Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PtNML8xJ_jFZPxnV2lqLtSDCFn8.roa
File: PtNML8xJ_jFZPxnV2lqLtSDCFn8.roa (raw, json)
Hash identifier: EB+NHBqMUvr6t8spOf/F72JWFVSB07T1ZUCQ+pBA3JY=
Subject key identifier: 3E:D3:4C:2F:CC:49:FE:31:59:3F:19:D5:DA:5A:8B:B5:20:C2:16:7F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019D666C6BEFE50863100E59657E2CB6CDB7
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PtNML8xJ_jFZPxnV2lqLtSDCFn8.roa
Signing time: Tue 07 Apr 2026 05:31:14 +0000
ROA not before: Tue 07 Apr 2026 05:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:63c0::/29 maxlen: 29
2a10:3e80::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
2a13:be40::/32 maxlen: 32
2a13:be41::/32 maxlen: 32
2a13:be42::/32 maxlen: 32
2a13:be44::/32 maxlen: 32
2a13:be45::/32 maxlen: 32
2a13:be46::/32 maxlen: 32
2a13:be47::/32 maxlen: 32
2a13:bec0::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:6c:6b:ef:e5:08:63:10:0e:59:65:7e:2c:b6:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 7 05:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ed34c2fcc49fe31593f19d5da5a8bb520c2167f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:63:ac:8b:91:5d:67:72:93:c4:03:54:2a:
a5:8f:c4:a3:6c:09:3c:a2:29:ac:d0:1a:e9:25:e9:
a8:a0:22:10:b8:32:55:df:c1:51:29:06:ee:a4:75:
b5:82:cc:7a:81:83:91:2d:cf:ef:9c:ff:a1:0c:c9:
ca:3d:98:c6:f2:2b:1c:bb:5a:b1:39:84:e6:ed:db:
15:93:76:7e:9b:64:26:1e:78:2b:89:71:2d:e2:4e:
89:e3:c9:ca:87:f3:d8:c7:58:1d:7b:5a:c8:2b:77:
02:2e:bb:58:32:b7:17:b0:fc:8e:55:18:70:6e:5b:
64:49:4f:93:5b:e9:c3:18:8b:38:d5:d6:bf:ab:67:
be:55:63:6b:e4:14:9c:69:a7:4c:bb:72:42:d1:92:
a2:fd:8b:e9:f2:18:a8:46:33:6f:75:a2:39:00:19:
99:f0:c0:36:2d:6a:a6:e3:20:1e:84:a9:f7:48:1c:
e1:65:ed:08:63:1d:f3:43:5b:ef:3e:66:e2:8e:3b:
5b:c8:12:5b:24:f0:1f:70:d8:62:8c:e5:25:f8:cb:
71:39:a6:e6:bb:04:7c:ac:33:fd:2f:a2:05:8f:1d:
bc:bf:90:bc:69:40:12:a2:3b:2e:49:75:86:49:15:
dc:fe:e9:55:45:a6:fb:ae:f4:b6:da:ae:d6:fa:30:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:4C:2F:CC:49:FE:31:59:3F:19:D5:DA:5A:8B:B5:20:C2:16:7F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/PtNML8xJ_jFZPxnV2lqLtSDCFn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
2a10:3e80::/29
2a10:7ac0::/29
2a10:a9c0::/29
2a13:5040::/29
2a13:be40::-2a13:be42:ffff:ffff:ffff:ffff:ffff:ffff
2a13:be44::/30
2a13:bec0::/29
2a13:d0c0::/29
2a13:d140::/29
Signature Algorithm: sha256WithRSAEncryption
96:2d:12:82:dd:40:90:36:83:2e:9c:f7:fd:51:d6:07:88:ba:
31:9e:ac:ac:e5:18:17:48:a0:5a:0c:5e:ad:22:bd:6e:7e:3c:
eb:c2:86:99:5b:df:07:76:c1:c5:f7:de:de:cb:81:68:71:36:
a2:b6:94:b5:40:e7:c7:da:ef:93:9b:a4:17:3f:24:9d:96:d4:
28:96:8d:8b:2a:11:98:22:54:f3:d5:68:d1:35:8b:6c:e2:60:
e3:21:b6:06:9a:4f:4b:1f:9e:26:cc:03:b8:8e:ad:2f:64:51:
d8:7c:19:2a:25:15:32:09:8a:94:ff:f6:38:d7:93:42:57:ef:
3f:76:72:72:94:03:18:5f:c8:65:17:14:8e:1f:98:25:b0:8a:
7a:1e:48:16:d6:c0:6f:da:7b:34:75:b4:55:d4:f3:cb:82:02:
0e:f3:ee:a4:ba:6e:60:c3:d3:79:95:a5:95:d8:77:33:0c:df:
8b:6a:49:9f:34:73:40:e7:cf:6d:9a:26:f3:ca:3a:90:5f:8f:
3b:27:3d:f7:73:53:6a:4c:c5:70:71:57:5a:ba:cb:1a:36:64:
4e:b4:0b:54:81:68:86:60:55:a3:d2:7f:bb:c3:3d:87:c8:5d:
8a:e8:bc:48:2e:82:10:a3:e8:f9:75:0e:f6:f3:f4:e7:81:f0:
c1:7a:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client