Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/PNSx2F53VIjde5rolz9OgH_inP4.roa
File: PNSx2F53VIjde5rolz9OgH_inP4.roa (raw, json)
Hash identifier: f/nO3XQOBkwo4NHR95+ZYxmXCgXwhLt6p1vvZdYDs0M=
Subject key identifier: 3C:D4:B1:D8:5E:77:54:88:DD:7B:9A:E8:97:3F:4E:80:7F:E2:9C:FE
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019DEC9435108B0FBDC840D6F00C78B4C9F4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/PNSx2F53VIjde5rolz9OgH_inP4.roa
Signing time: Sun 03 May 2026 06:43:49 +0000
ROA not before: Sun 03 May 2026 06:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:94:35:10:8b:0f:bd:c8:40:d6:f0:0c:78:b4:c9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 3 06:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cd4b1d85e775488dd7b9ae8973f4e807fe29cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:23:f0:b5:5f:38:2d:c1:44:98:11:98:4f:
82:08:7f:37:28:c3:f0:d4:d6:30:4c:a4:cf:85:9b:
71:79:cf:8b:c1:9d:ea:be:1c:b5:2e:d3:b6:b6:0f:
ed:c1:18:20:86:17:db:d4:e4:6a:7e:d6:c4:9c:b7:
80:46:3b:e9:6d:06:b8:93:61:c4:e3:af:0b:9e:2d:
06:ee:47:96:7b:21:cb:5d:a7:4e:18:4c:5d:13:b1:
d6:82:10:d9:53:16:81:83:37:93:44:e2:07:6b:cb:
c6:b4:52:c3:6d:21:30:5a:f7:ea:8a:d3:88:f5:b5:
55:0f:f0:a4:ca:d4:2f:36:f6:1c:03:74:4c:00:a8:
99:17:d4:12:1e:ee:f7:d1:4c:91:92:f5:8e:cc:3e:
a8:d1:ea:5d:a3:21:1c:9c:9f:17:46:ef:9d:0e:ae:
4c:c3:31:e2:f0:4a:e4:6e:52:87:81:77:1f:9b:10:
df:d7:48:fc:83:7e:11:92:b1:0a:3c:49:c1:ba:35:
96:66:f2:82:0a:ba:f9:0c:3e:5d:9c:a0:97:e5:5a:
a2:19:71:21:d3:c4:11:67:ee:e0:ba:21:15:fc:f5:
21:d7:f1:72:5d:33:a3:a8:7d:d2:4a:96:97:ea:b8:
a4:89:bd:e8:8a:05:2a:79:67:4c:6f:b5:f8:69:63:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D4:B1:D8:5E:77:54:88:DD:7B:9A:E8:97:3F:4E:80:7F:E2:9C:FE
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/PNSx2F53VIjde5rolz9OgH_inP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
85.133.220.0/24
Signature Algorithm: sha256WithRSAEncryption
90:56:ec:70:cf:1a:e6:a8:1a:f7:2e:18:a2:c6:cf:3f:43:aa:
ac:64:a8:e7:32:02:f7:22:f2:9d:a6:d9:a1:ce:58:9e:f8:c9:
4d:85:24:77:23:ab:e8:73:0c:95:c2:8f:52:8d:db:c2:64:94:
60:86:4e:1e:3c:1f:ac:79:a5:a1:51:ba:d2:f8:68:2f:04:c5:
13:34:87:ce:83:f4:7b:07:0e:63:30:b5:f5:d0:1c:fd:7d:6e:
01:9d:08:e0:d5:ab:75:dd:cd:74:e9:9d:70:a8:30:3c:1f:62:
65:ab:85:d7:46:ed:dd:99:03:5a:42:83:db:c0:ae:f0:d6:d2:
84:98:4c:9e:85:c7:6f:4e:0a:e0:8c:19:6a:46:9d:86:cd:51:
5a:d0:9e:ba:c8:b2:10:f6:1d:f7:75:0d:84:05:6e:da:2d:00:
ba:bb:5d:76:9a:74:ef:da:ba:aa:ee:47:db:77:54:ee:54:08:
97:b6:7f:ed:d3:1f:0d:b4:11:7f:e0:92:af:24:8a:5e:6e:d5:
ee:87:5f:9b:cb:3f:8a:62:97:f9:74:d6:1f:1f:ff:43:40:99:
b7:ea:f2:20:92:c3:d9:e4:ca:5a:41:b8:c6:3d:61:2f:01:09:
cd:ea:ed:74:47:87:f3:0e:b9:1c:fd:2c:f5:f8:29:84:1d:8d:
f6:b2:6a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:18 2026 by rpki-client