Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PBnOdbSszn3R3Ai-F60lZwqetB0.roa
File: PBnOdbSszn3R3Ai-F60lZwqetB0.roa (raw, json)
Hash identifier: zf64ABb91RDJVwdRYfqC+M3UBm3bmyOgQbNV5eJ0dEY=
Subject key identifier: 3C:19:CE:75:B4:AC:CE:7D:D1:DC:08:BE:17:AD:25:67:0A:9E:B4:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A138C3FF3F088442762502373B565C50D1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PBnOdbSszn3R3Ai-F60lZwqetB0.roa
Signing time: Wed 14 Oct 2026 04:55:31 +0000
ROA not before: Wed 14 Oct 2026 04:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201021
IP address blocks: 192.124.188.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
195.133.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c3:ff:3f:08:84:42:76:25:02:37:3b:56:5c:50:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 04:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c19ce75b4acce7dd1dc08be17ad25670a9eb41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:ab:d4:a1:2c:d9:3d:ab:1e:09:f6:b1:06:
7c:e4:48:98:23:18:2d:22:dd:92:56:96:1e:17:49:
92:f7:80:f4:92:a4:f3:de:77:ec:2e:71:5d:dc:02:
0b:0a:6a:84:91:3d:a8:06:73:59:82:49:81:c9:5d:
0b:e2:7b:c3:7d:cb:7a:ad:40:25:03:bc:1e:62:66:
00:cb:d0:c3:d7:2c:c9:39:4d:5d:67:ac:ac:8f:10:
90:b1:72:ed:ef:93:76:7d:55:03:15:e3:35:6e:66:
95:d9:41:5d:e8:d4:a6:3a:6c:08:c5:2e:f7:a1:03:
00:4e:58:76:be:71:73:68:5a:69:05:69:9f:80:0d:
37:f2:2e:3c:e2:fc:16:b9:c3:b8:9c:da:02:80:8c:
2a:6d:b3:62:a4:94:74:00:14:86:70:8f:ce:7d:8b:
64:7c:e1:4a:2b:c9:2c:99:1a:a6:24:85:04:1e:ce:
43:41:dd:07:33:d9:9f:1f:d0:3c:3f:e2:53:ce:ae:
31:d8:80:23:87:6f:0f:96:ee:43:ee:f5:7a:97:75:
7d:b7:9b:a1:0d:e0:2a:b0:b0:a8:92:22:e2:58:dc:
56:8a:55:68:47:8a:05:6b:33:8b:97:22:56:52:2d:
a0:31:85:59:1f:d8:bb:f6:0a:fe:0c:b6:2a:27:4c:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:CE:75:B4:AC:CE:7D:D1:DC:08:BE:17:AD:25:67:0A:9E:B4:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PBnOdbSszn3R3Ai-F60lZwqetB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
194.87.75.0/24
194.87.229.0/24
195.133.43.0/24
195.133.95.0/24
Signature Algorithm: sha256WithRSAEncryption
15:25:a7:37:ab:e5:af:a3:71:16:51:0a:79:fb:38:51:bc:a5:
12:10:8a:73:a4:e1:ca:e6:9a:44:a5:70:32:59:30:52:f4:1c:
b5:34:6d:71:9f:e3:2a:1b:88:cc:e9:15:32:38:52:1c:e8:ed:
22:71:3c:bc:6b:cf:5b:91:f9:55:84:5d:f8:09:26:85:f2:0d:
57:89:b7:1e:0b:df:f9:de:4c:01:68:23:3b:cb:b8:6d:28:77:
a7:57:cf:a6:00:78:bb:3b:24:22:a4:2e:89:66:d1:23:ba:81:
35:e1:71:3b:ce:ae:77:22:1e:1e:36:1f:d1:89:d8:ae:34:8d:
0a:e6:5f:c2:75:8a:77:2d:13:4b:83:42:32:6b:d1:07:8e:fa:
b9:fc:fe:05:f4:57:e7:5a:18:eb:f8:3e:fb:10:63:dd:3b:02:
ef:26:1c:59:39:d8:79:00:c1:89:1b:d1:50:e0:90:40:e0:3c:
21:72:5c:7e:82:8d:0e:6d:cd:2e:05:0e:eb:1f:1f:cb:5b:d5:
15:eb:bc:45:1c:0f:0a:44:fb:2c:0c:59:d7:75:a6:20:28:f0:
8e:ae:d5:97:5c:43:b7:d7:e2:0c:2b:98:36:a0:93:4a:e3:ff:
74:6c:e5:ec:fb:0e:b5:94:b0:cd:dc:fd:0e:1c:92:64:61:bb:
56:89:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:15 2026 by rpki-client