Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pvoymw8qhT9jUB4SVaBi_Eo48uo.roa
File: pvoymw8qhT9jUB4SVaBi_Eo48uo.roa (raw, json)
Hash identifier: WxLzZja+/xiE4P0UZj7E7mp160T68bT8tzwgvMdn0jY=
Subject key identifier: A6:FA:32:9B:0F:2A:85:3F:63:50:1E:12:55:A0:62:FC:4A:38:F2:EA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A06612BF0441ACAE4347974382474CB0E8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pvoymw8qhT9jUB4SVaBi_Eo48uo.roa
Signing time: Thu 03 Sep 2026 07:01:39 +0000
ROA not before: Thu 03 Sep 2026 07:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:12:bf:04:41:ac:ae:43:47:97:43:82:47:4c:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 07:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6fa329b0f2a853f63501e1255a062fc4a38f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:6a:75:42:32:81:2a:d5:d9:17:d2:18:ab:
07:0e:a9:b0:65:c8:06:fd:03:ca:b3:4b:60:c2:bd:
d5:74:ec:b9:8e:b1:49:d1:c7:24:fe:eb:5e:fa:3d:
2e:74:9d:29:16:1c:fc:b6:5b:46:ba:a6:6f:b6:8e:
23:1b:2d:9d:f0:71:b7:ef:6d:6f:cf:5a:81:7c:5e:
3b:3b:db:af:c6:08:f9:e0:a9:7c:21:99:18:35:80:
be:6a:80:f8:35:8a:13:66:c4:8f:ba:74:f2:09:8d:
11:fd:30:9a:85:e2:72:ce:d7:a7:b3:03:4c:35:31:
44:19:10:18:e2:8f:0f:2e:99:7d:d8:89:d9:20:37:
ce:6f:e3:9e:18:e1:f3:f4:39:0b:ab:e0:64:55:00:
81:ce:a4:fe:7c:6d:c0:76:ec:b6:d7:12:75:8c:04:
cf:87:83:b2:8a:46:f4:10:20:a8:3b:4c:b3:73:a1:
4f:74:67:12:57:81:98:4d:11:f8:a1:27:0d:c7:64:
a1:86:ae:c3:31:57:49:1e:ed:12:7a:d9:90:ec:3a:
01:f3:ec:1a:c6:a0:d4:e4:5b:3a:80:72:02:90:87:
9f:c5:ef:c0:9e:bf:98:47:c2:e0:44:92:2e:f9:e8:
39:13:72:e7:a9:63:dd:a5:71:e2:e7:3b:d7:cb:43:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:32:9B:0F:2A:85:3F:63:50:1E:12:55:A0:62:FC:4A:38:F2:EA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pvoymw8qhT9jUB4SVaBi_Eo48uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d7:16:5a:91:ed:73:1e:41:07:6a:d3:d4:82:cc:24:fe:d1:
bf:dc:56:fe:d5:66:44:88:7c:87:2b:b3:af:27:8b:bc:00:a5:
f0:4a:ee:dd:bb:b9:da:93:cc:fd:73:2d:ac:78:3b:49:96:a0:
5e:19:85:85:67:b9:9c:d0:0f:d3:78:e8:34:cd:66:27:e2:f7:
55:9c:e5:78:59:21:c8:c1:52:67:f8:a8:03:26:bb:42:80:28:
83:3c:c7:97:ec:bd:a0:4d:70:9e:34:51:80:2c:0d:08:3c:f0:
6e:63:19:b7:83:c4:09:fa:24:f3:e8:30:62:8a:d8:42:35:6f:
00:c7:47:14:b7:f3:ad:1f:0f:a5:f7:40:34:f0:70:cb:8b:8c:
5e:b2:50:a6:48:5f:d0:8f:7b:96:a9:e7:09:98:c8:8e:1e:f0:
09:e7:9a:f0:e8:17:53:a4:d2:57:b3:fc:44:34:ba:d4:50:14:
cf:9f:ba:22:87:f2:70:2f:4e:c1:2f:73:44:d1:15:6a:8b:4d:
51:10:4b:1c:0e:d3:03:67:02:7a:fa:69:4c:a3:b1:c1:ed:e9:
11:fd:e2:9a:30:87:5e:11:34:0b:7c:cf:37:06:a1:44:1b:d8:
15:54:b8:0a:37:cb:ff:e5:b5:4f:57:99:ac:ce:6f:c6:2d:ad:
86:e7:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:17 2026 by rpki-client