Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmpOzxzvWOgBubWPCxnmvhVPwIk.roa
File: PmpOzxzvWOgBubWPCxnmvhVPwIk.roa (raw, json)
Hash identifier: dh+SRBkZxpehWjj+SHTVoLnKxXQvAQHU7AlR0Xh+Dg0=
Subject key identifier: 3E:6A:4E:CF:1C:EF:58:E8:01:B9:B5:8F:0B:19:E6:BE:15:4F:C0:89
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F74B0D95D88AF4C4E9DA8553F1E14DFEE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmpOzxzvWOgBubWPCxnmvhVPwIk.roa
Signing time: Sat 18 Jul 2026 10:06:14 +0000
ROA not before: Sat 18 Jul 2026 10:06:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201687
IP address blocks: 89.144.25.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:b0:d9:5d:88:af:4c:4e:9d:a8:55:3f:1e:14:df:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 18 10:06:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6a4ecf1cef58e801b9b58f0b19e6be154fc089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:d6:63:6f:c7:3e:2c:2c:4e:a3:15:c5:8d:
16:6f:65:a2:29:74:f7:8f:65:32:02:f7:35:ff:c5:
a8:95:1e:3b:b0:cc:c0:04:6b:b0:c0:be:b1:30:e8:
b0:0c:db:c5:a2:4c:aa:f6:45:34:72:83:4f:d6:fb:
89:f6:b1:38:b4:70:31:89:5d:d3:08:ce:e9:72:c5:
dd:f5:fe:6f:49:a5:1d:8f:99:92:99:f0:28:da:6c:
14:22:9d:db:8d:fc:d6:df:d1:c1:cd:e9:14:e5:28:
71:de:c3:99:35:13:7c:1c:25:ae:df:fc:ba:47:0d:
82:ed:11:58:26:53:e4:9b:1a:67:09:75:76:9f:c7:
82:21:29:fc:ff:3c:bf:dc:e7:d8:51:80:f3:50:a7:
4c:f5:7d:f1:c4:e0:48:de:da:72:b6:74:84:d4:15:
bf:ce:67:be:c9:70:64:9f:4d:55:55:f0:5e:05:01:
a4:a9:63:14:3b:3a:12:7f:21:06:86:65:2f:7d:4d:
26:9a:44:1b:af:0e:12:38:86:0c:c2:13:cf:36:56:
1f:c7:e3:8a:dc:f2:e5:4c:cd:d2:17:61:1d:25:2a:
58:b1:45:c0:e7:05:8b:23:b8:0b:fb:b3:b3:1c:5c:
41:8b:0d:44:63:9a:cb:e8:c0:6a:a9:ee:c3:27:a9:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:4E:CF:1C:EF:58:E8:01:B9:B5:8F:0B:19:E6:BE:15:4F:C0:89
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmpOzxzvWOgBubWPCxnmvhVPwIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.25.0/24
95.215.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:6e:ce:a8:bd:aa:42:0c:e7:3f:38:1e:97:1f:5b:54:ab:85:
4f:42:4a:a1:c9:63:84:17:6e:6e:ec:cc:a3:87:3d:18:95:48:
8c:6d:4b:90:7a:cd:6b:35:95:2b:dc:46:83:5e:20:05:8d:47:
6e:55:6a:ef:21:02:a0:ed:2d:01:54:80:19:18:a2:6c:e0:8d:
e6:f8:b1:04:43:b9:9a:c1:60:55:9b:61:05:1a:86:85:37:59:
0b:10:40:59:df:2e:b3:32:6a:c0:a0:a0:49:ef:6f:91:e4:2f:
2b:ce:c9:4c:81:8e:14:68:0b:38:86:af:e1:68:9f:ce:eb:b2:
f5:48:d6:47:68:49:66:60:52:ef:7d:48:e5:5e:cd:89:10:fd:
e9:7a:f9:d1:25:bb:82:17:15:e6:92:f6:3e:29:65:9b:ad:28:
42:f5:b6:6a:d6:1d:78:f3:04:8b:89:22:03:bb:b2:87:5f:ae:
7e:20:e6:53:ff:91:fb:42:9b:72:09:01:28:e7:69:b2:81:97:
a0:e0:b4:74:ce:d5:31:f7:c6:09:17:65:22:71:b0:b3:03:80:
c4:54:87:1c:d4:e5:bd:17:ed:57:2d:b0:8a:18:f1:5a:0a:79:
da:b5:f8:a3:be:f8:8e:f1:59:58:92:ac:68:43:03:3f:0e:1f:
a1:8f:49:e9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ90sNldiK9MTp2oVT8eFN/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzE4MTAwNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTZhNGVjZjFjZWY1OGU4MDFiOWI1OGYwYjE5ZTZiZTE1NGZjMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDDWY2/HPiwsTqMVxY0Wb2WiKXT3
j2UyAvc1/8WolR47sMzABGuwwL6xMOiwDNvFokyq9kU0coNP1vuJ9rE4tHAxiV3T
CM7pcsXd9f5vSaUdj5mSmfAo2mwUIp3bjfzW39HBzekU5Shx3sOZNRN8HCWu3/y6
Rw2C7RFYJlPkmxpnCXV2n8eCISn8/zy/3OfYUYDzUKdM9X3xxOBI3tpytnSE1BW/
zme+yXBkn01VVfBeBQGkqWMUOzoSfyEGhmUvfU0mmkQbrw4SOIYMwhPPNlYfx+OK
3PLlTM3SF2EdJSpYsUXA5wWLI7gL+7OzHFxBiw1EY5rL6MBqqe7DJ6kdBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD5qTs8c71joAbm1jwsZ5r4VT8CJMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvUG1wT3p4enZXT2dCdWJXUEN4bm12aFZQd0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZAZAwQA
X9cgMA0GCSqGSIb3DQEBCwUAA4IBAQA/bs6ovapCDOc/OB6XH1tUq4VPQkqhyWOE
F25u7Myjhz0YlUiMbUuQes1rNZUr3EaDXiAFjUduVWrvIQKg7S0BVIAZGKJs4I3m
+LEEQ7mawWBVm2EFGoaFN1kLEEBZ3y6zMmrAoKBJ72+R5C8rzslMgY4UaAs4hq/h
aJ/O67L1SNZHaElmYFLvfUjlXs2JEP3pevnRJbuCFxXmkvY+KWWbrShC9bZq1h14
8wSLiSIDu7KHX65+IOZT/5H7QptyCQEo52mygZeg4LR0ztUx98YJF2UicbCzA4DE
VIcc1OW9F+1XLbCKGPFaCnnatfijvviO8VlYkqxoQwM/Dh+hj0np
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:24 2026 by rpki-client