Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/PHgxrgraUaElkf9xNgKO7Z8MRYY.roa
File: PHgxrgraUaElkf9xNgKO7Z8MRYY.roa (raw, json)
Hash identifier: i6BEpT1L7gHNYnuFTObStxne07o+H91lP5V5SxBVUXQ=
Subject key identifier: 3C:78:31:AE:0A:DA:51:A1:25:91:FF:71:36:02:8E:ED:9F:0C:45:86
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 01A0E8AC326ED53FC0C6F68C745BCB9A448A
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/PHgxrgraUaElkf9xNgKO7Z8MRYY.roa
Signing time: Mon 28 Sep 2026 15:39:54 +0000
ROA not before: Mon 28 Sep 2026 15:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29670
IP address blocks: 185.177.204.0/22 maxlen: 24
192.109.21.0/24 maxlen: 24
192.109.42.0/24 maxlen: 24
192.109.82.0/24 maxlen: 24
193.29.188.0/24 maxlen: 24
217.197.80.0/20 maxlen: 24
2001:67c:1400::/45 maxlen: 48
2a0a:4580::/29 maxlen: 48
2a0a:4587:2000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:ac:32:6e:d5:3f:c0:c6:f6:8c:74:5b:cb:9a:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Sep 28 15:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c7831ae0ada51a12591ff7136028eed9f0c4586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:f7:ee:e1:85:6b:92:b9:56:52:40:6c:2f:
79:47:45:73:32:f0:65:ae:51:b2:c5:bf:fa:77:37:
8a:0d:db:04:19:d2:0a:a6:6d:1a:1b:70:b4:1a:e1:
d9:d8:11:b1:47:76:c9:fc:30:b2:5d:dc:79:67:36:
68:c3:9b:84:a6:0d:eb:42:93:de:bd:7c:d2:9c:9f:
f0:dd:8c:8e:b1:9e:4a:90:73:18:e8:cc:87:42:58:
23:89:3c:f7:c8:66:42:de:fd:b7:6f:0e:21:47:29:
f1:65:0e:2d:f8:d0:d6:a7:72:3a:6e:43:a7:c6:df:
d0:96:b9:05:c9:2f:df:c2:9c:04:03:23:3b:91:2f:
fa:3e:ac:f3:c4:fd:a2:59:35:44:6e:95:53:60:c5:
b4:ae:0e:a1:9e:7e:01:00:01:3b:23:7f:19:9e:ae:
e4:df:94:6a:6e:d0:b3:f9:f1:d9:10:a9:7d:6c:ee:
e4:2e:2f:41:de:52:e9:6d:4e:54:e1:e6:85:f2:76:
b4:f9:37:2b:ed:a0:e2:53:d4:c2:74:65:26:6a:e9:
4f:ac:e1:27:96:4b:cd:4f:74:33:58:63:1d:60:74:
dd:b9:55:65:c0:2d:fd:9a:3e:78:5b:ff:1e:82:6f:
ec:98:84:42:c8:c9:0d:8c:ec:82:38:75:93:b6:31:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:78:31:AE:0A:DA:51:A1:25:91:FF:71:36:02:8E:ED:9F:0C:45:86
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/PHgxrgraUaElkf9xNgKO7Z8MRYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.204.0/22
192.109.21.0/24
192.109.42.0/24
192.109.82.0/24
193.29.188.0/24
217.197.80.0/20
IPv6:
2001:67c:1400::/45
2a0a:4580::/29
Signature Algorithm: sha256WithRSAEncryption
60:cb:8c:36:8b:b9:c3:a3:13:e1:8e:6b:0b:68:ab:47:94:b7:
f3:b5:44:e4:b8:44:62:da:2b:44:4f:17:5a:74:6d:b8:7b:92:
86:85:09:5c:20:21:8e:a0:17:fc:df:e8:75:f0:45:f1:4c:12:
40:f2:c3:9c:98:91:49:a4:26:21:91:9d:c6:9e:e7:37:5c:aa:
e3:44:92:5e:53:a1:1a:38:52:cf:5f:47:f2:fb:3f:b4:0b:80:
eb:6f:89:60:b6:89:3b:a8:bb:73:9b:ea:45:2b:a3:47:7a:6e:
93:c7:94:7f:de:b0:f6:55:01:70:c6:e4:4e:d1:db:39:bc:dc:
7c:38:e0:06:58:0a:06:fd:a8:43:6c:68:1e:79:d1:f7:90:9d:
d6:21:00:03:5c:dc:bd:ca:a6:ed:44:6b:45:00:84:72:c4:8e:
a9:c3:ca:7d:89:67:c4:2a:e3:4f:8e:6c:a7:ed:ac:6c:e1:9e:
d2:5a:a6:ce:ad:08:a4:71:2c:69:1f:bb:1f:40:6a:32:f0:61:
fe:fc:a2:2c:24:f1:a5:3e:97:0a:eb:a8:74:da:a5:c0:a8:ab:
a9:11:97:0d:c8:57:71:a2:28:a0:08:f8:82:4c:48:c9:4f:5c:
13:43:8c:3a:7f:52:19:57:0d:11:74:71:83:bf:76:49:dd:77:
40:c5:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:50 2026 by rpki-client