Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PVCfsL-DQGnWmfi4fX0uMc9N_9U.roa
File: PVCfsL-DQGnWmfi4fX0uMc9N_9U.roa (raw, json)
Hash identifier: /8uBdugQxCn2UEVIfNew348UrCQbDCLW4B+BK9vD+Ss=
Subject key identifier: 3D:50:9F:B0:BF:83:40:69:D6:99:F8:B8:7D:7D:2E:31:CF:4D:FF:D5
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB349F346A6128CFA86AEF395B57469D3
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PVCfsL-DQGnWmfi4fX0uMc9N_9U.roa
Signing time: Thu 30 Jul 2026 13:49:55 +0000
ROA not before: Thu 30 Jul 2026 13:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402257
IP address blocks: 185.219.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:49:f3:46:a6:12:8c:fa:86:ae:f3:95:b5:74:69:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d509fb0bf834069d699f8b87d7d2e31cf4dffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:7d:88:c2:39:77:20:16:7e:24:1f:78:59:
d5:0e:5a:ea:4c:5b:2b:24:1b:30:62:39:55:ae:82:
81:da:56:91:4d:0f:2c:4d:c2:ad:75:7d:fb:5f:85:
80:b5:49:6a:61:d3:49:12:14:fb:99:5a:a5:27:f7:
65:cb:69:b0:01:b9:27:67:3a:31:a9:48:e2:9f:c1:
7d:b0:c0:f7:fc:7d:00:a8:b1:50:3e:18:38:06:9a:
29:c5:07:7f:60:9b:4a:fd:5d:8f:52:9b:6a:31:10:
8b:7d:fc:f9:95:52:c6:3c:5b:c2:cf:3e:64:46:75:
50:5f:28:48:a1:ec:b8:d5:84:86:a9:31:27:b3:ca:
1f:0a:52:09:a5:9c:58:f6:f8:17:a6:fc:8e:62:80:
a2:62:ae:10:81:07:db:57:16:10:7b:80:d7:1f:23:
45:e6:cf:43:3b:81:5e:1e:ad:97:fc:aa:86:b2:3d:
69:ff:3a:97:fd:a5:98:f9:18:65:33:69:96:e2:92:
0c:2e:02:62:e3:cd:45:41:7c:5a:84:02:81:0d:40:
eb:ed:a2:80:80:51:f1:a0:e8:af:89:f8:00:d8:2c:
3a:44:c9:ac:f1:f7:9c:d8:c5:5b:65:e1:d0:b5:66:
b7:d4:05:3b:ec:57:03:17:b1:1d:04:ee:ce:aa:0c:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:9F:B0:BF:83:40:69:D6:99:F8:B8:7D:7D:2E:31:CF:4D:FF:D5
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/PVCfsL-DQGnWmfi4fX0uMc9N_9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.23.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e2:1d:4d:39:b5:8e:f0:1f:fd:37:08:fe:25:63:d6:8f:ec:
fd:a0:ca:9b:a6:2b:83:f3:24:47:c8:b7:8c:5e:1a:f3:6c:44:
c2:70:4a:25:52:12:34:6f:a9:dd:c6:1d:a1:a5:fc:b3:9b:ec:
ef:15:40:6d:fc:ee:1a:5f:eb:0e:3b:51:22:3f:08:0d:ec:68:
24:b6:bd:3c:6b:54:9e:55:06:da:1b:8d:65:71:6f:64:ec:da:
55:13:ea:2f:98:e6:67:f3:74:43:a0:90:d3:c4:60:51:88:f8:
f3:a5:2b:c2:c2:41:ae:6a:6c:d4:ed:86:9e:aa:f8:68:ab:52:
c5:37:76:99:a7:8d:b4:8d:65:78:b6:a1:02:56:66:6d:79:b6:
24:99:d5:b9:72:a3:4f:c1:64:e4:4f:3c:0c:a9:c6:88:51:1f:
cc:ca:b0:5e:9b:19:76:fa:3c:a5:94:48:1d:bb:86:32:d6:9f:
81:9f:6a:48:b9:1a:ff:74:ba:86:69:00:65:28:56:86:bd:f8:
1e:f2:df:c8:2e:89:9a:2f:14:d8:62:95:9b:9d:87:a9:cc:f9:
62:fe:58:f8:0d:dc:d3:59:8b:6f:64:83:4c:ea:86:b0:9c:26:
ca:47:b9:a7:aa:ab:d8:d9:b2:8b:ee:02:2c:a7:e1:42:cb:b3:
52:ac:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:49 2026 by rpki-client