Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PLKwiv1J3_pJOykgnPM7jMSB7-c.roa
File: PLKwiv1J3_pJOykgnPM7jMSB7-c.roa (raw, json)
Hash identifier: jAw9p6eT7IU/h8eDNqcoZ6c3/L2B+yBZLfNUBFqZhAg=
Subject key identifier: 3C:B2:B0:8A:FD:49:DF:FA:49:3B:29:20:9C:F3:3B:8C:C4:81:EF:E7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A13E5B9D79945A1F881227879554F1C11B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PLKwiv1J3_pJOykgnPM7jMSB7-c.roa
Signing time: Thu 15 Oct 2026 06:59:13 +0000
ROA not before: Thu 15 Oct 2026 06:59:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 194.77.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5b:9d:79:94:5a:1f:88:12:27:87:95:54:f1:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 15 06:59:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cb2b08afd49dffa493b29209cf33b8cc481efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:17:a6:cd:a9:83:11:fd:73:ed:c6:93:61:
3d:23:0f:54:b7:5f:11:90:93:98:a0:2e:b9:fe:81:
3e:85:84:a9:20:3b:ea:4c:d6:8d:a7:f6:3f:83:f4:
12:a9:5b:69:3e:5d:80:26:fa:5c:9a:ae:44:29:2f:
6f:0e:93:11:02:a4:c8:e2:29:12:59:2b:3c:09:db:
fa:9c:55:01:b1:fb:fa:c7:fb:35:b1:c1:ad:7e:57:
a8:6a:82:5b:ab:b4:50:52:8b:f7:6e:5c:9a:41:6e:
9c:d3:2b:c7:77:67:b3:19:67:8e:1b:f0:7d:96:1f:
35:1f:f7:32:4b:8c:b9:60:b2:c1:89:16:a2:89:b9:
75:8e:99:e5:9e:78:20:3e:d3:9e:d3:d1:41:fb:4e:
66:bf:70:36:26:4b:e9:6a:ad:41:cd:f5:3f:06:2a:
22:3b:6d:92:1e:0e:e2:46:2c:63:bd:1f:89:6e:10:
7b:d0:9f:8e:59:b9:42:11:2b:2e:4a:63:57:c9:38:
72:5a:df:65:c0:16:69:65:d0:90:1d:a1:4f:26:d4:
d2:2e:a5:08:08:4c:d0:3d:db:30:06:03:90:41:69:
37:77:ff:7d:7e:39:0c:f9:97:d9:b7:e2:7f:94:57:
2f:c5:cf:a7:ef:13:ad:0e:63:c7:a0:dd:5e:2a:bc:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B2:B0:8A:FD:49:DF:FA:49:3B:29:20:9C:F3:3B:8C:C4:81:EF:E7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/PLKwiv1J3_pJOykgnPM7jMSB7-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.77.10.0/23
Signature Algorithm: sha256WithRSAEncryption
23:0c:f9:45:57:3e:ee:4a:f8:46:f1:da:27:3a:70:a3:80:2f:
0c:5b:89:59:1a:c0:d9:02:f5:18:cc:ce:3f:1d:e7:50:10:4a:
81:4c:b4:43:a4:d3:5f:82:8b:d2:51:d6:fb:27:57:4c:20:36:
f1:22:4f:53:cf:93:11:c6:da:d1:f7:e1:18:a5:6f:b6:82:81:
b6:be:af:94:9c:d3:a3:a8:dc:2a:2a:3b:97:a9:1e:38:c7:eb:
ba:f1:c0:33:2a:08:15:ff:ac:79:ef:71:8c:df:60:13:6e:20:
d4:fd:77:58:c2:76:d5:b0:6f:54:38:e8:49:1b:98:62:c2:fd:
48:9b:56:83:61:0e:6f:f2:77:de:20:82:77:1d:f1:ff:be:3f:
a6:ef:58:bc:99:ce:e1:cf:48:04:8b:dd:68:ce:5d:c4:2e:24:
9c:7e:d6:56:e8:79:4e:6f:a0:6e:f4:cc:bc:f5:a9:88:bb:02:
69:15:ba:e2:31:a8:75:3c:89:1b:bd:35:70:e8:a6:99:b9:11:
d2:f1:e6:a6:e8:56:c7:24:e1:9b:7f:35:eb:05:3c:03:a4:94:
bc:6f:dc:9b:b4:a5:ae:87:ba:b0:17:bd:a3:da:a4:aa:0b:53:
d0:8e:fc:41:3d:7c:fe:2a:80:3e:e8:b5:62:5c:22:c0:48:e3:
69:e7:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:57 2026 by rpki-client