Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa
File: PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa (raw, json)
Hash identifier: GmzVV0u4SOKyF7bQ648PPO4x0f48XGEC/CDH+VzyXi8=
Subject key identifier: 3E:50:24:47:4A:7A:11:47:94:31:56:97:47:9B:8E:8E:D5:D7:0E:18
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01A084FA8C76E670C7A37B902E6A70199437
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa
Signing time: Wed 09 Sep 2026 07:03:27 +0000
ROA not before: Wed 09 Sep 2026 07:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51148
IP address blocks: 95.143.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:fa:8c:76:e6:70:c7:a3:7b:90:2e:6a:70:19:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Sep 9 07:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e5024474a7a114794315697479b8e8ed5d70e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:8c:a3:c5:5c:77:61:79:09:55:ff:6b:d7:
6e:b7:36:53:9e:fb:48:8d:36:56:8b:2f:32:03:cd:
29:f8:5a:4d:ed:49:2f:a4:32:b1:a9:6e:12:9f:a2:
20:d5:12:f0:24:19:cd:a0:79:19:a7:b0:25:b4:40:
c6:0b:7a:6d:e2:e3:10:28:84:e0:95:94:08:6f:c9:
9a:9e:cc:59:6c:7d:60:fd:94:bb:c1:27:1f:83:2e:
3c:55:9a:c1:af:f8:79:3e:56:8f:1f:7c:e3:9b:b4:
5b:c5:c3:25:35:e7:2d:b3:e3:ae:42:9f:37:87:59:
8e:6f:b7:bf:a5:d2:94:42:c7:49:04:a3:d6:ca:e3:
a7:a0:3b:81:c9:a3:32:55:2b:c3:30:b0:5a:95:05:
cb:96:65:1b:49:83:77:0e:f6:e3:c8:17:4a:c5:70:
75:04:c9:dd:4c:ea:c0:3d:4d:a1:74:83:3c:75:2a:
6d:f6:33:00:7e:36:56:45:b7:d1:54:8f:64:af:eb:
7b:2e:ca:e8:5c:04:5e:ff:cb:36:bc:fd:1e:01:69:
34:db:ff:6f:01:7b:03:d0:fc:3c:58:b5:49:29:84:
ae:52:55:0b:cb:65:17:16:ee:37:5c:51:05:0a:67:
b5:59:02:e1:bb:a3:40:33:b4:6c:d6:80:ab:87:a6:
f6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:24:47:4A:7A:11:47:94:31:56:97:47:9B:8E:8E:D5:D7:0E:18
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.101.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b7:eb:a8:0d:2d:6c:38:4a:b4:a0:58:44:02:b2:a8:a2:b4:
db:01:92:12:80:fa:bd:30:b5:cb:fd:48:b8:f9:10:f6:25:d2:
ba:65:63:69:5e:12:6d:e8:6f:22:e4:20:68:75:a3:48:29:ad:
21:bb:65:26:86:6a:c5:50:4b:7b:49:d3:1c:cb:85:f0:e7:c1:
0e:5e:ad:bc:89:44:8c:fa:e4:92:ad:33:a0:ac:a4:c5:a9:d4:
59:df:33:89:71:fa:f3:db:14:c4:4b:d9:84:f0:94:a6:68:df:
e9:bb:da:d1:5e:a4:72:dd:66:64:c9:04:cd:4f:3d:5b:75:bf:
b0:f5:dc:2c:a5:19:f7:12:4a:c7:37:04:07:3d:c5:79:fb:87:
a3:12:63:74:ca:a9:33:65:02:ae:8a:c4:be:59:3a:6a:06:ea:
8f:8f:b4:15:98:55:87:e0:0d:8e:46:98:31:18:a2:aa:27:1f:
62:10:a9:20:4f:64:46:15:d8:7f:d3:55:ab:52:43:f4:cf:3c:
7b:b0:67:60:dd:43:dd:c6:b0:a1:3c:54:5f:fe:bf:d6:01:3b:
7c:17:c2:55:06:66:b3:77:48:38:83:0a:98:62:9a:58:b6:00:
28:ec:3a:60:92:f2:32:12:dc:5b:c9:1a:ad:19:a9:b9:72:8d:
c0:52:5a:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCE+ox25nDHo3uQLmpwGZQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzQxZTU5ODM0ZGE2MTJkODNjYTI0MTk0ZjAyY2E2ZDc2
MDI0NDgwHhcNMjYwOTA5MDcwMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTUwMjQ0NzRhN2ExMTQ3OTQzMTU2OTc0NzliOGU4ZWQ1ZDcwZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMuMo8Vcd2F5CVX/a9dutzZTnvtI
jTZWiy8yA80p+FpN7UkvpDKxqW4Sn6Ig1RLwJBnNoHkZp7AltEDGC3pt4uMQKITg
lZQIb8mansxZbH1g/ZS7wScfgy48VZrBr/h5PlaPH3zjm7RbxcMlNects+OuQp83
h1mOb7e/pdKUQsdJBKPWyuOnoDuByaMyVSvDMLBalQXLlmUbSYN3DvbjyBdKxXB1
BMndTOrAPU2hdIM8dSpt9jMAfjZWRbfRVI9kr+t7LsroXARe/8s2vP0eAWk02/9v
AXsD0Pw8WLVJKYSuUlULy2UXFu43XFEFCme1WQLhu6NAM7Rs1oCrh6b2YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5QJEdKehFHlDFWl0ebjo7V1w4YMB8GA1UdIwQY
MBaAFLTEHlmDTaYS2DyiQZTwLKbXYCRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEt
NTU3YTRjMzFlMDJlLzEvUGxBa1IwcDZFVWVVTVZhWFI1dU9qdFhYRGhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hM2JhY2EtNDM3ZC00NjA3LTljMWEtNTU3YTRjMzFlMDJl
LzEvdE1RZVdZTk5waExZUEtKQmxQQXNwdGRnSkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX49lMA0G
CSqGSIb3DQEBCwUAA4IBAQAot+uoDS1sOEq0oFhEArKoorTbAZISgPq9MLXL/Ui4
+RD2JdK6ZWNpXhJt6G8i5CBodaNIKa0hu2UmhmrFUEt7SdMcy4Xw58EOXq28iUSM
+uSSrTOgrKTFqdRZ3zOJcfrz2xTES9mE8JSmaN/pu9rRXqRy3WZkyQTNTz1bdb+w
9dwspRn3EkrHNwQHPcV5+4ejEmN0yqkzZQKuisS+WTpqBuqPj7QVmFWH4A2ORpgx
GKKqJx9iEKkgT2RGFdh/01WrUkP0zzx7sGdg3UPdxrChPFRf/r/WATt8F8JVBmaz
d0g4gwqYYppYtgAo7DpgkvIyEtxbyRqtGam5co3AUlpO
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:16 2026 by rpki-client