Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pPqw_y6AhCGB8fkQrynVF3qAToY.roa
File: pPqw_y6AhCGB8fkQrynVF3qAToY.roa (raw, json)
Hash identifier: p1HjIpA9o/QLjnwbZzkkVMx722bKLdEqScZN6AEs1wU=
Subject key identifier: A4:FA:B0:FF:2E:80:84:21:81:F1:F9:10:AF:29:D5:17:7A:80:4E:86
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A03D4F9AD9AAEEBCCD3498509373D7D547
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pPqw_y6AhCGB8fkQrynVF3qAToY.roa
Signing time: Wed 26 Aug 2026 09:03:42 +0000
ROA not before: Wed 26 Aug 2026 09:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206273
IP address blocks: 64.43.77.0/24 maxlen: 24
64.43.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4f:9a:d9:aa:ee:bc:cd:34:98:50:93:73:d7:d5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Aug 26 09:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4fab0ff2e80842181f1f910af29d5177a804e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:87:63:be:f7:f7:90:ec:b2:25:72:84:58:
a3:20:9f:40:bb:75:66:1e:4e:bc:55:0c:75:17:4d:
4b:ab:ea:8a:15:ed:86:2d:40:80:e9:ab:ba:37:74:
17:80:84:06:38:bb:05:2e:4b:e1:09:37:96:70:4d:
e5:10:50:4e:67:91:6c:07:3f:d2:42:dd:cc:11:c0:
0a:bc:d3:69:cd:25:fd:2c:49:77:26:cb:8e:26:d0:
b4:de:12:03:cb:50:f5:08:ea:f9:38:1d:4b:3a:54:
67:1e:68:6c:c8:b0:95:7f:bd:07:cd:d1:2e:58:b2:
57:28:5c:dd:5f:ea:14:7c:8c:99:1a:b4:8e:32:6c:
a7:88:b0:a0:a6:55:b4:d9:f9:f7:18:3c:6e:02:c8:
47:e9:79:e8:4e:b8:f1:1d:39:49:e7:b0:16:f2:47:
ba:1d:a9:71:61:92:a2:79:7a:21:92:6b:ac:0a:9e:
c6:e7:b3:be:94:fd:b8:c7:09:cf:31:98:6c:fa:5b:
4b:07:a9:c9:5a:5d:b3:37:48:16:4c:f2:f5:b0:a1:
12:3e:4c:40:e9:61:65:14:fb:27:62:ed:42:2a:d0:
96:57:40:d9:38:5b:18:d9:7f:34:71:ad:8a:11:a8:
c9:82:b6:03:f2:0c:68:d5:66:bc:72:bb:a5:e0:37:
9d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:B0:FF:2E:80:84:21:81:F1:F9:10:AF:29:D5:17:7A:80:4E:86
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pPqw_y6AhCGB8fkQrynVF3qAToY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.77.0/24
64.43.98.0/23
Signature Algorithm: sha256WithRSAEncryption
25:5b:0f:a8:6b:c5:cc:de:09:fe:f8:b3:53:c3:92:89:6b:1d:
1d:0e:2f:6e:2e:fd:6a:ed:9c:17:03:9e:f7:33:0e:50:8c:91:
57:06:30:81:d9:09:e6:34:01:2e:97:9f:e2:58:18:4a:52:32:
30:b2:98:a4:60:c4:92:d1:ee:bf:fe:dd:84:64:78:8b:15:bc:
60:72:a2:9b:a7:fb:17:dc:f9:64:67:b7:c9:fb:53:e8:12:a3:
c3:ef:66:63:d0:c0:8b:35:a8:cd:8b:62:46:55:a5:4f:15:2a:
ba:59:cd:1e:71:03:09:8f:7c:66:3a:39:85:cf:ba:f1:a1:01:
36:d3:74:3b:34:39:73:9b:97:c2:5c:5c:e7:f1:ae:28:bc:d9:
a9:ae:c8:ff:3b:e9:7f:b2:3b:74:71:c7:cc:28:18:33:6a:b8:
01:50:c1:76:b7:32:58:94:c0:34:b3:f6:f3:27:ca:f9:dd:62:
55:46:88:9c:ca:3c:e7:20:36:cd:11:d6:72:e1:4e:ff:67:2c:
a5:92:63:91:99:e1:af:bd:0a:e8:11:94:63:4c:fe:4d:30:fb:
9c:05:c0:76:cb:14:17:1b:87:c3:e6:3e:80:87:a0:b4:5c:6c:
bf:d5:e8:30:b5:10:a3:c1:b2:c1:90:35:85:24:db:8e:e5:d9:
38:4f:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:21:56 2026 by rpki-client