Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa
File: PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa (raw, json)
Hash identifier: afnFmYkWhiN9F+mMJUqb2R4wmcsEqxZEBV5b+sQWhDE=
Subject key identifier: 3D:24:C6:A2:66:75:39:B3:2A:42:AA:46:74:54:07:D7:3B:DB:50:14
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0476CD4B956D3F40CE39D4F46EECDEAF4
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa
Signing time: Fri 28 Aug 2026 08:11:49 +0000
ROA not before: Fri 28 Aug 2026 08:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 213.214.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:6c:d4:b9:56:d3:f4:0c:e3:9d:4f:46:ee:cd:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 28 08:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d24c6a2667539b32a42aa46745407d73bdb5014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:fd:71:e4:ee:4b:88:db:eb:d5:af:33:65:
d1:86:05:1f:58:e4:c7:3e:44:a8:a5:9b:28:f8:e7:
ef:db:39:d9:df:00:dd:56:a1:c4:a8:f3:fb:11:28:
86:bc:c6:52:50:83:b2:b9:7a:30:cc:e7:2c:47:5c:
89:97:bf:ba:b6:66:52:b0:05:8f:2d:b4:2e:5c:23:
1f:20:8f:c7:e6:b5:ca:f9:90:36:f1:05:c2:4c:ed:
02:a5:13:e4:f5:35:2e:3d:f9:f2:5e:31:a8:81:ed:
91:6d:f2:68:21:d6:5b:9f:20:b4:a6:e0:61:7e:91:
ea:2b:39:f8:ee:1b:e4:5b:19:ec:41:61:38:b8:28:
15:b6:f2:39:8e:a9:8c:fc:94:8b:c0:f9:d1:8e:34:
93:6d:aa:b8:b6:96:38:50:a9:7f:22:bf:79:f2:e9:
0c:f9:c7:ce:e4:a1:aa:13:76:49:d2:a2:f5:b9:39:
c5:c6:8b:89:d9:07:7e:00:99:0b:66:a1:5c:89:db:
3b:92:72:8d:c3:31:9e:6a:fa:f1:90:48:2b:ac:bd:
26:4c:07:66:3c:89:83:4b:bb:4f:55:69:da:dc:f8:
9a:20:0d:73:fe:4c:fd:6f:35:d5:b0:ae:9a:35:64:
a9:3f:ff:43:de:2f:1b:32:26:36:8e:b0:6d:cf:db:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:C6:A2:66:75:39:B3:2A:42:AA:46:74:54:07:D7:3B:DB:50:14
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.111.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1e:a8:d0:e0:52:4e:f8:64:4a:2f:6d:24:90:a4:c7:2c:ea:
74:50:e1:c4:9a:88:9a:7d:a2:63:7a:c9:4b:20:6a:82:3f:9b:
04:9e:81:3c:7d:db:1d:fc:b5:e8:84:c3:29:2d:9d:37:b0:58:
7e:98:bf:8c:f7:2f:3d:90:91:0f:e7:86:59:b2:99:81:9d:bf:
d2:28:24:04:82:ef:b2:ef:db:17:7a:79:11:ac:a2:d8:9f:8d:
d2:29:76:64:01:4c:2a:38:ae:78:84:20:f4:ab:3d:26:98:6e:
92:1f:ce:b7:e9:a5:50:ec:08:e1:28:28:9f:b7:6c:02:4b:86:
e7:78:fc:be:8a:35:78:64:6f:1a:77:90:cc:93:e8:99:9d:b1:
ed:45:41:16:af:c7:02:16:fc:6c:41:c6:51:52:e8:55:df:c3:
e7:de:cc:9b:26:fb:e2:e6:79:29:b4:0d:cf:6a:5c:a4:10:58:
c3:29:b5:3c:d6:85:ec:45:10:96:48:97:e8:cb:41:d3:eb:12:
ed:ac:8d:8a:5d:8d:eb:db:2a:de:cb:3b:1f:07:27:ed:cf:f5:
47:66:be:05:a9:9d:1a:35:40:da:6d:c8:78:97:57:96:9f:ec:
57:3f:78:ba:fc:0d:ed:b8:c1:61:69:49:b6:a7:50:30:46:c6:
9f:83:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:20 2026 by rpki-client