Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PC-iVVZ05dZHm_NUXQPnsC6xQwg.roa
File: PC-iVVZ05dZHm_NUXQPnsC6xQwg.roa (raw, json)
Hash identifier: T4XDV8OugBxctQY/seZan5oxKdFcqtcy8aX2Fp8HYzk=
Subject key identifier: 3C:2F:A2:55:56:74:E5:D6:47:9B:F3:54:5D:03:E7:B0:2E:B1:43:08
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB34ADE9A6CDBD96EF1459AA716BC9276
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PC-iVVZ05dZHm_NUXQPnsC6xQwg.roa
Signing time: Thu 30 Jul 2026 13:50:56 +0000
ROA not before: Thu 30 Jul 2026 13:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401293
IP address blocks: 185.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:4a:de:9a:6c:db:d9:6e:f1:45:9a:a7:16:bc:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c2fa2555674e5d6479bf3545d03e7b02eb14308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:c7:2c:a5:96:c5:d6:6b:c6:93:96:d3:8c:
f9:88:07:5e:58:17:60:87:dd:c5:98:04:56:b5:e0:
8f:49:b8:92:32:dc:da:51:ff:88:02:7b:d0:36:2a:
72:09:2d:b2:ec:73:3b:3d:46:93:13:32:86:6c:08:
5c:d6:7c:bd:9c:73:47:41:c0:3c:83:9c:76:d4:4b:
9d:37:c3:8f:6f:f9:ce:50:d4:1b:d6:27:73:50:2d:
bd:22:4c:d5:c0:8e:25:b1:09:22:b7:59:97:93:bf:
dd:fb:ad:c6:67:fb:bd:70:7a:1d:2a:54:bc:4e:21:
7c:28:d3:e4:c9:07:2e:48:42:bb:21:23:7a:a0:cc:
39:c4:6c:37:8c:b9:80:23:66:55:60:53:99:86:e0:
16:a9:88:8e:39:90:15:9d:a9:6e:3d:91:4e:60:07:
4c:f6:75:61:93:fd:df:55:bc:88:11:30:af:1a:78:
17:94:b2:04:99:e3:dc:4e:37:ca:ae:80:1f:fa:46:
4c:1f:06:1e:2c:47:8b:7d:be:ee:98:54:2b:09:b6:
a5:e3:80:c3:57:98:1c:b9:03:9d:36:51:a5:94:c6:
d7:10:10:0b:38:c1:36:32:71:ac:44:0b:ee:73:1d:
75:2d:22:79:30:39:9e:af:60:06:4c:ab:00:47:01:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:A2:55:56:74:E5:D6:47:9B:F3:54:5D:03:E7:B0:2E:B1:43:08
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PC-iVVZ05dZHm_NUXQPnsC6xQwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:3e:98:e0:85:38:cd:2b:6b:b8:c2:60:05:07:e4:68:87:
56:12:c5:f9:50:3b:b3:2f:2c:fb:f7:f1:43:83:e9:78:16:b7:
19:9f:d7:15:a5:a7:c2:2a:39:c9:aa:9f:d0:93:9f:0e:13:8b:
c2:47:fb:66:13:c5:b9:64:a4:f3:fe:36:cd:b1:9e:9f:c1:bf:
ad:55:94:e9:3b:49:ae:54:68:8b:31:b6:2f:be:6b:70:d2:21:
90:23:37:37:7a:65:d3:23:ff:45:05:ed:bd:9f:fa:ef:a1:cb:
62:49:32:fb:0e:7e:74:4e:e0:2f:21:8d:03:43:64:ab:09:2c:
40:b5:39:fe:17:b0:ac:c2:bb:27:35:2b:26:b0:d9:d7:c1:ad:
3d:c1:48:b5:a6:25:22:0f:2d:cc:74:87:bd:ee:52:71:2b:0e:
6e:b8:27:46:47:73:39:1f:9e:77:7f:6e:91:07:00:8b:46:2d:
14:5a:45:93:f9:fc:e6:ae:1f:3d:ff:ee:a8:2c:5b:91:4d:ad:
9f:c4:09:f8:f6:27:fa:62:f8:72:9d:b6:a8:55:5b:0b:84:86:
13:32:09:fa:c5:51:67:f8:4e:2d:c9:0f:e1:bc:39:3e:d8:8f:
75:2e:f5:b0:9c:4d:35:03:d8:d5:29:90:3c:6b:53:12:f6:03:
f0:6c:7f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:19:01 2026 by rpki-client