Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa
File: PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa (raw, json)
Hash identifier: fixeB4WnU7AtqSg73SbkUGJ+qRDw66pRPKdzTxkrzIU=
Subject key identifier: 3D:F5:48:A5:FD:F6:E3:75:A5:08:9F:40:3B:4C:8B:6D:0D:AF:18:F6
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019F64C55CA3BC6229B64FF58E94B8804B61
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa
Signing time: Wed 15 Jul 2026 07:54:43 +0000
ROA not before: Wed 15 Jul 2026 07:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 94.26.3.0/24 maxlen: 24
94.26.32.0/24 maxlen: 24
94.26.37.0/24 maxlen: 24
94.26.41.0/24 maxlen: 24
94.26.42.0/24 maxlen: 24
94.26.68.0/24 maxlen: 24
94.26.69.0/24 maxlen: 24
94.26.70.0/24 maxlen: 24
94.26.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:c5:5c:a3:bc:62:29:b6:4f:f5:8e:94:b8:80:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Jul 15 07:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3df548a5fdf6e375a5089f403b4c8b6d0daf18f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:c9:a8:71:69:62:0d:f9:b4:77:1c:cb:55:
f6:ed:d8:aa:91:4b:5b:d2:c6:61:cd:ed:27:af:94:
64:b6:4f:52:46:a6:dc:d3:57:df:73:37:9b:9e:90:
e3:4a:b4:a5:dd:72:11:b0:87:3f:a7:b2:16:4f:1a:
89:39:00:9b:12:97:df:7d:c0:59:2a:13:58:a8:ae:
65:9e:e6:6e:25:cf:7f:7e:98:31:89:45:67:75:d4:
b9:98:4c:f4:3b:a6:2f:62:60:c8:00:02:16:17:a5:
56:bd:6b:08:28:03:c6:2f:4c:87:d5:ad:28:9b:e2:
b9:13:bf:f3:c9:19:80:0b:4b:7c:12:1c:fc:92:bc:
70:ff:f2:63:c8:ba:85:4b:f3:99:c3:50:31:48:ae:
dd:bc:6d:9c:80:70:7b:84:20:5d:c0:e8:9e:02:50:
26:94:c7:09:84:2f:2e:2b:7c:fa:29:44:31:02:58:
5f:1a:4b:36:fa:56:e9:6d:a6:8d:3a:23:c6:bd:dc:
0e:d9:21:e9:62:ff:92:2d:aa:25:a6:2f:a0:cf:f2:
d3:58:58:ac:8f:21:ed:6f:bb:47:fc:ed:e7:31:5a:
da:ad:48:18:67:1c:06:c3:97:5e:0f:f9:33:27:33:
a9:73:15:5b:27:99:a7:ce:20:f0:80:42:3d:c5:90:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:48:A5:FD:F6:E3:75:A5:08:9F:40:3B:4C:8B:6D:0D:AF:18:F6
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/PfVIpf3243WlCJ9AO0yLbQ2vGPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.3.0/24
94.26.32.0/24
94.26.37.0/24
94.26.41.0-94.26.42.255
94.26.68.0-94.26.70.255
94.26.88.0/24
Signature Algorithm: sha256WithRSAEncryption
73:48:6d:ea:b5:57:09:48:04:f1:60:e9:45:8d:7f:00:1a:a5:
41:9b:3a:36:f8:5e:a8:72:96:13:f5:b1:91:e4:03:90:db:d7:
ba:03:53:1a:7a:3d:7a:bc:46:3a:c7:60:9b:cf:19:7a:98:00:
81:28:6b:91:84:1b:32:26:14:4f:9e:85:15:0e:4e:55:92:d2:
0c:9d:39:32:c9:dc:38:c1:1c:99:57:50:1f:b4:97:09:74:5e:
e5:c4:ec:01:a9:da:0c:90:c9:33:fa:a5:32:d2:99:19:e6:f3:
12:6a:2c:6a:b3:67:17:d4:d3:14:7c:3f:5c:fd:83:be:c9:9e:
a9:ba:97:e1:58:2e:e7:e4:26:75:39:19:d6:bc:ac:a7:95:6d:
37:9b:df:17:4b:51:f4:2a:1f:b9:8e:64:ca:d1:f6:d7:2b:de:
c9:65:80:fe:12:77:c8:5e:ad:25:82:65:58:16:f3:b9:1b:45:
6e:67:c6:8b:f7:58:6f:43:a3:a1:7d:9c:0c:18:3e:0f:5a:61:
b6:92:78:95:9d:ca:e2:1a:0c:92:98:55:a4:72:c3:43:1c:ae:
cd:fe:d2:d9:af:80:8d:20:da:8e:d3:9c:66:9a:1a:34:dc:1e:
98:d8:82:ef:9e:a7:e6:4b:2a:39:16:94:6a:39:7b:b8:0a:54:
40:5b:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:12 2026 by rpki-client