Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/PxnTuznRRPnTtD95MBnkEkGIaX4.roa
File: PxnTuznRRPnTtD95MBnkEkGIaX4.roa (raw, json)
Hash identifier: X1si/MvNuRKn6WYCzUjbbp5bWEtLkuTOj59peP9essI=
Subject key identifier: 3F:19:D3:BB:39:D1:44:F9:D3:B4:3F:79:30:19:E4:12:41:88:69:7E
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A153447A5C9DFA632EE99E8880ADD2A094
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/PxnTuznRRPnTtD95MBnkEkGIaX4.roa
Signing time: Mon 19 Oct 2026 08:25:58 +0000
ROA not before: Mon 19 Oct 2026 08:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:44:7a:5c:9d:fa:63:2e:e9:9e:88:80:ad:d2:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f19d3bb39d144f9d3b43f793019e4124188697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:b4:4e:05:a8:b0:48:1b:fb:76:fc:be:38:
fc:27:26:8c:be:90:86:1b:19:d1:13:22:cf:6f:38:
96:4c:cf:0c:fb:e9:56:fa:dc:70:6c:fc:a1:31:71:
09:6b:79:72:7b:e3:89:a7:eb:5b:6c:d4:f2:bf:2f:
87:7b:82:0b:6f:49:74:ef:0f:92:6a:13:ad:df:1d:
d0:a2:f8:58:7d:c7:40:d5:eb:45:50:33:5e:3e:38:
43:0a:f6:2f:7f:14:6b:a1:13:53:b0:df:3a:92:b5:
a8:84:48:d9:56:2a:fb:69:0d:0a:cf:2b:9c:7b:a5:
10:34:f1:09:59:42:da:b9:9d:ac:b7:aa:a4:21:35:
9d:24:d8:05:27:d3:40:1d:65:34:2c:da:80:b9:d7:
39:91:6d:6a:7f:b1:30:e3:31:fb:56:f1:dd:90:94:
43:6f:ff:75:3a:6c:34:be:09:78:8f:09:54:ce:f2:
f4:e8:3e:41:a5:88:b7:a6:38:f2:c0:b0:b6:1f:06:
8a:06:bd:4c:be:6c:10:ac:81:ec:78:99:b6:25:1b:
e7:80:8b:e2:28:4e:17:23:a1:dd:af:1d:6e:5c:e2:
6c:a7:90:9d:ca:99:f9:00:ce:9b:99:68:94:13:90:
7b:71:73:65:50:04:e0:4e:32:2c:ee:ce:41:64:7b:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:D3:BB:39:D1:44:F9:D3:B4:3F:79:30:19:E4:12:41:88:69:7E
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/PxnTuznRRPnTtD95MBnkEkGIaX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:28:61:df:2e:65:cb:64:3f:0a:ac:59:30:33:be:df:ce:de:
e5:30:07:ef:cc:13:21:7b:29:7e:cd:56:b5:71:15:3d:b7:c1:
71:1b:cd:8e:16:45:cf:da:08:62:d1:13:b4:30:80:6d:4d:a7:
3f:5a:1a:1f:6d:bc:bd:c3:01:1a:51:e2:1f:c5:90:2b:16:ca:
04:11:d9:e4:af:e4:80:e8:70:0b:b6:fe:37:80:db:a5:33:8b:
f1:6c:16:37:f2:b2:b0:72:40:64:c8:15:b7:aa:98:0f:d9:e2:
26:14:cc:66:4a:7f:b9:40:cb:e1:4c:4b:25:69:46:3c:26:e8:
65:35:9a:e2:ce:c8:25:dc:ed:91:89:73:4e:aa:05:aa:87:a3:
99:00:33:53:99:d8:d0:6c:10:72:8e:d6:0b:fb:01:72:18:74:
1b:48:10:b6:8e:30:e0:7b:b5:4b:82:03:42:40:fe:7b:a9:d1:
30:13:02:61:30:ce:57:2b:7c:bd:3d:41:a2:30:36:02:e0:3c:
f4:e0:6c:76:bb:d1:92:6a:47:85:45:53:4c:72:0c:03:eb:6b:
9c:ed:a7:ca:e4:da:b2:58:c7:76:f4:ed:ed:2b:c7:24:ec:a8:
2f:94:46:8c:4d:24:7f:65:56:a4:90:95:3c:97:6b:e5:e4:13:
28:a9:c8:e3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaFTRHpcnfpjLumeiICt0qCUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNjljZjY5M2VmYzEwMmM5MzdmYWNhN2JhMDljY2NhZWM1
NzQ5NDgwHhcNMjYxMDE5MDgyNTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjE5ZDNiYjM5ZDE0NGY5ZDNiNDNmNzkzMDE5ZTQxMjQxODg2OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ay0TgWosEgb+3b8vjj8JyaMvpCG
GxnREyLPbziWTM8M++lW+txwbPyhMXEJa3lye+OJp+tbbNTyvy+He4ILb0l07w+S
ahOt3x3QovhYfcdA1etFUDNePjhDCvYvfxRroRNTsN86krWohEjZVir7aQ0Kzyuc
e6UQNPEJWULauZ2st6qkITWdJNgFJ9NAHWU0LNqAudc5kW1qf7Ew4zH7VvHdkJRD
b/91Omw0vgl4jwlUzvL06D5BpYi3pjjywLC2HwaKBr1MvmwQrIHseJm2JRvngIvi
KE4XI6Hdrx1uXOJsp5Cdypn5AM6bmWiUE5B7cXNlUATgTjIs7s5BZHv6KQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFD8Z07s50UT507Q/eTAZ5BJBiGl+MB8GA1UdIwQY
MBaAFCNpz2k+/BAsk3+sp7oJzMrsV0lIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEt
MWRmZDVkOTc3YWRiLzEvUHhuVHV6blJSUG5UdEQ5NU1CbmtFa0dJYVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82MGViMTktOTVmYy00ZDcxLWJjOTEtMWRmZDVkOTc3YWRi
LzEvSTJuUGFUNzhFQ3lUZjZ5bnVnbk15dXhYU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg02wDAN
BgkqhkiG9w0BAQsFAAOCAQEAMihh3y5ly2Q/CqxZMDO+387e5TAH78wTIXspfs1W
tXEVPbfBcRvNjhZFz9oIYtETtDCAbU2nP1oaH228vcMBGlHiH8WQKxbKBBHZ5K/k
gOhwC7b+N4DbpTOL8WwWN/KysHJAZMgVt6qYD9niJhTMZkp/uUDL4UxLJWlGPCbo
ZTWa4s7IJdztkYlzTqoFqoejmQAzU5nY0GwQco7WC/sBchh0G0gQto4w4Hu1S4ID
QkD+e6nRMBMCYTDOVyt8vT1BojA2AuA89OBsdrvRkmpHhUVTTHIMA+trnO2nyuTa
sljHdvTt7SvHJOyoL5RGjE0kf2VWpJCVPJdr5eQTKKnI4w==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:34 2026 by rpki-client