Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/PjXn4QKAdMOghKALRISTm4-IqL0.roa
File: PjXn4QKAdMOghKALRISTm4-IqL0.roa (raw, json)
Hash identifier: h+icQLZcnaE6F7dT/QwpZl3/e8E8hD66lAljtUEwLoo=
Subject key identifier: 3E:35:E7:E1:02:80:74:C3:A0:84:A0:0B:44:84:93:9B:8F:88:A8:BD
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 01A0F68138C6E91D43BC71835A99CC684B8A
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/PjXn4QKAdMOghKALRISTm4-IqL0.roa
Signing time: Thu 01 Oct 2026 08:07:38 +0000
ROA not before: Thu 01 Oct 2026 08:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45014
IP address blocks: 80.93.160.0/20 maxlen: 24
84.246.152.0/21 maxlen: 24
92.60.96.0/20 maxlen: 24
159.253.56.0/21 maxlen: 24
185.18.32.0/24 maxlen: 24
185.18.34.0/23 maxlen: 23
185.184.236.0/22 maxlen: 22
194.150.252.0/23 maxlen: 24
217.172.128.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 48
2a02:cb0::/32 maxlen: 40
2a03:f2c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:81:38:c6:e9:1d:43:bc:71:83:5a:99:cc:68:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Oct 1 08:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e35e7e1028074c3a084a00b4484939b8f88a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:a2:03:5b:65:3e:36:6e:3f:1a:dd:ff:cf:
8a:ee:4a:c2:35:3a:f9:19:a2:a2:e1:24:a1:a4:1f:
a4:9b:ff:85:a2:ec:be:46:bb:54:6b:1c:87:35:b2:
23:6f:9f:7b:65:5a:87:66:80:b5:04:6a:2c:ff:04:
38:3e:79:da:e4:f5:81:4a:89:5b:91:61:d0:0c:28:
80:42:ba:bc:e2:1c:f5:57:c5:38:ac:25:e9:3e:e2:
a0:e9:e2:eb:0e:b2:f4:23:7a:cf:6c:a9:5a:df:e2:
fe:80:c9:c2:4c:56:36:b9:e8:e2:72:ba:61:ab:88:
47:ef:a3:cf:6b:92:01:e2:ba:04:0a:73:e2:64:2e:
af:7a:a0:ac:0b:6e:96:01:72:f1:c1:4f:aa:6d:0e:
db:22:17:48:f1:f6:a6:18:52:87:61:34:92:c6:09:
b7:20:0c:a5:66:fb:1f:a2:a6:16:44:22:e0:63:48:
d2:cf:dd:f2:b7:5b:d3:8c:9c:89:f9:12:8a:ed:04:
25:90:16:b5:a6:7c:d6:73:45:18:6a:d6:5c:ee:5e:
9b:c6:2b:8a:1c:9a:3a:96:79:15:cf:aa:bd:6c:cc:
24:8a:f4:d0:64:20:a5:cb:1f:da:6f:5b:73:a5:20:
1e:ce:fb:85:93:b4:d2:a5:d0:d3:17:13:15:c0:f2:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:35:E7:E1:02:80:74:C3:A0:84:A0:0B:44:84:93:9B:8F:88:A8:BD
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/PjXn4QKAdMOghKALRISTm4-IqL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.160.0/20
84.246.152.0/21
92.60.96.0/20
159.253.56.0/21
185.18.32.0/24
185.18.34.0/23
185.184.236.0/22
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
2a02:cb0::/32
2a03:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
32:33:04:26:36:ed:74:bd:c3:3c:35:3d:f5:f7:7a:04:55:b6:
fc:d5:59:0e:c9:09:ac:e7:6c:d8:ce:e4:1f:b2:06:7f:61:f0:
a2:89:f3:7a:6b:f6:c2:95:97:af:3c:6f:16:e5:e7:7e:0b:fd:
af:46:a2:b1:42:d6:55:81:1e:6e:d8:bd:05:44:53:05:5c:8e:
08:5b:82:0f:d1:a3:2e:05:34:89:d2:7d:a3:cc:76:68:84:0c:
e4:e1:26:f4:14:d0:6f:74:ee:83:92:8d:fd:75:1b:f1:6f:2c:
b1:71:aa:83:71:a4:ac:52:f9:13:f6:8a:58:ce:83:51:8a:50:
39:bd:fc:25:7e:7b:36:96:0f:b2:14:76:54:84:be:cc:d3:0f:
11:3c:42:4c:af:87:5c:bb:e6:47:a1:ff:3b:d5:3f:b7:b4:e0:
e0:0c:47:30:74:bb:86:c5:51:fe:90:f5:32:9a:79:c3:5f:73:
d8:28:44:6d:29:bd:68:2f:5e:c0:e9:8e:b3:39:af:bc:51:6c:
51:bc:22:e6:7c:2f:7d:76:83:0e:91:4f:aa:89:1a:5c:ba:4e:
f2:b0:79:4e:c8:fe:fc:b4:1d:bb:b5:7b:62:66:98:18:05:86:
b5:6f:3a:80:a5:22:7e:d8:20:37:9d:d0:42:7c:77:db:d6:0d:
04:a8:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:37:17 2026 by rpki-client