Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pvYFBsTYkp2ngchPxpSPgZK3lVk.roa
File: pvYFBsTYkp2ngchPxpSPgZK3lVk.roa (raw, json)
Hash identifier: 2PEh++VURqb+YEHS+ejz7EpLcK/uZgC2s/4mA53yU0w=
Subject key identifier: A6:F6:05:06:C4:D8:92:9D:A7:81:C8:4F:C6:94:8F:81:92:B7:95:59
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1132889DFD2064063352D7DD8D9FE37CA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pvYFBsTYkp2ngchPxpSPgZK3lVk.roa
Signing time: Tue 06 Oct 2026 21:39:46 +0000
ROA not before: Tue 06 Oct 2026 21:39:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 95.214.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:28:89:df:d2:06:40:63:35:2d:7d:d8:d9:fe:37:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 6 21:39:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f60506c4d8929da781c84fc6948f8192b79559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:f5:28:d1:98:30:b6:3d:3f:93:68:4d:8e:
a0:ce:a5:50:d6:68:ef:8d:98:5d:2e:2d:45:8f:14:
5d:56:81:e2:39:8a:02:47:5b:39:a4:2f:0d:e0:c5:
e9:f7:59:3e:50:77:a0:ce:07:af:fb:4c:db:a0:2f:
23:fe:e2:c8:99:38:9e:50:c9:6c:8f:b1:c3:d3:d9:
e3:61:22:84:c3:0c:5a:6d:ca:06:84:e0:cc:75:66:
ee:45:8b:b4:63:5c:51:c1:29:ad:cd:ee:98:48:21:
24:23:47:c5:8a:fb:11:99:ba:7c:21:3a:1d:e2:8f:
51:1d:7e:cc:44:c9:27:4d:d8:1a:90:c9:d8:89:1d:
70:f3:98:02:21:59:3b:b5:dc:6c:09:9b:35:b2:87:
94:8d:17:14:28:4d:5b:f9:d9:c2:38:26:58:46:7e:
bf:3b:c2:a1:eb:b6:d2:16:60:be:e2:54:f5:b8:b8:
64:5c:08:f0:91:39:88:8d:0e:7c:35:9b:82:51:05:
7c:1b:a7:8d:ca:5e:43:01:77:57:04:fe:1c:e3:e0:
5c:f6:36:7e:b3:66:60:6a:50:26:30:17:49:25:96:
9d:3a:a8:61:92:97:50:bb:aa:ac:9c:cd:7c:8d:48:
9e:79:4b:62:e8:ac:d4:83:b2:69:99:4d:ce:6e:94:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F6:05:06:C4:D8:92:9D:A7:81:C8:4F:C6:94:8F:81:92:B7:95:59
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/pvYFBsTYkp2ngchPxpSPgZK3lVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.80.0/24
Signature Algorithm: sha256WithRSAEncryption
79:af:ca:00:8e:99:57:53:3e:9a:c1:70:7c:10:b1:cb:a7:be:
4b:83:6b:c7:58:8f:a4:10:8e:7b:6e:ab:3e:e3:96:1d:8a:4b:
90:4c:f0:ae:48:7d:2f:21:0d:7e:29:4a:f0:8b:d3:d0:5a:5c:
2a:bc:3c:2c:2c:64:1d:fd:2a:15:bc:b2:f6:80:76:4a:d1:b1:
bf:ad:fd:a6:6e:2f:a6:45:c5:d4:48:22:a0:ef:60:f0:38:50:
22:41:a1:26:dc:61:c1:f6:cd:e1:bc:9d:a5:1a:74:a8:dd:71:
0c:aa:3e:e2:00:3d:e8:35:f6:c9:ca:7e:66:ac:53:38:e8:fc:
e0:ed:3f:3a:4a:f4:3e:72:30:ee:5b:f5:ef:e9:0d:91:58:6a:
bb:21:89:e1:8b:68:f6:b2:a8:e7:65:3a:a9:fb:eb:32:0d:c0:
dd:25:c8:48:29:4e:f0:e2:ce:90:43:7f:1e:58:ca:58:41:97:
3e:5a:e1:cc:3e:c5:b8:7d:e7:9f:c2:87:b1:52:c2:43:46:00:
17:ef:47:b2:b0:6a:58:07:9b:fe:c0:b1:41:35:35:94:95:14:
01:ad:3d:44:80:3a:04:2f:9b:2c:df:14:3f:61:d6:66:07:d7:
84:8f:9a:bd:66:dd:a8:10:bd:3f:16:34:97:ae:08:21:92:09:
a5:d7:14:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:01 2026 by rpki-client