Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Pa6_prRWrCOv6_TWB1niCwktArw.roa
File: Pa6_prRWrCOv6_TWB1niCwktArw.roa (raw, json)
Hash identifier: 5Gw8u2gpL7xdm9S0jF3mtKaPhtDLHFC4S0vPSatVp88=
Subject key identifier: 3D:AE:BF:A6:B4:56:AC:23:AF:EB:F4:D6:07:59:E2:0B:09:2D:02:BC
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 019FD673E588CF95FE70E0C0CE4928A8559B
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Pa6_prRWrCOv6_TWB1niCwktArw.roa
Signing time: Thu 06 Aug 2026 09:42:27 +0000
ROA not before: Thu 06 Aug 2026 09:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 212.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:73:e5:88:cf:95:fe:70:e0:c0:ce:49:28:a8:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Aug 6 09:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3daebfa6b456ac23afebf4d60759e20b092d02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:65:9e:2f:e2:02:e2:de:67:06:d4:95:ed:
5c:bb:e2:9a:bb:38:65:52:02:d5:b5:fa:cf:51:3b:
2c:2e:95:c4:f4:35:13:ff:f1:a0:7f:4b:8c:94:4c:
0b:3b:4b:c2:2e:5a:3b:2b:7e:aa:6d:11:49:08:f3:
c0:4c:a4:4c:00:73:b1:4e:95:aa:c0:98:0d:9f:20:
55:78:f6:40:97:f3:d3:69:57:39:fa:9d:94:bc:53:
7f:66:25:c2:22:0e:a9:a1:d5:58:7c:c4:cc:be:e4:
4d:07:9f:bc:e6:57:4b:2d:9e:c9:d5:74:41:24:1d:
5e:4e:a4:3d:8c:7b:47:7b:7e:d1:f6:d9:a5:ee:3f:
70:5d:fc:65:5d:2e:cd:01:9e:e7:9b:83:19:76:8a:
b8:1b:1e:f2:59:44:65:5b:e0:52:02:13:8f:ce:7d:
af:be:a6:2d:51:f3:e7:75:fb:c4:a2:d0:64:f5:45:
a2:af:29:8a:20:72:eb:fc:76:d8:90:5b:97:63:32:
ca:ad:2c:2c:7f:d1:e7:ac:f4:6a:92:bb:37:6d:0c:
da:31:0f:9c:e3:53:df:a8:91:26:e0:c3:87:58:93:
e2:b1:b9:93:55:f7:bf:67:9d:6a:c4:b2:78:18:08:
5d:8a:78:5d:fa:ce:ea:2d:36:a3:82:84:89:37:b5:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:BF:A6:B4:56:AC:23:AF:EB:F4:D6:07:59:E2:0B:09:2D:02:BC
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/Pa6_prRWrCOv6_TWB1niCwktArw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
88:45:dd:79:41:34:e1:ad:d7:6a:18:fc:bb:c4:65:0b:a0:36:
e4:14:be:2a:ac:21:6c:1c:40:d7:ea:d6:c9:b1:4f:67:d1:fc:
c5:8e:de:ed:16:e2:dd:27:2d:9c:df:ba:43:15:e9:bd:80:d1:
a2:4c:38:b2:bf:76:64:08:d3:96:ca:e7:8e:a7:42:c4:95:5c:
d3:64:c8:26:a6:1c:30:0e:8c:4c:b5:96:55:43:21:c4:f5:2c:
bf:c2:29:29:4a:06:01:4b:88:2b:5e:03:d3:87:86:86:7e:30:
ce:7b:26:eb:4e:b1:97:d4:03:da:54:df:5e:ec:73:42:b6:e0:
9e:b7:98:86:09:4e:8d:81:d5:24:19:40:6c:ee:33:06:dd:94:
59:27:98:2d:17:ca:94:05:10:1c:1e:f2:12:1d:80:80:82:80:
9f:63:fa:15:e1:d5:fb:e9:24:56:10:9d:7e:8a:91:50:14:e6:
cf:18:97:d4:4e:05:62:6d:e4:70:8a:86:72:56:27:ea:27:b6:
b3:95:e4:c7:c3:70:e3:1d:90:1a:58:24:74:93:f3:aa:54:4c:
01:7b:86:8f:1f:34:18:76:17:ec:72:eb:22:08:ed:ef:4c:bd:
9f:e5:13:30:22:42:3a:b0:66:4e:0c:81:a8:71:47:ca:7a:6c:
7b:4c:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:41 2026 by rpki-client