Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pGxAuFc70L3_Dznm3xyK87UH3-0.roa
File: pGxAuFc70L3_Dznm3xyK87UH3-0.roa (raw, json)
Hash identifier: 1AqCftsPOmEMjcHM17jjwn2bK2YzByLby7uNVfY2Jgw=
Subject key identifier: A4:6C:40:B8:57:3B:D0:BD:FF:0F:39:E6:DF:1C:8A:F3:B5:07:DF:ED
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019FF1372699513A52E357F930269F52D4AF
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pGxAuFc70L3_Dznm3xyK87UH3-0.roa
Signing time: Tue 11 Aug 2026 14:25:51 +0000
ROA not before: Tue 11 Aug 2026 14:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:37:26:99:51:3a:52:e3:57:f9:30:26:9f:52:d4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 11 14:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a46c40b8573bd0bdff0f39e6df1c8af3b507dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:32:c1:9b:cc:c8:84:27:53:5a:df:f0:d4:
1c:5e:d9:aa:72:e7:8c:b6:e1:00:7c:8a:20:36:fb:
b5:ac:d7:be:4f:64:3c:cf:10:21:89:ef:5b:fa:b6:
20:d0:72:bc:2a:4f:71:b4:81:3a:3f:8e:9d:4e:b1:
0c:16:55:49:95:84:f9:30:82:de:bc:6e:d4:80:6e:
e5:5a:a0:a5:1a:0b:e7:16:ea:13:2d:f2:c5:15:37:
db:d4:15:49:29:33:5f:7c:ec:47:41:e4:28:a6:f7:
82:10:3a:04:a0:40:76:ae:68:ee:e3:1c:be:82:2f:
a1:74:18:ed:39:97:48:84:5b:28:0c:5d:a5:1e:04:
0e:b5:07:a0:6e:de:48:a7:5d:80:80:0f:a9:8a:4a:
60:87:f2:51:6d:35:5b:46:1d:7d:83:fc:8f:12:6c:
72:a0:de:ee:07:fb:17:75:a4:d0:87:98:41:f2:23:
79:b0:22:74:1d:f1:52:3b:9a:f8:af:4e:16:bb:ff:
93:ef:b8:33:f6:b7:c2:80:5f:0f:a6:ee:84:52:31:
ba:66:51:38:5e:f9:4c:71:7a:12:46:ad:ab:a4:86:
5f:e2:9a:36:24:82:7b:3b:17:61:f7:0c:ac:97:bb:
43:f9:20:31:da:d6:b2:96:d5:5e:91:42:43:d2:f8:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:40:B8:57:3B:D0:BD:FF:0F:39:E6:DF:1C:8A:F3:B5:07:DF:ED
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/pGxAuFc70L3_Dznm3xyK87UH3-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:2b:a0:9f:da:88:4d:d0:37:d4:39:f9:61:80:df:34:92:
f1:1b:a7:5b:c5:51:ea:90:43:50:83:dd:0c:11:8d:31:d5:39:
ae:ea:ae:87:a8:04:fa:b9:cf:02:27:dc:91:c2:a0:76:63:30:
a9:64:c5:80:fb:2a:89:d8:c5:2b:99:75:7d:ba:95:09:38:a3:
ad:2d:da:46:4e:25:55:37:c1:66:00:f5:20:32:13:3b:2d:e7:
03:c7:32:2a:2e:a5:99:c1:f8:d5:db:2c:91:84:94:c7:55:10:
d2:c6:ff:e2:29:ec:90:a7:dc:4f:1a:7e:ed:16:57:b3:b9:d0:
10:48:ba:7e:72:c1:ed:ea:7f:af:8d:ac:e8:ff:c1:4d:a7:0f:
4f:84:3a:43:4f:b3:dd:a4:c5:93:11:d6:7a:ad:59:0b:7f:e5:
ff:fd:81:cb:b4:0e:75:c7:3c:ef:a3:da:79:e4:48:47:2c:81:
ce:ea:44:fa:ad:5f:c4:30:f8:4c:a3:3c:cd:e2:fc:1c:20:b4:
b2:8a:fc:35:9e:dd:a6:e3:6b:29:b5:2d:93:5d:77:ac:93:28:
48:b9:38:3e:e1:a6:22:01:fa:7e:16:d7:9a:b0:e9:e0:ae:82:
2b:09:25:79:13:22:4d:21:b4:c8:d8:88:ac:5c:4e:26:03:a3:
e8:72:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:53 2026 by rpki-client