Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/PAxEQAQm5UDepwYKV4SeM_WVtCQ.roa
File: PAxEQAQm5UDepwYKV4SeM_WVtCQ.roa (raw, json)
Hash identifier: 9u7nBYVGcZa0Z150/6Hd98bLHIgTGqB9DOZGHEtDBH4=
Subject key identifier: 3C:0C:44:40:04:26:E5:40:DE:A7:06:0A:57:84:9E:33:F5:95:B4:24
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A03992A966BEF4E39440A6D488059A44CF
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/PAxEQAQm5UDepwYKV4SeM_WVtCQ.roa
Signing time: Tue 25 Aug 2026 15:38:27 +0000
ROA not before: Tue 25 Aug 2026 15:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41457
IP address blocks: 89.36.33.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a0c:2505:1000::/48 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6780:2::/48 maxlen: 48
2a14:6780:3::/48 maxlen: 48
2a14:6780:4::/48 maxlen: 48
2a14:6782::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:92:a9:66:be:f4:e3:94:40:a6:d4:88:05:9a:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 25 15:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c0c44400426e540dea7060a57849e33f595b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:43:99:99:de:54:97:a7:4c:1b:e8:81:31:
f7:da:d3:41:3c:d9:4a:85:ec:90:65:ec:2a:44:4a:
5a:e3:cb:96:f2:98:42:5b:f0:93:cf:d7:88:18:88:
fc:c4:9b:25:fd:a3:0d:95:1a:19:6f:49:ea:21:38:
09:b8:64:e9:88:df:18:a8:76:d0:11:3c:6a:6b:7c:
9a:b3:80:31:a6:41:93:9e:e6:0a:f1:9f:2b:21:20:
b0:3c:10:d6:29:3b:e4:d9:00:73:b0:a1:6f:7e:30:
d1:a3:72:95:a2:85:be:a9:0f:94:ba:9e:80:e8:56:
99:f8:1e:e2:38:4c:bd:10:33:21:fd:15:2e:19:34:
b1:13:b9:f4:40:e6:b7:93:c8:a1:57:e4:3f:4d:22:
ae:a4:4c:a4:72:7b:78:51:96:0e:84:26:35:d4:de:
f4:11:71:a5:7f:a8:4c:f5:22:25:ea:fd:75:74:79:
0e:37:2b:32:68:97:a9:1d:40:7b:54:23:58:1e:fc:
16:7e:a0:3d:02:e0:e1:3a:15:b0:70:e9:4c:f6:15:
41:b0:0f:0c:7c:5a:54:97:7b:53:29:7b:69:68:c2:
f9:48:2a:7b:c4:85:c1:0c:ed:99:4c:35:50:e7:a5:
21:f9:c7:0b:29:9a:f4:ae:f9:b9:54:c5:ff:4f:9b:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:44:40:04:26:E5:40:DE:A7:06:0A:57:84:9E:33:F5:95:B4:24
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/PAxEQAQm5UDepwYKV4SeM_WVtCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
194.46.60.0/24
IPv6:
2a0c:2505:1000::/48
2a14:6780::/32
2a14:6782::/48
Signature Algorithm: sha256WithRSAEncryption
10:d0:b6:a0:af:fa:5a:76:e9:fb:cd:a4:45:9a:1c:6a:a6:e0:
76:7e:71:e3:ec:63:d0:24:52:f6:b6:ed:bf:74:8a:16:d1:d6:
3d:68:ef:42:6d:0f:2d:d2:40:c2:67:49:bb:be:bf:c1:13:5d:
03:a1:df:1e:56:92:dd:6b:6c:17:be:c3:97:c7:69:19:b5:0b:
7b:37:d1:dd:5b:cb:81:a5:52:b6:e5:c2:e3:8d:a1:63:da:ac:
e3:d9:64:ca:ab:62:8b:47:ba:06:26:fc:ea:84:30:b4:6e:83:
49:b0:d6:28:cd:41:2b:80:7c:ae:e3:64:8b:76:d0:06:7a:a8:
d2:13:7f:b2:a6:3e:1f:8b:56:45:0e:44:3a:7e:ab:c7:00:9d:
6d:52:bd:ab:79:7b:7c:b9:fa:aa:9b:45:01:c8:18:49:c8:62:
cb:03:90:80:f9:1f:fe:ef:17:2c:bf:41:3a:41:20:2b:cd:84:
71:88:1e:01:be:44:be:e0:c8:a5:e4:e3:12:2b:66:46:4e:ae:
65:fb:07:6e:5e:48:2c:63:71:c1:f1:53:fd:02:53:09:f2:a8:
94:f9:68:dd:73:27:43:dc:8b:dc:61:05:d7:ad:69:2a:77:5c:
28:92:3e:50:85:3e:a1:1b:28:1b:fb:3d:ac:d7:46:4e:bb:90:
b2:d3:1d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:33:40 2026 by rpki-client