Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/PqtoWJuztZkU9XcDY78IBGDqaUQ.roa
File: PqtoWJuztZkU9XcDY78IBGDqaUQ.roa (raw, json)
Hash identifier: CoLG2+Ko8ote26lVUw108zREMGh0FO69qI87UzKRYl8=
Subject key identifier: 3E:AB:68:58:9B:B3:B5:99:14:F5:77:03:63:BF:08:04:60:EA:69:44
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 019E40863153CC2AA825864E6D4413A77B81
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/PqtoWJuztZkU9XcDY78IBGDqaUQ.roa
Signing time: Tue 19 May 2026 13:56:36 +0000
ROA not before: Tue 19 May 2026 13:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134823
IP address blocks: 93.90.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:86:31:53:cc:2a:a8:25:86:4e:6d:44:13:a7:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: May 19 13:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3eab68589bb3b59914f5770363bf080460ea6944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:8e:47:c1:b6:01:95:89:ca:61:03:08:10:
94:44:79:be:01:20:f0:d1:98:4e:8d:1d:11:18:a3:
fa:d7:07:67:57:01:cd:fc:43:af:5d:61:8f:ab:26:
5b:e6:5e:b7:49:f2:0d:82:5d:1b:43:87:9d:fb:3e:
73:f7:cf:a5:4c:cc:de:fe:8b:0f:99:6e:d5:a0:55:
b5:f5:7c:3e:79:ca:fd:15:7f:6d:01:9f:b2:8c:5c:
48:8f:9d:2d:d4:49:6d:13:42:1b:28:ba:90:4c:04:
74:fd:db:5f:6b:8f:6b:1d:0e:1b:4f:13:77:18:32:
16:3f:07:36:7f:25:50:7a:02:65:78:97:93:81:cd:
07:87:f0:2a:ac:99:3e:60:51:d5:0e:4f:eb:0a:53:
17:35:4a:dd:39:01:0b:59:cb:fc:06:64:9e:52:70:
eb:5d:d1:f9:9d:78:68:6f:55:f3:33:0e:ac:2d:04:
e2:cc:34:f5:94:5d:9e:47:42:c9:bf:ab:c9:f1:e8:
ff:16:ac:fc:7b:05:9f:7e:99:e5:1a:e1:26:90:c1:
34:5a:c9:84:eb:14:f8:fe:c2:01:14:9b:a1:91:c1:
c8:f1:2f:46:36:98:27:42:a0:10:17:33:6b:50:47:
89:3a:28:f9:f6:38:e2:3a:10:2d:8c:e7:41:ed:88:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:68:58:9B:B3:B5:99:14:F5:77:03:63:BF:08:04:60:EA:69:44
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/PqtoWJuztZkU9XcDY78IBGDqaUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.72.0/24
Signature Algorithm: sha256WithRSAEncryption
06:53:29:08:3e:24:75:a9:2d:21:0f:6b:d7:45:05:a6:42:e1:
7b:2f:96:4b:d0:91:5b:c7:c6:cc:69:c1:d7:49:7d:0d:24:75:
55:27:c5:72:03:c5:14:d8:f4:db:61:98:7c:3c:27:0e:9a:1f:
d1:4b:a7:6e:0d:c4:85:e1:86:0c:f7:2d:2b:58:b5:18:39:1c:
01:af:14:0f:23:a3:1f:b5:4b:24:51:45:3a:08:49:13:ac:02:
11:db:32:7b:24:3b:a5:b1:91:f5:dc:51:d3:e4:ae:0b:b6:5a:
99:42:d3:66:d4:39:77:96:b0:fe:50:e0:86:df:c3:70:e6:bb:
7b:50:b5:35:fd:38:cd:b8:1c:a8:df:5e:b1:3d:8f:8a:91:59:
60:01:28:b5:08:72:22:12:43:10:dd:52:ec:3d:92:f5:f2:64:
8d:75:f0:0f:a3:0b:4b:cb:18:a0:8a:b2:e1:8f:7b:f2:48:75:
12:1a:f9:5f:41:d2:07:81:66:92:8a:c5:c3:16:e1:c3:b5:6d:
87:29:6b:07:89:86:7f:02:b5:a0:36:31:a9:49:87:c3:d9:15:
4d:36:b3:67:0a:67:af:b2:c7:32:ca:67:cf:0d:dc:3d:43:ec:
7e:93:7b:aa:5e:2f:38:48:73:92:f6:5b:29:85:9f:ce:64:8c:
0f:ed:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:05 2026 by rpki-client