Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa
File: PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa (raw, json)
Hash identifier: AtEVBryEU+0QaV9AVKbszJgM2w291RiX7wwevVc0Kpc=
Subject key identifier: 3C:78:CE:43:D1:69:C7:2F:52:B8:32:88:53:7C:A6:1C:5C:48:B7:04
Certificate issuer: /CN=95b3c87e7074853c9183f167a2c25b02e3417480
Certificate serial: 019F236831504AD40937D06643CD4D377642
Authority key identifier: 95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29226
IP address blocks: 2a11:f840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:31:50:4a:d4:09:37:d0:66:43:cd:4d:37:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b3c87e7074853c9183f167a2c25b02e3417480
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c78ce43d169c72f52b83288537ca61c5c48b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:81:5b:fc:c0:fe:14:4b:a1:15:c9:75:f5:
2b:14:80:6b:90:30:fc:41:2e:c8:d8:5b:c8:08:cf:
b5:fa:09:2b:25:1b:dd:f4:3d:a5:38:3a:43:83:b8:
3e:dc:ab:c1:25:77:8b:c1:ee:a6:d8:a9:cb:04:ae:
39:8e:cf:b1:d9:fe:8b:a0:e1:d8:c6:7a:f2:f7:ba:
ac:4e:95:13:84:1b:7d:e6:58:55:43:4c:bb:a4:39:
5a:09:86:23:8e:c5:73:96:8e:15:d5:a4:0f:a7:d1:
f6:a5:f1:d5:55:3f:4c:49:e8:a6:aa:5b:39:44:3b:
03:d7:d1:8a:93:7d:0c:81:f3:34:dd:22:27:22:ff:
a1:50:6e:44:b2:ac:5f:bf:78:b2:4f:44:56:58:9c:
e0:13:b1:7b:9a:19:89:de:f3:78:c5:d2:69:aa:06:
ba:f5:9c:68:03:1b:8d:1c:33:8a:d2:ce:d0:fb:2f:
d2:e2:fb:44:8e:8f:ea:6b:80:a1:90:ae:6d:db:50:
5e:ad:58:eb:45:48:33:be:ef:4b:7e:3b:42:a2:7b:
e0:29:a9:4b:43:42:57:d1:77:28:e7:ea:1d:9b:46:
de:ad:08:bf:3b:77:90:7c:b6:f2:6f:db:75:20:ce:
61:0b:52:06:ed:5c:8d:de:74:6e:85:2c:26:50:d5:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:CE:43:D1:69:C7:2F:52:B8:32:88:53:7C:A6:1C:5C:48:B7:04
X509v3 Authority Key Identifier:
keyid:95:B3:C8:7E:70:74:85:3C:91:83:F1:67:A2:C2:5B:02:E3:41:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbPIfnB0hTyRg_FnosJbAuNBdIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/PHjOQ9Fpxy9SuDKIU3ymHFxItwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/lbPIfnB0hTyRg_FnosJbAuNBdIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f840::/29
Signature Algorithm: sha256WithRSAEncryption
4d:40:95:d5:07:47:c7:dc:94:c6:9e:cd:18:6a:e6:72:1e:2f:
0f:49:0b:df:a2:78:36:fb:30:4e:de:14:6b:67:d7:a6:dd:f0:
6c:ff:0d:fa:ee:8e:15:64:e1:da:9f:4f:2f:c8:06:39:73:e7:
ee:61:9c:1c:88:32:d7:84:70:45:d5:e1:ff:67:68:fc:17:08:
ca:13:84:f9:b9:4a:3e:87:de:7f:82:27:b7:8d:b1:9d:b4:39:
6e:34:33:a5:d4:8e:f3:cf:97:55:d1:73:29:35:53:98:b5:85:
4e:83:4c:60:97:0f:39:4a:a3:49:b1:9f:74:61:5d:c9:f7:d7:
a2:de:0d:c7:23:16:fa:90:b4:63:cd:61:97:22:ae:f2:ca:df:
f6:ae:45:9f:14:3a:97:7e:c5:ba:c2:96:2d:65:c4:fa:e5:9b:
3a:56:29:51:80:77:d8:65:e2:68:06:e2:c6:68:55:34:02:82:
7c:fc:2a:62:0e:74:02:cb:f6:49:40:0b:70:d1:1b:1e:78:d3:
c8:84:d3:78:cd:6c:60:a2:6d:40:36:c3:d6:80:8d:ec:03:df:
9e:0d:fe:9f:78:b5:51:c9:1f:8e:16:fb:41:bf:9f:83:d8:fd:
d9:6e:b2:3d:3e:68:e5:60:11:30:c8:f6:fc:ed:63:e2:21:fc:
79:9f:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:15 2026 by rpki-client