Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/PFgL_Pe_x4cCpTup3idsjKRcaNk.roa
File: PFgL_Pe_x4cCpTup3idsjKRcaNk.roa (raw, json)
Hash identifier: lmyoRV0TBo0uE/3jOYE/ETw1GIrHTxZRt328XxGOIkk=
Subject key identifier: 3C:58:0B:FC:F7:BF:C7:87:02:A5:3B:A9:DE:27:6C:8C:A4:5C:68:D9
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019FEACD9BBFFEDD35F79AC53A649D63A6D0
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/PFgL_Pe_x4cCpTup3idsjKRcaNk.roa
Signing time: Mon 10 Aug 2026 08:32:51 +0000
ROA not before: Mon 10 Aug 2026 08:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212865
IP address blocks: 130.78.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:cd:9b:bf:fe:dd:35:f7:9a:c5:3a:64:9d:63:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Aug 10 08:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c580bfcf7bfc78702a53ba9de276c8ca45c68d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:70:14:e3:97:0b:e5:f8:c0:0b:12:f9:4c:
3e:54:af:17:d1:f3:cc:02:68:0b:6b:67:36:a9:5c:
aa:6c:4b:3c:7b:57:7f:88:14:62:e3:50:34:49:e0:
d2:81:8c:be:83:38:21:86:82:5e:c7:25:87:59:2a:
0d:a5:57:72:f5:11:3f:4e:7d:a9:93:f5:f5:a7:f0:
92:71:fe:15:65:b9:bb:ea:6a:87:e0:88:61:1c:70:
44:5a:80:08:3c:da:36:25:68:d6:da:86:ab:fb:98:
39:48:cd:e6:03:eb:45:b9:66:17:1d:9e:e0:17:e4:
08:09:86:fd:47:4a:4d:22:d0:42:78:e4:fc:4f:e5:
7c:a3:fa:30:a8:f0:d4:2b:2f:bc:e9:ae:b3:ff:bd:
20:92:af:23:e1:f8:81:fe:65:77:02:d9:c2:95:19:
b0:03:8f:18:2f:d1:a6:6b:bf:3d:5c:70:c0:b9:8f:
36:cd:08:ad:28:c1:e3:f9:c6:65:d7:70:44:bb:ec:
33:e9:8d:17:5c:c9:8e:4c:f7:fb:87:ca:9f:8d:b0:
bf:ae:b0:1c:71:f2:52:85:41:5e:07:b3:4f:64:c3:
86:5d:88:1e:f8:da:73:97:9d:29:b3:c7:cf:5c:df:
ab:1e:b7:44:3d:d3:11:a3:64:ac:a9:e9:65:54:c3:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:0B:FC:F7:BF:C7:87:02:A5:3B:A9:DE:27:6C:8C:A4:5C:68:D9
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/PFgL_Pe_x4cCpTup3idsjKRcaNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:f4:8f:c1:eb:ce:70:d7:64:ee:e7:50:d5:f1:69:03:40:14:
6a:e7:1d:7f:df:27:fc:2b:ab:60:c0:4d:d7:1d:ad:15:00:14:
8f:9a:94:6a:35:6f:2f:b2:6e:12:a3:b4:87:ba:3e:ac:ea:7d:
e5:ad:5a:9e:b7:9d:ee:b6:06:57:4b:d7:1d:37:a8:6f:40:de:
f6:75:66:7e:87:48:0e:ba:0c:a0:cd:34:2a:34:e6:86:52:1d:
3d:d2:ea:68:a2:5a:0d:b3:47:09:0b:84:80:2d:2c:29:74:02:
56:f6:91:a4:87:a9:27:2a:d5:89:5a:a6:52:39:e0:7b:d1:f5:
e6:3d:f0:8c:b8:1c:95:93:21:2a:11:79:ef:d1:ee:22:c5:87:
3e:34:0a:ab:ce:c7:4b:63:30:96:bb:13:0b:58:7b:ff:7c:74:
8c:eb:e1:7e:b9:46:4f:87:44:64:cd:c7:e0:e7:6b:c8:ad:e4:
89:c0:c4:8b:cd:0d:e3:f4:9b:01:e5:e5:4d:68:80:63:d9:36:
40:86:ff:7a:fa:0e:8e:32:8c:dc:a7:93:c6:ae:09:10:b6:63:
b9:ef:24:4c:a9:da:ec:18:91:01:b4:80:26:13:d5:35:50:fb:
df:62:d7:84:a3:21:28:ba:99:70:9b:ad:98:ae:f1:be:b3:fa:
8f:32:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:09 2026 by rpki-client