Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa
File: pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa (raw, json)
Hash identifier: 6XnmhOJq3GAmn5wQEuoQfthOvhyAwUf459ZiJFQdrrM=
Subject key identifier: A6:7C:86:33:88:1D:DA:41:7C:10:99:0E:E6:05:99:F6:37:A8:C8:5D
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019FB7FA49CAB5E876E2E86C5DF08EBCA177
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa
Signing time: Fri 31 Jul 2026 11:41:01 +0000
ROA not before: Fri 31 Jul 2026 11:41:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207141
IP address blocks: 185.164.252.0/22 maxlen: 24
185.164.252.0/24 maxlen: 24
185.164.253.0/24 maxlen: 24
2a0b:1b40::/29 maxlen: 29
2a0b:b400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:fa:49:ca:b5:e8:76:e2:e8:6c:5d:f0:8e:bc:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jul 31 11:41:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a67c8633881dda417c10990ee60599f637a8c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:8f:89:05:9e:1a:d0:34:84:c9:04:19:e7:
49:7c:b5:01:53:68:b6:e4:2a:a7:6d:92:f4:8d:74:
a4:92:21:b6:57:a8:d9:41:d5:18:1b:f5:71:84:52:
33:8a:1a:a8:46:8c:dd:29:88:1e:9d:9f:bf:1e:03:
dd:60:46:b5:44:6a:97:19:53:71:e0:28:41:7a:5d:
49:82:ea:41:7f:4e:f8:3a:40:e1:b0:07:67:16:f0:
db:5d:42:78:8c:6a:86:49:b3:81:c6:b0:a8:39:e6:
54:ac:86:cd:13:d7:89:d7:53:60:14:37:1d:73:e1:
fa:b1:96:c4:88:7a:30:9c:49:30:f0:c7:19:f0:fc:
6c:8a:a9:96:46:34:5a:cc:ee:99:28:19:ee:8f:55:
16:82:b0:e9:fc:43:e9:a7:c0:06:ab:3a:2c:2b:75:
ff:6d:90:55:6d:9a:53:aa:05:c2:7e:c1:f3:60:bc:
fc:1e:4a:18:47:f6:6f:52:0f:0a:2f:1f:0b:05:84:
72:84:3b:0b:a4:86:90:e4:c6:d8:96:ca:21:0a:3b:
38:f4:7b:ad:a8:49:6f:eb:e2:42:a9:24:57:98:77:
60:a2:97:ad:92:19:3d:f8:ec:1c:17:d9:f3:b4:11:
e6:5f:68:49:eb:bd:8c:6a:6f:94:e5:9b:8c:c8:ea:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:86:33:88:1D:DA:41:7C:10:99:0E:E6:05:99:F6:37:A8:C8:5D
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/pnyGM4gd2kF8EJkO5gWZ9jeoyF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.252.0/22
IPv6:
2a0b:1b40::/29
2a0b:b400::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ca:7c:a5:3b:e4:be:34:94:05:f0:ac:73:22:f6:72:fd:a8:
5f:ac:ee:18:5f:52:d1:c1:46:07:24:19:bc:ba:25:35:30:11:
67:f3:59:67:d0:fa:b9:44:27:d7:02:10:00:5b:55:b9:ba:81:
b1:51:44:5b:57:f6:32:04:8d:20:0f:0d:c0:14:9c:4d:48:72:
31:54:bd:63:c1:87:18:2c:87:3c:9e:40:62:11:5e:f4:07:01:
27:cd:51:e2:5f:4b:76:f3:64:17:f8:7e:ec:0e:5b:5a:d1:45:
9b:2a:bc:eb:4a:b1:d1:bc:b5:99:b6:f7:5d:dc:33:a0:0c:e6:
6c:6a:09:00:49:48:96:f9:73:1b:e0:09:a5:c2:c0:a0:16:88:
12:70:a9:de:4e:41:40:ce:8b:a6:15:cd:c5:0f:d9:f2:ec:e0:
79:e4:df:07:e0:c1:b7:0e:6a:e2:3a:1e:96:44:38:05:fb:8e:
cb:30:01:da:be:aa:96:74:fb:5f:fe:57:3f:6c:15:aa:90:9b:
ea:63:7e:45:2a:35:7c:59:df:d0:62:97:75:1b:11:15:c1:fb:
20:0e:25:35:7d:7d:49:2e:a0:e3:e6:ef:1a:0e:33:ca:cf:5d:
6e:33:96:50:77:30:fa:e4:47:ae:37:95:9e:2d:86:4c:83:15:
12:d2:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:32 2026 by rpki-client