSjGo8MC5GO0SnA18hqvHwZBd6acArQf4UuJwbXiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOPfz5D+/d1eSOGGQh72oP9euTyMB8GA1UdIwQY
MBaAFONgOHSF6M95WM7JNjV1Av9GZXMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt
NmExN2UyMWNhNmM3LzEvRTQ5X1BrUDc5M1Y1STRZWkNIdmFnXzE2NVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3
LzEvNDJBNGRJWG96M2xZenNrMk5YVUNfMFpsY3hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX3sMA0G
CSqGSIb3DQEBCwUAA4IBAQAoeH9yIJJpKNulYdEH2++rXZo6Yu6zWqwRGAltF4Ik
6CdCoYyv09ThYABPrcc9sMXgufZp6E1jvxI93FcbX80gq9XsrjSV/oaBTlTsJN+y
VGJ7zMznOI9w76qbmyBED2+64L4uZoHyayk4PP7l+Oh3SwnDSLtn30D13UDqLS4N
PunHHCq9/3vnouAFRKdZXbbCsWKiZm/kcDCBpCGfA+bjgYQS9zE32I0Q4R6AJLga
D1nxoNFg2VJZS17NezuRSsnWBIwoj16CG+hDBSwb/JLBUY1n9FpGzMjqeyJNjXK1
KeZYz0lBkuM8/7tgsp4P4XLjFP2gAwkHoZB48SisU50A
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:14 2026 by rpki-client