Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/PQFHhglqtcFEFN0zXrd66FRNn2c.roa
File: PQFHhglqtcFEFN0zXrd66FRNn2c.roa (raw, json)
Hash identifier: UrYnODwnEvY5/u5NDLBTYWkNOxtCx+Fpql4otdo2Y88=
Subject key identifier: 3D:01:47:86:09:6A:B5:C1:44:14:DD:33:5E:B7:7A:E8:54:4D:9F:67
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 01A03379AED102E25B3A0809CA20EE2D2E7F
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/PQFHhglqtcFEFN0zXrd66FRNn2c.roa
Signing time: Mon 24 Aug 2026 11:13:27 +0000
ROA not before: Mon 24 Aug 2026 11:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62313
IP address blocks: 185.143.156.0/22 maxlen: 24
2a07:3640::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:79:ae:d1:02:e2:5b:3a:08:09:ca:20:ee:2d:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Aug 24 11:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d014786096ab5c14414dd335eb77ae8544d9f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:f7:72:34:78:04:fc:58:9a:75:89:78:f3:
c9:90:7a:16:e2:5a:69:ce:d0:73:a8:56:05:9b:19:
97:f1:bc:81:c3:ef:80:23:eb:48:36:3e:b4:dd:9b:
69:25:a9:f2:d6:19:51:ec:41:c6:4a:9b:39:6b:55:
db:c2:aa:00:55:5c:c4:ef:d4:77:61:33:94:44:2a:
1e:1b:d4:d9:7e:1c:48:50:61:07:d2:8c:05:be:85:
67:53:a7:1d:f6:16:f7:19:4c:b6:41:5f:c9:5c:30:
73:c7:d8:53:b9:49:10:24:86:c0:d4:52:92:2e:fc:
ae:b7:be:94:6a:b3:d0:81:fb:86:5d:82:5b:f1:54:
64:4a:5f:d6:b8:9a:b3:fc:79:52:6b:c8:ca:5d:1b:
de:4e:4d:48:33:f0:b4:e7:84:93:16:72:1b:5a:b0:
06:6e:cb:81:79:f4:55:cc:20:14:a9:58:b7:a8:8b:
d3:99:70:da:40:2f:48:a5:f0:c7:aa:62:cb:3e:9d:
d7:93:2d:6c:11:70:1e:f3:4d:9d:ea:ce:19:d4:70:
3a:5c:b6:fb:9e:58:3b:2d:75:ee:30:b4:38:f0:fb:
c6:99:50:c0:df:e7:e4:b3:b2:47:e4:74:e2:f9:1b:
5c:60:75:44:82:08:64:8a:9e:ea:da:d0:c6:0a:2f:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:47:86:09:6A:B5:C1:44:14:DD:33:5E:B7:7A:E8:54:4D:9F:67
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/PQFHhglqtcFEFN0zXrd66FRNn2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.156.0/22
IPv6:
2a07:3640::/29
Signature Algorithm: sha256WithRSAEncryption
6b:a3:34:01:15:47:25:bc:c9:c7:bd:d6:c6:7e:d7:0a:1c:eb:
de:0a:cb:f1:a4:bb:a5:80:5d:67:a5:72:92:af:55:75:e6:1e:
61:f3:41:25:70:8d:b9:ac:38:2a:2c:06:81:81:29:31:32:83:
53:f2:ff:21:b6:d9:1b:de:89:e8:4b:0a:a7:5b:04:f6:d6:fb:
e6:50:72:ef:9d:64:3a:0a:a5:bc:90:a8:5c:f0:8d:d1:87:49:
1f:91:58:4b:77:f5:e0:54:21:15:6b:5f:93:ea:14:40:2d:92:
aa:6d:22:0f:38:cb:3f:e6:74:28:f3:9a:78:42:0d:c6:d6:3b:
30:87:ea:5e:01:69:9e:a2:0f:23:f6:90:24:8b:db:5c:23:b0:
62:a0:fd:52:6e:97:e3:a6:62:2c:ca:d5:5e:3f:96:31:52:4b:
2a:cd:b1:72:3e:34:95:e1:cf:0d:fe:97:8e:02:a7:83:0c:a2:
c9:67:29:10:7c:25:4d:ef:d6:cf:c5:59:95:87:b5:dc:69:5a:
39:d8:b1:37:8c:71:67:96:6e:29:47:87:41:99:2f:f7:a6:97:
fc:5c:90:9e:bc:ee:7a:f1:66:3f:82:99:44:0b:75:28:14:bd:
90:b3:59:be:d6:9c:90:61:01:39:45:07:23:05:7c:58:45:08:
bd:55:4b:ae
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaAzea7RAuJbOggJyiDuLS5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlY2NiN2NkMWI5ZDZmYzM5ZDcxNThmMmZlOWNmNTIxN2Ex
MmQzNzQwHhcNMjYwODI0MTExMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDAxNDc4NjA5NmFiNWMxNDQxNGRkMzM1ZWI3N2FlODU0NGQ5ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg73cjR4BPxYmnWJePPJkHoW4lpp
ztBzqFYFmxmX8byBw++AI+tINj603ZtpJany1hlR7EHGSps5a1XbwqoAVVzE79R3
YTOURCoeG9TZfhxIUGEH0owFvoVnU6cd9hb3GUy2QV/JXDBzx9hTuUkQJIbA1FKS
Lvyut76UarPQgfuGXYJb8VRkSl/WuJqz/HlSa8jKXRveTk1IM/C054STFnIbWrAG
bsuBefRVzCAUqVi3qIvTmXDaQC9IpfDHqmLLPp3Xky1sEXAe802d6s4Z1HA6XLb7
nlg7LXXuMLQ48PvGmVDA3+fks7JH5HTi+RtcYHVEgghkip7q2tDGCi9wBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD0BR4YJarXBRBTdM163euhUTZ9nMB8GA1UdIwQY
MBaAFF7Mt80bnW/DnXFY8v6c9SF6EtN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQt
ZDIyOTY3ZTIyZWYwLzEvUFFGSGhnbHF0Y0ZFRk4welhyZDY2RlJObjJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lZGM4ZjMtMGJiMi00MWFiLWJhNjQtZDIyOTY3ZTIyZWYw
LzEvWHN5M3pSdWRiOE9kY1ZqeV9wejFJWG9TMDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY+cMA0E
AgACMAcDBQMqBzZAMA0GCSqGSIb3DQEBCwUAA4IBAQBrozQBFUclvMnHvdbGftcK
HOveCsvxpLulgF1npXKSr1V15h5h80ElcI25rDgqLAaBgSkxMoNT8v8httkb3ono
SwqnWwT21vvmUHLvnWQ6CqW8kKhc8I3Rh0kfkVhLd/XgVCEVa1+T6hRALZKqbSIP
OMs/5nQo85p4Qg3G1jswh+peAWmeog8j9pAki9tcI7BioP1SbpfjpmIsytVeP5Yx
UksqzbFyPjSV4c8N/peOAqeDDKLJZykQfCVN79bPxVmVh7XcaVo52LE3jHFnlm4p
R4dBmS/3ppf8XJCevO568WY/gplEC3UoFL2Qs1m+1pyQYQE5RQcjBXxYRQi9VUuu
-----END CERTIFICATE-----
Generated at Fri Sep 11 09:47:32 2026 by rpki-client