Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pmu6IShr7_YrivuqoXhJzWtPfmk.roa
File: pmu6IShr7_YrivuqoXhJzWtPfmk.roa (raw, json)
Hash identifier: yV82l9zK15lR3dETfifFVcVb30VtaWPyH/b8g4E+luo=
Subject key identifier: A6:6B:BA:21:28:6B:EF:F6:2B:8A:FB:AA:A1:78:49:CD:6B:4F:7E:69
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A01CED495648AE223D40D4221CD3F6FCFB
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pmu6IShr7_YrivuqoXhJzWtPfmk.roa
Signing time: Thu 20 Aug 2026 02:08:27 +0000
ROA not before: Thu 20 Aug 2026 02:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 194.61.236.0/24 maxlen: 24
194.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1c:ed:49:56:48:ae:22:3d:40:d4:22:1c:d3:f6:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Aug 20 02:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66bba21286beff62b8afbaaa17849cd6b4f7e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:2a:dd:12:40:c7:cd:ec:df:c1:e1:ac:64:
b7:b4:d8:7e:f1:2c:1e:e2:d6:32:0d:d5:72:f5:83:
f4:f6:bc:f7:cf:45:ca:82:cf:89:01:e8:b2:d3:b5:
07:ff:a1:09:48:56:aa:ef:ba:31:2f:a8:5d:65:39:
0b:06:42:57:3c:08:62:11:66:1d:21:a8:b5:9d:45:
de:aa:60:43:58:31:ba:b5:b3:04:f1:4c:55:5c:22:
83:ea:68:5e:bc:bd:8e:ca:69:de:b3:69:86:a5:4c:
be:0e:0a:74:5d:35:ab:be:8d:c8:7a:18:13:c6:db:
b9:0f:25:85:05:2a:76:e5:13:e3:0b:76:67:f3:fa:
5e:92:fd:3d:84:b6:4b:ae:88:03:c8:e3:42:aa:4c:
d5:a7:61:a7:62:24:55:e2:5d:a4:e8:30:4f:6b:4f:
b6:db:27:aa:f8:5e:b9:cb:56:51:b5:70:4f:f0:bb:
dc:ef:e8:ae:62:cc:1f:95:03:3a:00:cb:89:72:8d:
33:78:94:67:fb:58:d9:45:30:94:1b:2d:42:5b:36:
0a:60:38:1d:73:7e:cd:6d:98:6a:f5:c8:63:95:24:
0d:34:83:78:8d:fc:5d:f8:f4:6e:34:8a:79:e7:0a:
87:1e:79:3f:73:8d:1a:0d:ca:f3:cc:62:c0:0c:ba:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:BA:21:28:6B:EF:F6:2B:8A:FB:AA:A1:78:49:CD:6B:4F:7E:69
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pmu6IShr7_YrivuqoXhJzWtPfmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:eb:27:6c:26:55:52:fd:6e:6d:ef:29:99:5e:1a:5d:c3:bd:
e4:79:55:1d:72:84:11:96:b1:a0:46:4e:2e:d9:f6:ab:1f:9d:
ea:da:78:8d:36:23:25:d3:fb:59:54:09:06:d5:74:37:db:76:
59:0d:72:45:3f:fc:85:59:f2:51:67:55:d3:da:b0:4f:63:5d:
d5:ac:0b:4a:9b:db:d9:59:ba:af:fc:0e:46:d0:ab:97:1f:e6:
96:fd:7d:23:8b:03:cd:8c:b0:34:e6:1a:84:f0:53:4d:24:b6:
84:1c:fb:e3:d0:dc:9c:06:99:9b:5b:fc:d4:03:c9:bc:f6:01:
77:f0:e2:24:5b:5b:b2:3c:d7:84:8c:e4:d6:10:59:37:bf:59:
c7:6b:0a:5b:75:67:22:77:5e:eb:5a:f1:f7:e4:c9:85:38:be:
a7:2f:67:ea:7e:06:75:f5:74:e7:5d:8b:a0:0b:03:1d:f0:fd:
91:d0:ab:31:35:e8:f7:86:af:27:ec:9e:d2:b8:c3:17:05:9a:
67:17:fb:1e:96:c8:5d:e5:8b:bf:95:6e:9b:8a:0d:8d:ef:82:
7e:d7:54:50:fb:8d:78:9e:88:38:55:f6:27:e6:9c:ab:d8:8d:
3a:85:87:f9:60:e5:31:58:09:5e:3e:6d:af:6b:3c:a8:4e:61:
eb:92:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:00 2026 by rpki-client