Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PEccR7J4wM-fZSWPcjry-Jm3KIk.roa
File: PEccR7J4wM-fZSWPcjry-Jm3KIk.roa (raw, json)
Hash identifier: Jp/RLIv/QNsSGvvEZMkzt2d37ZrnV6hW/yvggY9lqdg=
Subject key identifier: 3C:47:1C:47:B2:78:C0:CF:9F:65:25:8F:72:3A:F2:F8:99:B7:28:89
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E8D891953270BD678FD498C08ABAF97A8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PEccR7J4wM-fZSWPcjry-Jm3KIk.roa
Signing time: Wed 03 Jun 2026 12:50:32 +0000
ROA not before: Wed 03 Jun 2026 12:50:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.224.2.0/24 maxlen: 24
193.25.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:89:19:53:27:0b:d6:78:fd:49:8c:08:ab:af:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 3 12:50:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c471c47b278c0cf9f65258f723af2f899b72889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:06:bc:56:c3:4d:58:42:4a:6b:19:0d:14:
d4:9a:81:18:40:db:99:d7:f9:0d:96:6b:6c:d1:7d:
a8:9d:5e:5b:3c:7b:1d:04:22:65:aa:b1:b9:33:c0:
9d:31:07:4e:b1:b8:b0:43:00:a2:59:48:d8:cf:63:
36:a5:0f:dc:00:91:02:c8:82:69:24:31:cd:e9:bf:
81:ed:57:42:be:86:e4:b5:d0:bf:c4:5c:77:45:28:
17:7a:ad:b1:a8:0a:aa:ae:a4:e5:30:bc:1d:f0:4b:
16:cb:9c:e9:80:56:1d:b6:7b:b0:a3:d5:36:ad:82:
f7:c8:2d:3c:ec:24:83:83:1e:2b:10:bf:f2:5a:35:
b5:c5:d6:9d:8c:ea:68:fd:b6:a3:1b:48:b6:e0:e3:
8f:d0:55:da:fa:45:b9:5a:20:b7:ec:7a:9c:ee:4a:
6f:ba:23:a5:f5:9c:f3:e2:5c:df:8c:40:ff:5e:c6:
a6:e8:f3:b4:72:73:40:78:ee:2c:a9:c7:6a:c6:32:
15:ad:0f:f4:6c:fb:44:32:bf:57:fd:bc:1c:24:17:
3d:da:50:0a:1f:66:c5:d8:ba:65:02:3d:1c:1b:bc:
da:58:c9:51:71:fd:40:95:3b:0d:c5:1e:5e:e4:63:
28:98:e6:b7:0c:32:8a:c7:dc:35:ed:94:ea:3e:47:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:1C:47:B2:78:C0:CF:9F:65:25:8F:72:3A:F2:F8:99:B7:28:89
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/PEccR7J4wM-fZSWPcjry-Jm3KIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.2.0/24
193.25.166.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8f:b4:00:59:6d:ac:6a:0b:cd:b0:52:75:86:31:bd:f6:77:
aa:67:ea:db:85:1a:df:96:97:5a:9c:b3:d5:34:80:f0:97:aa:
67:94:bd:6e:c4:da:94:3a:3c:bb:63:64:9d:98:74:2d:9a:d2:
d5:04:6a:5e:4a:9d:7d:2c:5a:69:1d:91:8d:4a:ba:31:8a:72:
30:d6:bf:3f:8e:4a:e1:56:d1:9d:98:c9:41:7a:fa:de:23:b5:
92:e4:06:06:16:e5:91:a4:11:07:66:f4:19:fb:89:1f:42:18:
56:59:48:e4:4c:17:65:52:54:3b:54:4c:a0:55:e0:61:a5:22:
d0:54:88:80:32:8a:ba:ed:e1:b5:06:87:50:c7:70:0f:dc:10:
4a:ac:b9:53:97:0d:f2:8d:3d:a3:ff:09:ca:98:f8:ae:bb:5c:
1b:bc:b2:f4:98:a1:fa:a5:d8:87:4c:78:16:aa:43:b6:47:11:
27:49:2e:98:32:6c:43:e2:5f:a1:0c:19:6a:dc:12:5c:16:e1:
82:78:79:e7:a2:60:9c:3a:e3:9c:06:96:32:e6:7a:c3:d9:29:
49:6b:58:0d:39:64:34:f1:bc:19:f5:27:4e:55:75:7a:39:c0:
3b:df:2a:2f:1e:4c:fe:da:71:9a:54:1a:48:a7:b1:01:c2:9f:
36:ea:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:23 2026 by rpki-client