Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/PjutDNcnf0-pCrPBS3o-WeLEEL0.roa
File: PjutDNcnf0-pCrPBS3o-WeLEEL0.roa (raw, json)
Hash identifier: nyVKuZZILTmSEcUhYctUTmIM3CUOnBhopRsoQeoc5ns=
Subject key identifier: 3E:3B:AD:0C:D7:27:7F:4F:A9:0A:B3:C1:4B:7A:3E:59:E2:C4:10:BD
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 01A048EF8850038E8EF6598A36F9626985F5
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/PjutDNcnf0-pCrPBS3o-WeLEEL0.roa
Signing time: Fri 28 Aug 2026 15:14:12 +0000
ROA not before: Fri 28 Aug 2026 15:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 138.124.157.0/24 maxlen: 24
185.254.12.0/24 maxlen: 24
185.254.13.0/24 maxlen: 24
199.74.189.0/24 maxlen: 24
199.74.191.0/24 maxlen: 24
2a0b:1880::/29 maxlen: 29
2a0b:1880:16::/48 maxlen: 48
2a0b:1880:17::/48 maxlen: 48
2a0b:1880:19::/48 maxlen: 48
2a0b:1880:1a::/48 maxlen: 48
2a0b:1880:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:ef:88:50:03:8e:8e:f6:59:8a:36:f9:62:69:85:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Aug 28 15:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e3bad0cd7277f4fa90ab3c14b7a3e59e2c410bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:90:f0:68:67:7f:45:74:05:e5:2b:0d:04:
a2:83:da:4a:2a:ef:7f:33:dc:ca:79:ed:80:fa:0d:
54:00:01:fe:c0:cd:57:15:5d:c6:cf:0a:61:7e:f6:
a0:dd:88:4e:be:15:bb:54:73:ef:73:a4:87:0e:aa:
86:7b:d4:38:0c:b6:b0:0a:f9:fd:70:a0:df:d4:51:
3a:06:9e:aa:fa:cc:3e:82:c2:e7:ec:4d:ec:b0:7b:
d7:ee:44:55:2e:cc:3a:f6:3c:dd:74:9a:2f:c4:af:
47:24:35:79:af:8a:12:96:04:1d:0d:0b:d1:3c:67:
9d:cb:b8:1f:2e:c3:ea:ae:60:b7:c2:5d:c4:4c:b1:
7e:f4:51:57:cc:14:87:19:1e:ed:2b:38:40:fd:5a:
61:7f:7d:b5:e9:56:24:6d:42:5c:69:9e:24:16:7b:
0e:3a:19:be:01:a4:8e:1e:01:c2:6e:03:56:64:cf:
80:6c:ea:ed:9c:6d:f5:48:88:e9:dc:5e:6e:44:0c:
ca:9f:0c:47:d5:78:50:18:42:b1:12:d6:37:d5:85:
9c:c2:f0:8c:0c:b0:ba:f7:81:5b:3f:3a:f2:c8:7e:
1e:7d:6d:49:a2:90:31:0e:25:f9:87:49:74:71:62:
16:0f:aa:f6:83:78:3a:09:f1:9a:0c:16:94:b9:38:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:AD:0C:D7:27:7F:4F:A9:0A:B3:C1:4B:7A:3E:59:E2:C4:10:BD
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/PjutDNcnf0-pCrPBS3o-WeLEEL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.157.0/24
185.254.12.0/23
199.74.189.0/24
199.74.191.0/24
IPv6:
2a0b:1880::/29
Signature Algorithm: sha256WithRSAEncryption
c2:62:73:2b:f0:ad:8f:45:95:05:ad:ed:e1:7c:21:4b:f7:b9:
52:86:2e:5f:b4:c6:ae:ad:c8:18:3b:3d:c1:ea:dd:85:e1:01:
04:91:13:83:cd:6b:75:6f:fb:57:e8:84:2b:29:7c:a0:41:95:
cc:e6:77:6a:14:ac:e6:d8:7a:bd:e8:fb:e7:d8:bf:32:97:36:
58:7a:9c:33:34:ca:8e:fd:30:bc:c3:c3:1d:0b:64:03:f0:06:
36:d3:f8:1e:a4:e4:82:f7:f2:f5:79:4c:21:c9:92:d6:29:cd:
16:e1:4b:12:06:31:3d:09:ca:8f:b4:db:6d:d5:e9:a6:31:a9:
9a:80:59:37:5f:62:8e:d9:27:00:a0:4b:83:34:7f:d5:ea:d8:
88:68:1e:86:71:ba:0f:d6:9f:d0:11:9d:42:21:39:06:22:49:
c6:01:3f:6f:49:5d:a3:3d:0b:03:f7:ce:cc:8f:1a:27:08:86:
45:da:7f:75:c5:20:21:fb:41:ee:61:26:05:31:db:d8:12:db:
a1:18:8e:ea:2f:97:f0:ea:74:a1:8d:17:21:23:c6:46:f4:c5:
22:c4:d0:fb:de:eb:0f:63:67:40:1a:e2:e8:21:8c:a8:a9:3f:
36:d1:b3:31:fd:2e:4c:e5:15:0e:dd:e9:84:e2:64:bf:22:6c:
db:0f:1a:12
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaBI74hQA46O9lmKNvliaYX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjYwODI4MTUxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTNiYWQwY2Q3Mjc3ZjRmYTkwYWIzYzE0YjdhM2U1OWUyYzQxMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aeQ8Ghnf0V0BeUrDQSig9pKKu9/
M9zKee2A+g1UAAH+wM1XFV3Gzwphfvag3YhOvhW7VHPvc6SHDqqGe9Q4DLawCvn9
cKDf1FE6Bp6q+sw+gsLn7E3ssHvX7kRVLsw69jzddJovxK9HJDV5r4oSlgQdDQvR
PGedy7gfLsPqrmC3wl3ETLF+9FFXzBSHGR7tKzhA/Vphf3216VYkbUJcaZ4kFnsO
Ohm+AaSOHgHCbgNWZM+AbOrtnG31SIjp3F5uRAzKnwxH1XhQGEKxEtY31YWcwvCM
DLC694FbPzryyH4efW1JopAxDiX5h0l0cWIWD6r2g3g6CfGaDBaUuTgzVQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFD47rQzXJ39PqQqzwUt6PlnixBC9MB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvUGp1dEROY25mMC1wQ3JQQlMzby1XZUxFRUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAinydAwQB
uf4MAwQAx0q9AwQAx0q/MA0EAgACMAcDBQMqCxiAMA0GCSqGSIb3DQEBCwUAA4IB
AQDCYnMr8K2PRZUFre3hfCFL97lShi5ftMaurcgYOz3B6t2F4QEEkRODzWt1b/tX
6IQrKXygQZXM5ndqFKzm2Hq96Pvn2L8ylzZYepwzNMqO/TC8w8MdC2QD8AY20/ge
pOSC9/L1eUwhyZLWKc0W4UsSBjE9CcqPtNtt1emmMamagFk3X2KO2ScAoEuDNH/V
6tiIaB6GcboP1p/QEZ1CITkGIknGAT9vSV2jPQsD987MjxonCIZF2n91xSAh+0Hu
YSYFMdvYEtuhGI7qL5fw6nShjRchI8ZG9MUixND73usPY2dAGuLoIYyoqT820bMx
/S5M5RUO3emE4mS/ImzbDxoS
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:49:42 2026 by rpki-client