Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/PYTmdV0F9SG-733WM6hd2UxmEKQ.roa
File: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (raw, json)
Hash identifier: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=
Subject key identifier: 3D:84:E6:75:5D:05:F5:21:BE:EF:7D:D6:33:A8:5D:D9:4C:66:10:A4
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 019F23691964BDEAF59A22DB50CBFE84C46B
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/PYTmdV0F9SG-733WM6hd2UxmEKQ.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200944
IP address blocks: 185.90.116.0/22 maxlen: 22
185.90.116.0/24 maxlen: 24
185.90.117.0/24 maxlen: 24
185.90.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:64:bd:ea:f5:9a:22:db:50:cb:fe:84:c4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d84e6755d05f521beef7dd633a85dd94c6610a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:a9:9e:04:46:a7:9c:fb:c7:ae:04:86:9d:
6e:f7:5f:68:79:56:d2:de:d3:8f:f9:b0:ba:88:9e:
d3:ac:a5:e1:33:4b:66:e5:e0:42:2e:32:f7:3c:11:
30:ce:ed:db:ac:ac:9f:1e:a2:21:a8:c4:c5:60:a1:
4e:6e:c8:b9:5f:85:a8:b0:07:24:c7:46:6c:29:0c:
88:e1:5a:13:72:3d:a6:35:5e:8c:36:53:3e:b3:2d:
ed:aa:b1:83:57:99:45:11:40:dc:1b:85:f9:f7:3f:
5a:02:62:ef:e3:0c:5e:df:2b:26:86:b1:f6:be:ce:
bd:8a:4d:15:1c:79:6c:84:6e:01:f3:ab:a6:40:9a:
73:b0:55:28:8c:ce:44:c8:21:4a:ea:89:74:d9:d2:
a8:2e:eb:a9:1f:79:45:9b:29:dd:b3:15:15:d5:dc:
fa:ee:fb:56:05:f4:26:da:74:f1:af:1d:71:6b:d6:
e0:6d:0d:8f:1e:16:67:59:03:29:f0:a9:4b:0d:f4:
c3:2c:21:ba:ac:40:28:62:00:f3:1d:eb:fc:9c:c1:
6b:3b:ff:5d:6d:68:4f:1e:02:40:78:f9:d8:03:c9:
27:93:5f:a4:e3:c2:35:13:f6:d9:0f:a0:af:0f:98:
87:7a:a2:ab:51:ef:82:cb:0e:9c:66:c5:ad:47:a3:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:E6:75:5D:05:F5:21:BE:EF:7D:D6:33:A8:5D:D9:4C:66:10:A4
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/PYTmdV0F9SG-733WM6hd2UxmEKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8a:83:86:c0:23:19:73:16:f5:b5:c8:a7:40:d7:cb:d1:0d:
5c:e2:b4:c9:2c:25:1a:50:c4:ee:cb:32:ac:ad:36:b2:0f:d8:
25:76:ac:0c:cd:1e:4a:04:d6:c0:3e:0e:d2:e6:9d:4a:63:1d:
a8:3f:cc:d8:70:af:3c:5e:71:8d:fe:ae:c8:da:da:c6:70:3e:
48:e4:e3:bd:e5:03:0f:00:36:92:5b:e9:e2:fa:62:24:ae:ec:
57:bc:2a:45:4f:fd:fc:08:f1:ec:0c:ad:5f:6a:a6:d9:00:57:
c8:40:6f:dd:22:13:69:b8:9e:07:99:dd:90:92:85:c6:ce:ef:
b6:c8:e5:c2:3e:08:a0:c6:a7:b1:d3:82:60:65:37:20:40:8c:
70:00:5b:32:2a:2f:d6:5f:99:e2:ea:8a:61:50:36:88:ac:74:
ee:19:40:21:54:6b:b6:fc:4c:43:9e:43:95:34:22:36:8d:82:
af:4c:5f:77:99:a9:da:6b:d0:5c:ff:0e:db:37:f3:c1:12:af:
c7:b2:20:2f:17:97:2e:38:c3:7c:66:84:83:8b:5c:e8:e9:45:
2b:83:ee:53:ff:ac:00:2e:02:4d:69:b1:b5:92:b1:7e:90:f0:
6e:33:cf:57:a8:49:4b:af:55:5f:58:ce:1f:db:d1:0d:6c:0d:
57:ae:1b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:59 2026 by rpki-client