Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/Peen3CtettZzC0PJ5pu05ABu0FY.roa
File: Peen3CtettZzC0PJ5pu05ABu0FY.roa (raw, json)
Hash identifier: 5jkaTX/MH1OVfcjWCZ4E7LeORQN6ZsvE/s7yqGM/joo=
Subject key identifier: 3D:E7:A7:DC:2B:5E:B6:D6:73:0B:43:C9:E6:9B:B4:E4:00:6E:D0:56
Certificate issuer: /CN=c90382751c4da66836a70b12e6f5f9f609037097
Certificate serial: 019F2368362E0526A7C3CD1F0D9C1BECEEC0
Authority key identifier: C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/Peen3CtettZzC0PJ5pu05ABu0FY.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25048
IP address blocks: 81.90.128.0/20 maxlen: 24
2a00:e20::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:2e:05:26:a7:c3:cd:1f:0d:9c:1b:ec:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90382751c4da66836a70b12e6f5f9f609037097
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de7a7dc2b5eb6d6730b43c9e69bb4e4006ed056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:49:22:55:6e:65:c4:69:46:9a:c5:13:e8:
df:cd:5a:eb:68:4f:98:91:e9:bc:1c:f3:c8:a8:2f:
40:74:a7:5f:0c:10:f0:57:9c:e5:e2:b4:2c:d7:67:
3d:00:69:04:6f:89:20:99:34:93:99:49:8f:df:2f:
ed:90:6e:57:b8:10:c0:2b:90:d4:d1:7e:94:50:1f:
4c:52:69:0b:6c:f9:f3:e8:8c:97:01:97:97:23:03:
49:dc:f2:31:56:b7:3d:0e:a5:1a:f7:d3:16:84:65:
a4:99:af:2a:89:f7:06:7c:28:af:b6:fd:49:f2:6f:
dd:b4:71:61:9a:51:61:27:14:bb:aa:a6:b6:de:6f:
b2:a6:b5:3e:14:de:b0:17:12:0c:8e:a8:74:d7:22:
f6:f6:3b:b9:14:e9:27:84:b1:d9:01:cc:25:26:58:
09:8e:01:aa:51:6a:5e:71:e3:f0:f2:9d:29:fe:a0:
82:18:51:22:93:79:51:0b:bb:f0:0c:03:c5:45:2b:
73:45:9c:a3:27:c2:e2:88:08:c3:93:9a:07:44:83:
e8:73:28:72:6a:d9:94:ff:2c:00:45:fd:e8:07:54:
5e:05:ed:53:65:c8:a0:7b:83:f2:50:91:68:d1:58:
80:34:a4:f7:6c:88:7b:a5:1c:0c:06:0b:a8:f4:0e:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:A7:DC:2B:5E:B6:D6:73:0B:43:C9:E6:9B:B4:E4:00:6E:D0:56
X509v3 Authority Key Identifier:
keyid:C9:03:82:75:1C:4D:A6:68:36:A7:0B:12:E6:F5:F9:F6:09:03:70:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQOCdRxNpmg2pwsS5vX59gkDcJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/Peen3CtettZzC0PJ5pu05ABu0FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/yQOCdRxNpmg2pwsS5vX59gkDcJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.128.0/20
IPv6:
2a00:e20::/29
Signature Algorithm: sha256WithRSAEncryption
92:66:f8:fd:af:81:35:84:36:a4:34:4d:50:80:d3:3d:02:b3:
4f:39:8b:31:0f:83:d8:a4:b4:59:f7:b4:d7:89:10:94:7c:01:
2c:5b:1e:dc:54:98:80:e5:07:db:91:e0:04:9b:be:b7:b2:1d:
dc:fe:c0:a3:e3:f8:83:8a:1a:8a:4e:67:29:8a:04:7e:22:a5:
e1:9c:44:73:16:9f:2d:00:93:d2:e9:ab:91:6d:74:b8:0f:1c:
29:fa:90:3a:a9:d6:8d:13:fb:e2:67:07:86:24:0e:1c:e3:e7:
f5:7c:c1:1d:4f:2f:04:5e:73:56:61:56:eb:3b:49:00:8c:b9:
23:7d:f3:7c:a4:d4:39:19:46:ea:ef:f1:fc:69:f8:41:3c:82:
d5:c3:d6:7d:9a:1e:17:4b:98:b6:5f:a6:7e:bd:07:8b:27:db:
d1:6c:62:2a:d2:e0:fc:c1:dc:88:e8:26:2d:d9:0e:76:af:82:
33:6b:95:c6:71:5b:28:ee:0a:4b:c1:79:26:5a:8e:8c:09:83:
ed:39:c0:5a:fc:20:77:dc:b9:16:2b:73:5d:6d:dc:d3:78:97:
8d:fe:30:0d:8d:15:f1:63:c9:7d:6b:f8:e1:74:82:3d:af:17:
28:03:df:22:64:12:37:33:e9:29:c2:55:0c:d1:62:c9:2d:91:
ec:6b:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:30 2026 by rpki-client