Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pge8mQlLWZhWVWdYU4p3MuuLuT0.roa
File: Pge8mQlLWZhWVWdYU4p3MuuLuT0.roa (raw, json)
Hash identifier: NKosgnKOojDu31fl4z7SMN3NRkLeBbEIib+xTPKVllc=
Subject key identifier: 3E:07:BC:99:09:4B:59:98:56:55:67:58:53:8A:77:32:EB:8B:B9:3D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019DCA0D5FBD0D716997CDA6BABBDC2B9C3D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pge8mQlLWZhWVWdYU4p3MuuLuT0.roa
Signing time: Sun 26 Apr 2026 13:49:27 +0000
ROA not before: Sun 26 Apr 2026 13:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 194.61.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ca:0d:5f:bd:0d:71:69:97:cd:a6:ba:bb:dc:2b:9c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 26 13:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e07bc99094b599856556758538a7732eb8bb93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:19:ea:62:20:a9:b2:c6:cc:a9:86:45:f3:
5a:22:33:c3:df:b2:ac:26:85:fc:26:d2:51:7e:51:
b9:d5:9d:f8:63:7c:d5:93:f0:7f:b2:36:4a:d7:95:
fb:98:c1:6c:a5:c4:94:83:c1:3a:41:96:2a:35:06:
5a:3f:2f:31:93:2e:5d:c8:8c:c6:37:af:f0:00:3b:
b8:82:26:3b:ee:95:1a:98:b8:b5:10:70:62:41:93:
c0:a4:e0:35:08:ee:9c:04:40:6a:79:d3:ad:1a:18:
fc:b5:f7:61:ac:db:80:a4:1e:97:6d:6b:ee:ef:e9:
1e:86:1b:6b:7f:c2:b1:97:b5:be:b5:3b:d0:cd:2c:
36:f7:15:c2:30:4d:a4:12:ac:5d:28:60:03:ab:49:
85:6b:fc:75:e7:82:4d:5d:9b:c5:f4:9f:5a:3e:1c:
88:d4:49:47:af:05:67:d0:93:e5:3a:70:f8:d5:46:
b4:a0:6f:ca:bc:05:a2:db:0f:37:30:27:c2:40:21:
f4:d7:dd:70:25:fb:de:d6:b1:2d:42:b2:6b:0e:84:
5d:6d:e7:cd:13:8a:71:90:4c:2e:e4:8f:f7:e4:87:
55:1b:03:88:81:db:68:fc:b9:ae:b3:e1:61:5a:10:
55:60:cc:65:73:b2:c8:0b:ce:60:a5:99:a3:51:58:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:BC:99:09:4B:59:98:56:55:67:58:53:8A:77:32:EB:8B:B9:3D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/Pge8mQlLWZhWVWdYU4p3MuuLuT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:99:73:58:7c:46:d1:4a:24:ef:d0:9a:6e:1d:1c:54:ca:63:
eb:ab:2a:8c:b8:ff:80:15:18:e8:a2:66:ae:0a:a9:67:80:5d:
e7:ae:9a:8f:10:dd:1f:be:88:69:ba:3b:8b:7d:98:38:45:97:
e8:ad:7e:ad:77:86:60:d8:90:f0:21:fe:98:de:69:2d:d7:9e:
8a:3a:9d:72:ae:c9:f9:49:5d:28:c2:db:86:03:0b:58:65:c4:
ed:2f:0d:d8:e9:a0:c1:ea:10:e5:33:1e:f6:43:f1:58:f2:f7:
39:86:d4:dd:a5:73:9d:03:63:83:78:26:49:6d:c7:98:0f:13:
f6:4a:06:3b:49:76:76:5f:9f:2b:62:60:c7:83:19:c1:58:98:
6d:65:e3:ec:cb:21:74:ec:ba:14:6f:97:70:30:1b:ce:6f:f5:
ac:0a:1b:fc:43:5d:81:9b:b2:f3:34:2a:96:89:08:97:f2:d5:
94:8f:dc:52:3f:af:94:b2:85:53:f4:ec:fe:8a:93:f9:d2:2d:
36:fb:40:e0:24:6d:8a:f8:b6:fc:4a:76:26:28:da:c7:3b:00:
f3:fe:a9:c4:e2:82:5a:1e:e8:fc:59:47:a9:80:06:eb:1e:88:
7e:d1:8d:30:de:05:65:e0:02:79:15:85:10:ea:36:dc:7b:b1:
eb:4e:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:06 2026 by rpki-client