Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Pvf-DpLw-l2xVjZmolna4QaMcZQ.roa
File: Pvf-DpLw-l2xVjZmolna4QaMcZQ.roa (raw, json)
Hash identifier: jT2gXriLV/ZxsbfQb46utgdtoOnJ94orVfRypiHqDKI=
Subject key identifier: 3E:F7:FE:0E:92:F0:FA:5D:B1:56:36:66:A2:59:DA:E1:06:8C:71:94
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB673454BCA86F66BFD0A4A4C36D5F903
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Pvf-DpLw-l2xVjZmolna4QaMcZQ.roa
Signing time: Fri 31 Jul 2026 04:33:55 +0000
ROA not before: Fri 31 Jul 2026 04:33:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 5.44.255.0/24 maxlen: 24
185.196.27.0/24 maxlen: 24
193.31.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:73:45:4b:ca:86:f6:6b:fd:0a:4a:4c:36:d5:f9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 31 04:33:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ef7fe0e92f0fa5db1563666a259dae1068c7194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:48:c0:cc:ee:4a:1d:eb:e2:1b:27:da:09:37:
fe:b6:82:60:22:aa:bf:9c:00:83:9c:5b:a5:37:44:
d7:d2:36:d8:92:2b:61:05:bc:fe:5d:6b:98:6d:a9:
23:13:a0:43:b6:db:49:8f:73:07:47:3f:2e:06:63:
54:96:01:a7:eb:01:46:aa:dd:ee:fc:62:64:96:31:
eb:37:22:71:23:06:c3:c1:e5:24:15:81:2f:c3:b1:
36:2f:d4:1e:7e:0f:6f:91:d4:63:26:c0:52:62:24:
f1:1d:ed:ce:a7:5d:96:c2:f4:8d:97:22:94:e9:47:
1a:5e:86:ce:f2:65:60:1c:30:ac:1a:4c:e0:27:e8:
bf:34:a2:97:b5:8c:76:80:a2:ab:50:66:b1:95:f2:
74:f8:b3:c2:40:88:64:5e:29:82:19:37:92:c4:15:
ea:1b:6c:58:44:9a:b8:f3:81:94:5b:f7:9a:87:b8:
08:9a:e7:05:f7:eb:c6:17:4b:46:69:c1:9b:dd:03:
c8:c2:1c:00:21:97:2d:73:c3:1b:30:c9:cc:a1:22:
c3:b1:a5:32:88:78:a1:c7:fb:12:1f:8b:f8:f6:78:
a1:54:97:87:16:36:59:8a:ab:96:c3:62:bf:8e:f3:
50:96:89:85:b8:c6:47:4b:65:f6:e1:b2:2b:b0:b4:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:FE:0E:92:F0:FA:5D:B1:56:36:66:A2:59:DA:E1:06:8C:71:94
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Pvf-DpLw-l2xVjZmolna4QaMcZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.255.0/24
185.196.27.0/24
193.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6b:d2:18:70:68:03:42:db:e3:ea:e4:2e:bc:e8:d1:8f:b7:
5c:82:01:87:91:18:25:33:78:3e:44:e0:4a:4d:b2:e9:34:c5:
36:a0:cb:6d:ab:a2:e9:03:1b:c9:e8:d5:cd:0f:e2:d8:85:56:
d2:d2:a5:87:36:1a:1b:2b:7f:fd:3e:1c:0d:63:e1:22:19:47:
ad:08:eb:d5:fe:f6:53:82:b8:ba:07:62:e2:34:d4:94:b1:35:
78:eb:f6:d3:69:6a:10:4b:85:16:91:1a:65:fc:c9:6c:f9:71:
69:45:97:fb:9c:bb:03:2d:3d:50:fa:b4:a1:94:52:02:44:42:
bb:af:fc:a5:82:d8:c8:52:41:a9:1b:73:67:cb:d2:94:3b:48:
db:f0:11:80:b4:35:7a:4a:fe:8f:8b:24:06:91:f3:5a:de:58:
ef:75:17:6c:aa:e1:11:fd:d8:94:c3:77:19:71:61:16:21:ea:
fd:cd:c0:8d:d2:56:ca:0f:70:cd:02:31:03:2c:73:7c:15:29:
7d:ce:a8:dd:ac:57:ec:4f:9f:d7:47:45:46:9d:c5:e2:8a:c9:
2b:f9:e1:73:82:67:96:3c:2b:b7:8e:36:b1:40:c8:7e:26:24:
bc:1e:e0:69:82:fe:12:3a:f1:8f:a9:ae:8f:09:3a:ae:7a:75:
91:16:6d:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+2c0VLyob2a/0KSkw21fkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwNzMxMDQzMzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWY3ZmUwZTkyZjBmYTVkYjE1NjM2NjZhMjU5ZGFlMTA2OGM3MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40jAzO5KHeviGyfaCTf+toJgIqq/
nACDnFulN0TX0jbYkithBbz+XWuYbakjE6BDtttJj3MHRz8uBmNUlgGn6wFGqt3u
/GJkljHrNyJxIwbDweUkFYEvw7E2L9Qefg9vkdRjJsBSYiTxHe3Op12WwvSNlyKU
6UcaXobO8mVgHDCsGkzgJ+i/NKKXtYx2gKKrUGaxlfJ0+LPCQIhkXimCGTeSxBXq
G2xYRJq484GUW/eah7gImucF9+vGF0tGacGb3QPIwhwAIZctc8MbMMnMoSLDsaUy
iHihx/sSH4v49nihVJeHFjZZiquWw2K/jvNQlomFuMZHS2X24bIrsLTIQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD73/g6S8PpdsVY2ZqJZ2uEGjHGUMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvUHZmLURwTHctbDJ4VmpabW9sbmE0UWFNY1pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSz/AwQA
ucQbAwQAwR9xMA0GCSqGSIb3DQEBCwUAA4IBAQBla9IYcGgDQtvj6uQuvOjRj7dc
ggGHkRglM3g+ROBKTbLpNMU2oMttq6LpAxvJ6NXND+LYhVbS0qWHNhobK3/9PhwN
Y+EiGUetCOvV/vZTgri6B2LiNNSUsTV46/bTaWoQS4UWkRpl/Mls+XFpRZf7nLsD
LT1Q+rShlFICREK7r/ylgtjIUkGpG3Nny9KUO0jb8BGAtDV6Sv6PiyQGkfNa3ljv
dRdsquER/diUw3cZcWEWIer9zcCN0lbKD3DNAjEDLHN8FSl9zqjdrFfsT5/XR0VG
ncXiiskr+eFzgmeWPCu3jjaxQMh+JiS8HuBpgv4SOvGPqa6PCTquenWRFm3b
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:56 2026 by rpki-client