Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa
File: Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa (raw, json)
Hash identifier: FQiPrpYnq25Fwdf/7qCgVXoo0TWP2gIi2ykHBjIvx7g=
Subject key identifier: 3E:1F:DF:C9:95:D7:10:0F:CA:66:4A:B7:77:14:91:9B:8E:9F:F8:A0
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01A080DDE3883A061124EFAA02EBEF1A4919
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa
Signing time: Tue 08 Sep 2026 11:53:40 +0000
ROA not before: Tue 08 Sep 2026 11:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48729
IP address blocks: 194.147.115.0/24 maxlen: 24
194.147.148.0/24 maxlen: 24
194.147.149.0/24 maxlen: 24
2a0f:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:dd:e3:88:3a:06:11:24:ef:aa:02:eb:ef:1a:49:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Sep 8 11:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e1fdfc995d7100fca664ab77714919b8e9ff8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:35:3c:79:7e:0d:cd:e2:9d:41:ef:bc:d0:
84:7d:3a:a6:b0:5c:1e:75:22:fa:1d:12:31:16:67:
5b:c9:4a:84:df:8a:cc:66:f8:96:7b:22:fe:d7:49:
fe:4f:fe:32:db:02:1f:ed:ec:12:11:c6:3f:89:94:
49:07:a3:89:03:86:09:77:5f:fa:8c:85:a3:21:10:
e2:89:1e:fc:23:c0:13:a5:6a:2c:2e:20:5a:f5:70:
ad:77:6c:03:64:dd:2d:3a:eb:e3:10:fd:a9:0a:45:
cf:04:f1:ec:a2:6a:17:55:ca:b0:4e:70:c6:20:5a:
fe:98:c1:86:a5:f9:8e:60:4e:59:73:7d:94:9b:19:
31:6c:b8:a9:c4:5b:17:ef:0d:05:ed:b5:b5:84:1a:
f7:57:91:00:e2:84:9c:a4:41:5a:35:a0:4a:94:a5:
8d:a9:85:25:a2:5e:ac:1a:db:54:ef:87:9d:6e:92:
92:8b:89:58:25:00:f9:33:75:1e:6f:7a:f3:40:c6:
d8:da:10:27:ef:1d:de:26:c7:79:ba:40:40:d3:c8:
bb:15:51:f6:4f:17:8f:b4:c0:8f:d8:13:93:ec:bf:
2a:8e:df:f7:6d:69:72:1f:4d:16:e6:b5:f8:bb:0b:
6d:bc:f6:92:c3:7d:3f:37:09:cd:d1:66:a2:26:19:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1F:DF:C9:95:D7:10:0F:CA:66:4A:B7:77:14:91:9B:8E:9F:F8:A0
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.115.0/24
194.147.148.0/23
IPv6:
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
92:e9:2c:20:5c:36:1d:f5:93:32:01:05:b7:17:57:78:b3:21:
55:80:03:d3:d9:e9:44:26:12:53:19:cf:13:ee:28:0f:cd:17:
89:a3:d4:8c:10:3f:5f:19:88:8e:60:d2:19:6f:e9:26:4c:11:
43:ee:88:79:e2:f9:4f:5c:4e:bb:2d:ea:e5:fb:ea:c3:e8:58:
a0:b3:ff:90:47:8a:1e:6c:8a:0f:df:66:94:32:75:10:ac:29:
9c:87:24:a5:c2:d7:5d:bb:96:bd:65:26:33:f9:36:47:99:d0:
76:d6:9a:b0:0b:3a:46:98:36:0a:ac:d7:70:1f:35:01:58:28:
e1:7f:2d:df:9a:74:6b:8c:48:ef:36:c8:d9:4d:78:55:09:6e:
13:8e:27:31:8f:de:74:e4:0d:8a:23:cd:d1:19:6a:60:b5:c0:
02:55:c1:d5:37:4f:e0:54:78:46:81:9d:5e:5e:09:46:4a:8b:
4a:be:f8:be:53:ea:16:31:a0:f8:15:c2:04:1b:47:dc:62:84:
f2:0e:b3:46:6d:af:f7:4a:38:b6:19:3b:a0:74:29:ff:ce:bd:
ff:0a:83:d4:08:64:c4:55:47:98:3a:b2:89:c9:53:50:a8:07:
02:03:17:ed:ba:3c:63:16:2d:63:bf:35:76:89:c7:88:a9:f0:
d3:cd:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:59 2026 by rpki-client