Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pfQIQtiw0hOQzwiCesi0AjLHapA.roa
File: pfQIQtiw0hOQzwiCesi0AjLHapA.roa (raw, json)
Hash identifier: ddrH7oWf6HnIwFuplBpVDYvI9f1Yddg87dSy0YKuWKY=
Subject key identifier: A5:F4:08:42:D8:B0:D2:13:90:CF:08:82:7A:C8:B4:02:32:C7:6A:90
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07FF1AEE6412CC09E52802886D26FCCB1
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pfQIQtiw0hOQzwiCesi0AjLHapA.roa
Signing time: Tue 08 Sep 2026 07:35:40 +0000
ROA not before: Tue 08 Sep 2026 07:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 194.163.69.0/24 maxlen: 24
194.195.101.0/24 maxlen: 24
195.252.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f1:ae:e6:41:2c:c0:9e:52:80:28:86:d2:6f:cc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 8 07:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5f40842d8b0d21390cf08827ac8b40232c76a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:d6:00:db:70:40:af:bd:41:b6:c1:67:ec:
d1:3d:64:cc:84:2a:d4:40:b5:56:a9:89:e1:fa:48:
1d:72:77:2d:aa:f4:fd:c4:82:18:2f:ed:b0:c6:b9:
55:df:62:6f:51:98:03:87:17:b0:98:77:a5:cd:97:
7d:2b:42:64:c5:04:3e:5b:b2:b8:9d:cc:24:70:46:
64:06:b9:81:a3:78:19:40:60:67:68:fe:cd:66:c0:
4f:ac:de:51:e9:54:ed:97:8e:27:02:c7:6f:36:35:
a5:dd:b4:59:0f:35:17:fa:c9:40:c5:38:88:7c:55:
4a:1c:68:be:c8:cc:71:0a:15:34:83:59:20:71:6a:
2a:61:d8:03:fa:6d:87:55:b7:bd:cd:50:4b:49:7d:
d9:6a:96:02:b7:4b:0c:78:79:2e:21:8b:65:02:1a:
d1:c6:b6:31:b4:a7:4b:a6:a8:c1:6e:9d:89:f2:04:
55:c6:dc:11:ca:30:34:37:71:4a:9e:72:0f:a0:29:
e4:35:f8:85:f4:d5:bd:a1:1c:b1:6c:cc:64:12:31:
4a:4f:3f:b9:45:54:c9:4c:85:1a:76:36:ff:d9:5e:
16:e0:78:cf:14:7d:5b:1e:6e:cc:17:83:db:c7:fa:
57:45:f4:26:40:9d:3b:3f:81:b6:0d:d5:92:f4:06:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:08:42:D8:B0:D2:13:90:CF:08:82:7A:C8:B4:02:32:C7:6A:90
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/pfQIQtiw0hOQzwiCesi0AjLHapA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.69.0/24
194.195.101.0/24
195.252.172.0/24
Signature Algorithm: sha256WithRSAEncryption
24:aa:24:a0:f1:36:8a:a0:6a:95:2d:06:a4:3e:32:41:33:3c:
d7:19:d5:a1:37:45:81:3d:b9:52:fa:cf:d9:a5:77:31:f6:45:
53:dc:a1:9b:a2:84:a0:f4:f9:af:85:95:28:20:1d:a4:04:ac:
ec:fb:9d:83:62:ba:f1:50:cf:e8:67:09:72:26:44:a1:f6:ac:
ad:43:0c:8f:0e:25:52:f6:75:ea:aa:17:5b:35:eb:d0:34:b4:
f9:97:3e:ac:a5:9a:de:d4:0b:f0:d9:e9:12:bc:be:33:de:65:
28:80:71:86:93:0c:f2:af:ef:85:b7:b7:06:7b:e6:f9:d4:ae:
9b:f9:8f:da:ad:57:0a:14:bf:f8:08:e6:ef:88:65:63:5a:a7:
38:a8:f9:4f:7a:9e:14:eb:66:57:ad:d6:6c:aa:f5:b1:84:83:
f1:d9:60:ff:52:d0:53:0c:7b:37:8e:bf:2c:21:4a:c6:42:7d:
c3:ca:eb:4c:e5:e1:eb:76:19:76:c8:c0:03:91:01:bd:19:99:
be:17:d6:0b:aa:0b:8d:f1:07:09:1b:00:51:dc:6e:b9:25:39:
94:c7:d1:30:1b:73:f5:8a:30:57:4d:b5:31:37:15:49:5d:9d:
94:15:f5:58:a8:66:59:75:7f:f8:f7:82:a1:a2:47:f0:ff:22:
45:f4:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:39 2026 by rpki-client