Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/PuUNQZ5ruw2jM9YpOfPjcChoDqw.roa
File: PuUNQZ5ruw2jM9YpOfPjcChoDqw.roa (raw, json)
Hash identifier: +bkJ2gHhlUDMthyV+8ree4f0CUqE7KZluLniJTN/y/k=
Subject key identifier: 3E:E5:0D:41:9E:6B:BB:0D:A3:33:D6:29:39:F3:E3:70:28:68:0E:AC
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01A1CE7F209205168E6FD3289CE6C7747A1E
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/PuUNQZ5ruw2jM9YpOfPjcChoDqw.roa
Signing time: Thu 12 Nov 2026 06:43:20 +0000
ROA not before: Thu 12 Nov 2026 06:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.140.209.0/24 maxlen: 24
82.115.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:7f:20:92:05:16:8e:6f:d3:28:9c:e6:c7:74:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Nov 12 06:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ee50d419e6bbb0da333d62939f3e37028680eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:09:00:71:2c:19:ab:10:b4:a5:79:b9:3f:
3c:62:81:83:d6:12:e2:90:62:df:70:7f:97:69:6c:
1d:64:87:1a:28:50:2e:76:eb:10:62:25:78:69:e3:
bc:82:d0:80:88:57:e6:b6:f3:81:48:7a:c9:6b:b3:
e4:25:2c:db:37:fb:da:93:50:ea:19:0e:bd:46:6a:
c8:d3:d8:ca:76:4a:b8:f8:fc:15:69:48:0a:74:2a:
30:e2:b0:c4:d5:7a:41:83:b4:78:36:c0:43:90:00:
63:d0:04:fb:77:16:7c:72:21:7b:ef:b8:55:17:25:
12:c5:73:f3:56:f3:6a:9a:3b:70:de:f3:14:ce:4c:
3f:c6:1b:6f:c5:d4:13:5d:e1:99:c4:84:67:f4:21:
a5:43:3c:e6:e8:08:80:33:74:63:63:1c:60:8e:d8:
d9:20:9c:79:9e:de:54:ff:d7:24:04:7b:7f:f1:f3:
be:95:3b:65:47:f0:73:1b:c5:0b:1e:ce:64:1b:6f:
51:7d:dd:69:f6:4c:a0:38:ee:b5:8b:17:a7:47:60:
68:7b:2a:f0:3e:bc:43:19:f3:45:0d:f9:de:b6:d8:
02:f8:b3:5a:9c:0c:42:1c:bb:46:33:e8:01:78:1d:
5c:19:fe:c0:f5:68:da:01:dc:c3:fe:3e:48:93:e8:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E5:0D:41:9E:6B:BB:0D:A3:33:D6:29:39:F3:E3:70:28:68:0E:AC
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/PuUNQZ5ruw2jM9YpOfPjcChoDqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:70:d7:d5:be:e8:a2:24:d8:40:5f:ab:11:ef:24:2f:7a:08:
82:9a:c4:98:15:20:28:b9:2f:fa:06:19:75:cb:94:7e:d8:36:
e4:53:ff:2f:bb:af:1e:02:b3:39:58:df:f5:a4:c9:68:14:f9:
4f:ee:a5:db:1c:54:f5:0f:f0:7d:cf:0a:da:b4:35:95:49:cb:
7b:be:6c:1a:a0:fd:62:60:21:71:74:13:6b:16:80:d7:44:0e:
af:33:f7:99:8f:f5:3e:b6:8e:07:2d:ca:a9:20:44:a2:38:9b:
6b:5b:07:84:a1:62:7c:19:a4:ce:3a:0e:67:ee:3b:8c:1a:46:
8b:74:57:90:0b:01:c3:3f:e1:63:90:71:df:02:3d:d5:47:f5:
7e:60:40:b0:81:1b:4c:32:3a:35:d0:8f:75:fa:0f:d3:a9:73:
ed:bc:2f:e1:63:73:d3:44:92:3b:c7:50:db:4f:38:00:3b:57:
cb:e1:00:e0:e8:ed:51:eb:5a:b4:af:96:7e:17:4b:2d:ba:48:
5b:b3:2d:ea:88:40:84:c0:de:ab:63:d2:3b:02:09:56:b5:33:
35:57:de:76:ab:dc:c1:b5:34:46:8f:44:e8:b2:bf:eb:51:be:
4b:d7:3c:e9:a3:67:6c:b6:45:29:2f:21:64:0f:d5:73:27:a9:
b0:93:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:50:35 2026 by rpki-client