Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/pjNNqrlFdBEk-5LXIPaA2yAX9II.roa
File: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (raw, json)
Hash identifier: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=
Subject key identifier: A6:33:4D:AA:B9:45:74:11:24:FB:92:D7:20:F6:80:DB:20:17:F4:82
Certificate issuer: /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial: 019F23687489B89C903742AB6A4303F8E171
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/pjNNqrlFdBEk-5LXIPaA2yAX9II.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15600
IP address blocks: 94.16.128.0/17 maxlen: 24
185.74.160.0/22 maxlen: 22
2a00:9fe0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:89:b8:9c:90:37:42:ab:6a:43:03:f8:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6334daab945741124fb92d720f680db2017f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:5d:62:fc:67:26:88:8a:99:b1:f9:cd:61:
4a:13:e8:0e:d6:2d:67:35:d2:ed:0c:4c:40:ed:8b:
2c:6b:df:e5:4a:04:91:24:e4:30:db:78:7f:fd:73:
56:1c:e0:4d:c0:5d:24:d8:18:46:58:c6:9f:b8:22:
5c:86:4a:d1:96:55:6f:a8:ef:85:ae:3e:d5:4f:a7:
e0:f5:02:7b:8b:ce:b8:1f:8a:67:bb:72:2c:02:02:
89:bd:3a:27:f4:16:c6:a1:2b:be:03:98:e4:51:5f:
c2:69:9b:3d:0d:a4:73:56:ff:51:f1:3d:b3:a8:82:
12:fb:ff:e5:fb:4b:e4:7b:f6:49:c5:6d:bd:73:57:
29:1b:89:f3:98:c8:d8:e8:1f:69:5d:68:be:c5:b6:
cb:da:ad:5d:6c:4a:a6:3e:c6:d9:79:cc:d1:25:b6:
b3:00:ae:95:c7:02:61:28:b6:b8:a6:66:aa:6c:6b:
81:a3:ae:9c:86:a9:72:3a:5c:96:8b:9a:54:ec:63:
d2:02:4b:66:93:a5:b0:37:45:06:b9:f6:31:ec:f6:
ee:3f:29:d4:93:d8:c8:82:bb:20:95:a5:53:68:a8:
36:78:89:26:29:c4:42:ab:fd:f3:17:c5:28:41:77:
d8:7d:fc:5d:32:4b:cd:42:54:a1:f8:36:f0:d5:fc:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:33:4D:AA:B9:45:74:11:24:FB:92:D7:20:F6:80:DB:20:17:F4:82
X509v3 Authority Key Identifier:
keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/pjNNqrlFdBEk-5LXIPaA2yAX9II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.16.128.0/17
185.74.160.0/22
IPv6:
2a00:9fe0::/29
Signature Algorithm: sha256WithRSAEncryption
53:30:aa:9b:d8:1a:f1:f1:4e:85:20:08:cb:7b:5d:9c:8d:7e:
13:67:67:c5:db:03:e4:77:9a:59:18:c8:b5:ee:6b:ac:1c:20:
65:33:ed:6d:62:35:97:bc:82:86:81:55:a4:40:3a:d4:16:5b:
b3:55:83:38:a2:84:43:8d:43:a5:f3:43:6d:92:ec:c9:69:37:
9c:7e:54:41:ac:c9:a7:84:0d:ab:a2:80:1b:7d:39:7a:6c:e5:
52:63:21:e0:7d:78:34:ae:98:dc:48:63:85:b9:c6:dd:2c:66:
e8:17:fc:42:3b:9b:32:6a:8a:70:5d:fc:92:39:0a:da:73:14:
5c:3b:b3:91:96:c8:c3:8f:63:ae:b0:6a:4d:af:cf:93:2e:88:
ee:fb:82:d7:b5:51:80:db:ab:d1:48:0a:38:12:7d:56:25:fe:
a8:6a:25:45:fa:d5:02:b5:1f:53:ab:63:c8:3d:92:1f:38:42:
1c:87:7c:cf:3f:3a:9a:69:a0:a9:c4:b1:ef:fc:7a:f3:bd:da:
33:b1:86:58:59:80:2f:6f:6b:37:8d:08:36:f0:94:e4:d7:e4:
be:2f:4c:0d:12:ec:b6:d3:da:f8:92:a4:15:94:55:6c:28:d1:
f4:a1:8c:83:c3:c4:ce:85:10:18:d6:b1:a8:fb:fe:c6:e7:07:
60:c0:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:53 2026 by rpki-client