Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/pCJmxNO2RRNLqmUYdDIZ2uIw7UY.roa
File: pCJmxNO2RRNLqmUYdDIZ2uIw7UY.roa (raw, json)
Hash identifier: Ykx0EGR8ywczJ7eGH5oP/ikFub16jJZmh/4KXipEj70=
Subject key identifier: A4:22:66:C4:D3:B6:45:13:4B:AA:65:18:74:32:19:DA:E2:30:ED:46
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01A1A6C348D7A0C838E551E6632623AC0C83
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/pCJmxNO2RRNLqmUYdDIZ2uIw7UY.roa
Signing time: Wed 04 Nov 2026 13:32:58 +0000
ROA not before: Wed 04 Nov 2026 13:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196709
IP address blocks: 138.124.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:c3:48:d7:a0:c8:38:e5:51:e6:63:26:23:ac:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Nov 4 13:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a42266c4d3b645134baa6518743219dae230ed46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c8:33:5c:c3:6f:de:bf:be:e0:e4:43:8b:fa:
7a:86:f6:37:3b:a2:c2:c7:68:f2:a6:96:e0:a1:fd:
d1:08:b9:fe:79:fa:c9:1e:c1:1d:83:2c:07:a3:07:
04:6e:e1:09:00:57:07:37:c0:7d:06:c9:3b:87:bd:
f5:6b:f6:67:74:af:38:41:60:8a:04:ce:a8:ea:4f:
9b:7c:09:ca:be:e3:36:cf:7d:d3:83:6d:58:dc:48:
cb:04:5d:7b:03:3d:5b:e0:4e:06:25:a3:cb:d7:9d:
8f:c5:5e:2c:cf:c6:98:13:53:51:7e:30:6a:99:b1:
d9:a8:15:27:3e:6f:ff:16:bf:80:05:05:c1:8e:fc:
ea:1f:1a:10:2d:3a:5d:c6:e6:b2:87:6b:45:dc:7f:
93:f9:7c:c5:d6:5b:ec:c1:cf:20:81:4a:c3:e3:91:
e9:06:89:fa:f9:b7:91:83:49:99:7e:ac:3a:ec:e4:
55:e6:d5:b2:d3:5e:2c:0a:d9:a2:9c:61:b7:2d:e0:
33:75:d5:be:a9:11:7f:a0:ba:5c:71:e2:d4:f7:00:
93:98:77:82:6b:30:d0:b5:02:55:60:e8:18:98:56:
09:3f:f8:8b:ca:72:18:bd:68:b9:4d:ca:e1:eb:30:
92:42:db:84:99:dd:c7:bc:bf:24:d3:b3:31:42:72:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:22:66:C4:D3:B6:45:13:4B:AA:65:18:74:32:19:DA:E2:30:ED:46
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/pCJmxNO2RRNLqmUYdDIZ2uIw7UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.81.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fb:a5:c6:e9:d3:8c:b6:6a:4e:5a:29:71:e7:69:53:c9:34:
0e:2b:cf:14:a8:fc:20:00:72:c6:cc:b4:6c:1a:4a:ca:8f:15:
81:f5:c4:70:ff:d6:3b:31:21:e9:42:dd:24:2f:72:05:6f:f7:
24:01:b1:c0:a9:d5:f7:90:d3:67:71:a0:23:1f:3f:90:97:b9:
9b:7e:27:0f:34:46:12:43:f4:a6:62:bf:3b:ae:61:ec:c6:bb:
c5:78:b8:97:73:6f:5c:5b:87:a6:ec:be:1e:32:bd:25:74:33:
b4:94:94:0c:10:0f:fd:43:ac:4e:fa:f9:4e:40:d1:09:e9:61:
d6:38:2f:31:4d:d2:0c:2b:01:09:fb:c9:b3:a2:d7:5f:2a:5e:
46:90:60:c6:5c:b8:f9:e5:55:f4:47:96:43:7d:0e:65:0a:6a:
7a:dd:3a:fa:67:c0:43:11:d3:48:64:a7:c1:8e:bc:af:8f:bd:
d1:de:fe:53:55:0a:3b:34:95:76:65:45:f6:ba:84:d3:38:c4:
4a:1a:08:cc:8b:b6:5f:76:1e:5c:91:56:42:58:82:34:9e:a8:
d1:aa:1c:af:35:62:22:f1:a2:2e:76:b0:53:92:4f:0c:aa:e5:
0d:32:04:d5:84:67:c1:66:37:6c:b2:d0:19:65:64:c6:24:09:
a0:4f:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:08:12 2026 by rpki-client