Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PTAee9YwvL9G2IYl9K9jxRW9x3w.roa
File: PTAee9YwvL9G2IYl9K9jxRW9x3w.roa (raw, json)
Hash identifier: plfncgrs2QgSVlKWjFNa8h82ruP32UawkEYm1jh/a+8=
Subject key identifier: 3D:30:1E:7B:D6:30:BC:BF:46:D8:86:25:F4:AF:63:C5:15:BD:C7:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC6BE6D87EF58438BE099EE461B3A8DFA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PTAee9YwvL9G2IYl9K9jxRW9x3w.roa
Signing time: Mon 03 Aug 2026 08:29:56 +0000
ROA not before: Mon 03 Aug 2026 08:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:be:6d:87:ef:58:43:8b:e0:99:ee:46:1b:3a:8d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 08:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d301e7bd630bcbf46d88625f4af63c515bdc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:72:0c:b3:3f:85:74:c8:73:eb:59:7b:e2:
15:33:0b:20:f7:a7:23:ae:fc:54:19:47:58:55:26:
80:05:83:b6:c1:0f:63:c1:82:68:cd:38:e7:52:61:
be:6d:ec:cf:d5:85:f4:48:bd:fb:06:d4:98:fb:f5:
52:9e:17:62:8c:be:96:c6:dd:08:f9:27:fa:37:2b:
0e:30:0a:b5:01:9c:ae:a1:1b:77:28:53:f8:20:52:
23:04:0b:a3:5d:54:19:cf:46:72:f0:ee:c0:44:19:
11:91:49:95:27:7a:b0:ea:d3:22:4c:12:da:54:03:
9a:7e:86:b7:b4:89:c6:b0:40:9c:98:3b:4c:de:e0:
91:11:53:8d:d2:f1:bd:b1:fa:57:a7:ab:86:d6:e5:
dc:ba:a0:96:66:ed:95:5e:3f:4e:81:a7:ec:38:2b:
fb:85:ad:d6:6a:dc:b1:d6:fa:2a:69:c0:65:df:34:
92:53:5c:41:a5:1a:59:10:be:52:40:12:75:60:b6:
6d:9f:98:33:49:7e:f6:7f:39:88:3b:f6:9a:72:6c:
19:0e:e3:25:b0:e9:3b:c7:6e:b9:3e:e1:fa:28:b4:
af:e3:0d:4f:ad:6c:ae:45:b8:a8:cd:f1:95:5e:0e:
1e:32:d3:5a:65:0f:53:78:8c:84:be:57:c5:b5:9a:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:1E:7B:D6:30:BC:BF:46:D8:86:25:F4:AF:63:C5:15:BD:C7:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PTAee9YwvL9G2IYl9K9jxRW9x3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cd:de:84:dd:44:77:93:e8:37:84:20:4b:1c:7e:c2:8e:06:
22:25:3d:d9:b8:e8:6e:e6:55:62:c4:6c:80:d3:e2:94:7e:39:
99:fb:b1:23:53:c5:7c:be:e0:83:84:a6:1c:f5:24:ba:2a:71:
e0:ea:43:bb:bc:13:14:8d:ba:de:24:1c:66:51:d1:76:8e:b1:
76:c4:0b:92:22:f2:ea:1c:e3:f3:47:59:1e:bf:ae:70:08:5f:
50:6b:a0:05:ed:8f:54:05:55:3a:12:44:26:1c:a7:95:fa:9e:
04:d6:53:43:6d:82:50:99:3d:0d:f2:b7:c7:00:fd:76:2d:79:
27:87:70:69:6d:18:45:ee:8a:ae:e0:35:8a:30:36:58:06:91:
c9:99:64:96:7c:df:1e:15:e1:63:6d:f3:77:6a:fd:0b:b1:97:
64:ca:e7:79:f2:62:e7:63:46:78:18:fc:c6:51:aa:44:96:d5:
f9:0c:7f:ec:23:1d:83:9c:13:c2:e8:db:d7:f6:f1:31:15:8d:
bf:8e:d0:22:ad:7f:ff:77:87:72:30:a3:b5:4d:48:85:9a:3d:
6f:6a:68:c5:19:d1:ac:82:5f:95:63:9e:f7:4a:66:13:2d:72:
2c:d7:74:eb:83:21:86:7f:36:8f:31:7e:f7:95:98:07:3f:3a:
3c:35:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:46:43 2026 by rpki-client