Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/Pmyh4imTnw0NWXX_3yLDINvGWCk.roa
File: Pmyh4imTnw0NWXX_3yLDINvGWCk.roa (raw, json)
Hash identifier: QegoWgfiWcVE8E11dfbKes3Tm9kqwxOHdbl4ivPOgTE=
Subject key identifier: 3E:6C:A1:E2:29:93:9F:0D:0D:59:75:FF:DF:22:C3:20:DB:C6:58:29
Certificate issuer: /CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Certificate serial: 019F2369330173596366AF2D7F315B6A9CED
Authority key identifier: 0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/Pmyh4imTnw0NWXX_3yLDINvGWCk.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:33:01:73:59:63:66:af:2d:7f:31:5b:6a:9c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6ca1e229939f0d0d5975ffdf22c320dbc65829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:64:f8:8a:52:b6:c1:99:f3:c7:af:bd:ec:
bc:69:bc:fc:b2:e5:ca:71:88:e6:32:a9:e8:7d:e7:
78:c7:d4:57:7f:17:ce:45:49:a3:a3:be:86:ab:b1:
65:57:a1:72:f5:76:1d:8c:37:db:15:ba:22:4a:23:
cb:3a:e9:14:38:73:45:8b:d2:6e:c5:98:19:e3:44:
ee:12:dd:b7:53:47:e4:fa:60:1f:eb:4a:0c:33:aa:
f0:cf:35:6b:6d:22:48:d0:e1:84:00:d7:33:93:5b:
71:41:9e:3b:59:37:3e:bf:df:78:87:48:8e:4c:b4:
28:2d:60:ca:da:16:d4:b6:1a:f1:cb:86:9a:8a:dc:
99:50:84:fe:83:a9:49:21:d4:b1:01:52:43:d1:39:
5a:41:8b:bd:f8:f0:53:ee:9f:ac:a3:2f:e6:b2:71:
73:2e:9a:86:2f:2d:23:73:57:d2:61:20:b1:4d:e8:
87:cd:1c:7d:6a:c3:03:ca:c7:1a:ac:89:7d:f5:21:
e8:62:74:32:a2:48:f4:df:3e:42:2f:6f:87:ea:88:
ff:82:17:e5:4e:db:11:0b:bb:10:9b:ad:bd:ca:5a:
45:a0:2a:b6:06:2b:3e:94:9f:76:12:15:b7:ec:d3:
dc:94:7d:b3:88:4e:51:c6:35:1d:b8:4d:23:bc:d6:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6C:A1:E2:29:93:9F:0D:0D:59:75:FF:DF:22:C3:20:DB:C6:58:29
X509v3 Authority Key Identifier:
keyid:0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/Pmyh4imTnw0NWXX_3yLDINvGWCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f240::/29
Signature Algorithm: sha256WithRSAEncryption
81:22:a3:44:1c:f5:f3:95:5d:92:36:2a:ba:86:b3:5c:b4:47:
47:09:77:b7:15:78:c3:33:99:27:0c:49:09:fb:80:43:30:35:
bf:35:c8:de:d0:f3:5e:1a:d1:67:71:06:e7:29:3c:0c:5b:49:
52:34:b1:9d:9f:c8:c4:b7:79:a6:80:4f:27:6a:e9:aa:57:2e:
dd:a5:3a:cf:54:46:60:86:f4:f5:0a:e6:79:b7:64:61:61:4a:
a1:80:07:12:05:f9:78:ae:78:77:a0:84:e0:b9:69:25:c3:18:
ac:9b:0f:24:7c:b6:84:c5:ac:c2:0c:61:48:94:1f:7b:c9:f4:
6c:04:8d:e8:50:cd:bd:97:04:a9:d7:1c:7e:17:69:66:6a:58:
5a:fe:12:ff:9a:0d:73:64:08:aa:46:f9:98:be:55:5e:28:e9:
82:a9:8f:f9:99:c7:85:3b:0d:8b:63:4b:27:8d:9c:39:eb:56:
cd:fe:c8:55:3d:c5:30:8c:ac:0a:d1:0b:5f:bc:94:5b:10:a2:
1b:9c:6b:8e:88:08:5a:9e:b9:fe:cc:22:0a:e0:f6:25:80:bd:
7d:dd:5c:5b:b7:7a:13:2a:11:6a:7d:45:2d:20:8a:6b:05:b9:
0b:0a:72:da:79:d5:21:30:4d:77:32:60:3e:29:7c:dc:fe:80:
4e:45:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:28 2026 by rpki-client