Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptDzNICgPmNrQM-ZyhLYrWgHLdk.roa
File: ptDzNICgPmNrQM-ZyhLYrWgHLdk.roa (raw, json)
Hash identifier: 43be9bO3v9Eb6052oGRWUU4XHrzw43uS/KTfKajq4yk=
Subject key identifier: A6:D0:F3:34:80:A0:3E:63:6B:40:CF:99:CA:12:D8:AD:68:07:2D:D9
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019F2485EC0307D967F3889954000685ABA9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptDzNICgPmNrQM-ZyhLYrWgHLdk.roa
Signing time: Thu 02 Jul 2026 20:29:44 +0000
ROA not before: Thu 02 Jul 2026 20:29:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212147
IP address blocks: 194.26.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:85:ec:03:07:d9:67:f3:88:99:54:00:06:85:ab:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jul 2 20:29:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6d0f33480a03e636b40cf99ca12d8ad68072dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:b0:ef:66:6f:7e:61:5d:d5:9c:50:39:5d:
ed:6c:d7:cd:d2:6c:e5:e3:d9:3a:10:1a:39:9c:13:
2e:04:50:81:4e:1d:1e:e3:b1:65:2f:df:25:96:e1:
7d:88:7c:02:e5:fd:54:ea:7f:3b:96:08:aa:21:45:
5a:83:e4:63:a5:50:d2:f3:3d:77:47:5c:90:94:76:
95:8e:f8:53:a0:6b:45:e1:8a:69:03:2f:e2:d7:a4:
79:7e:cd:3a:d4:c9:7d:cb:99:c5:b3:4f:28:60:71:
62:fd:35:e6:58:e4:78:13:ec:55:ba:45:1a:23:73:
01:dc:fd:b0:88:eb:24:90:62:00:12:98:77:e7:e5:
e7:e5:17:ee:da:2c:f2:7f:34:2d:05:88:e5:84:e0:
4f:09:a4:09:09:47:38:de:24:1a:35:bf:c3:24:26:
a6:ab:57:30:51:19:6f:2d:c5:61:f6:97:3a:81:73:
5f:d7:09:af:de:ac:37:45:d2:ad:98:a0:0b:f1:de:
b9:d7:82:cb:c3:0f:b7:1a:8a:c0:cc:56:c4:69:9e:
65:f5:96:01:1b:1a:d1:34:f0:36:59:47:25:7a:63:
47:c5:d8:56:cf:1f:f8:38:a6:4b:bf:8c:25:85:9f:
ad:11:e2:11:b6:3e:51:ed:2b:5d:ce:88:1b:7b:87:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:F3:34:80:A0:3E:63:6B:40:CF:99:CA:12:D8:AD:68:07:2D:D9
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ptDzNICgPmNrQM-ZyhLYrWgHLdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.137.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9f:d5:af:4f:e8:a4:79:49:09:c6:d4:87:b5:68:78:f2:52:
02:95:89:8e:bc:c5:ab:07:1e:cd:55:b3:17:10:7a:7f:ac:0c:
95:19:ff:80:45:4b:45:07:59:8b:ab:43:b6:23:25:b9:9d:08:
29:75:b1:3e:8e:d5:e0:4f:9b:f7:f1:06:ff:71:66:d2:3d:5a:
bd:f1:24:3b:e6:bd:fd:a1:49:96:47:55:02:b0:e9:10:8c:9c:
da:0b:56:82:da:b9:43:98:67:40:74:bf:cb:be:d0:15:51:4a:
71:23:c2:a4:3f:93:a6:29:97:02:e3:1b:b1:70:c7:19:37:47:
ca:a2:6c:6a:f8:b5:48:4c:62:6b:e1:90:f3:28:a7:04:34:e9:
92:74:5b:6f:50:1a:fa:f6:78:b8:98:3d:d5:6a:b4:52:b6:6a:
62:ec:11:83:5b:9c:c3:7c:e2:b1:c8:4f:c2:ec:45:75:ef:7f:
d9:a6:2a:29:4e:07:bc:58:f6:e7:8a:e6:9e:1f:88:46:ef:e4:
03:4b:ba:0d:b6:13:b7:e8:ee:5c:09:c6:8b:0d:5a:84:68:82:
26:93:67:b9:15:6b:a7:b5:a1:96:24:64:52:23:3e:a0:7e:a5:
0b:1c:83:80:18:60:fc:3a:46:30:ab:dc:99:3c:a7:01:30:74:
5d:fc:a8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 02:23:22 2026 by rpki-client