Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/PLDsjI7Wmaq58KIKEGRRN4moVVE.roa
File: PLDsjI7Wmaq58KIKEGRRN4moVVE.roa (raw, json)
Hash identifier: 3wRa5a25r/pnr6Zd/j1/wfiEfAkg172TdyhdPsGElRs=
Subject key identifier: 3C:B0:EC:8C:8E:D6:99:AA:B9:F0:A2:0A:10:64:51:37:89:A8:55:51
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 019CBA51C534939BCB18C429121A9C1505FD
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/PLDsjI7Wmaq58KIKEGRRN4moVVE.roa
Signing time: Wed 04 Mar 2026 19:27:26 +0000
ROA not before: Wed 04 Mar 2026 19:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50979
IP address blocks: 46.28.64.0/24 maxlen: 24
193.238.155.0/24 maxlen: 24
195.123.208.0/21 maxlen: 21
2a02:27ac::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:51:c5:34:93:9b:cb:18:c4:29:12:1a:9c:15:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Mar 4 19:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cb0ec8c8ed699aab9f0a20a1064513789a85551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:2e:78:cb:a2:bd:ac:dd:cd:ac:9e:b8:fa:
b0:f3:45:13:1f:da:8b:fc:ec:23:20:11:c6:87:eb:
37:72:ad:2f:08:00:a6:c9:ae:19:2b:19:97:fa:f5:
b9:51:1d:c6:a7:97:f3:70:ae:5f:fd:25:1f:d0:6d:
5d:8f:ea:32:2f:80:86:70:e9:0f:c0:d5:05:98:94:
fb:b9:cf:51:69:08:3a:f9:e7:4a:99:db:72:59:7a:
59:0b:63:ac:48:a1:0a:e8:c0:c7:13:68:11:b6:ec:
32:d3:e5:d4:8a:90:46:84:75:a8:e4:4f:c8:94:2e:
bc:de:0d:91:64:b8:fd:f7:9a:5a:43:3a:41:a0:9c:
e9:80:95:bb:47:c5:4c:2d:57:e3:da:9b:ae:36:bf:
d8:9c:d4:0e:75:13:ac:cc:2c:87:a5:df:0b:0d:ca:
91:d5:32:64:74:0e:b3:db:bf:1b:21:36:1f:a8:56:
62:c6:c6:70:ee:64:01:ce:58:e7:9c:c4:92:e5:38:
62:a3:8d:87:d4:5f:50:83:61:e6:54:2c:db:96:72:
7b:1a:9f:17:1a:a5:74:06:ee:34:d2:41:83:c8:be:
75:30:18:21:17:46:b4:c7:90:b3:4f:9a:f6:33:5f:
a0:0c:96:60:7c:e3:53:83:80:22:27:41:02:07:7f:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:EC:8C:8E:D6:99:AA:B9:F0:A2:0A:10:64:51:37:89:A8:55:51
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/PLDsjI7Wmaq58KIKEGRRN4moVVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/24
193.238.155.0/24
195.123.208.0/21
IPv6:
2a02:27ac::/32
Signature Algorithm: sha256WithRSAEncryption
13:a1:1e:85:1f:f9:d8:35:4f:fb:5e:2c:12:42:8b:56:a0:56:
45:b1:f0:28:54:40:4f:9a:4a:c0:9d:bf:92:c1:0d:4e:eb:6f:
2f:51:56:44:6e:9c:74:e6:4a:83:74:0c:fb:70:dc:1d:5e:d5:
ff:9f:53:f1:f1:52:f9:4d:a2:77:1c:a2:6b:86:8a:e4:fe:28:
01:02:c4:fc:22:d6:d2:8a:ab:9f:54:e8:85:f7:a3:a1:11:9c:
cd:a0:c3:06:29:66:3a:54:d1:93:1e:43:30:34:6c:1f:d3:d1:
a7:c5:61:7d:e3:f8:e6:9e:a4:14:ec:31:6e:d6:ec:fe:81:d8:
f1:d6:12:ef:e6:c4:22:ee:f5:b1:12:14:cc:f2:46:af:b0:67:
8f:c9:44:9e:d3:42:0e:13:e0:f6:e4:99:f0:b5:8f:b5:55:2b:
b3:32:c9:17:6e:f5:17:f9:13:3b:b0:05:08:e4:7d:5a:85:e1:
8a:5c:02:76:01:98:ea:fe:24:ba:47:8b:04:94:25:f8:ea:08:
8d:99:0e:4b:31:5e:c0:16:21:5b:0c:dc:30:7e:3a:9d:1b:d8:
f6:c1:72:c0:36:c9:22:e8:9c:5e:4a:74:92:c1:3b:70:31:e1:
e7:e2:38:0d:4f:9f:a9:ec:60:7c:fc:d4:2c:64:d7:58:0a:8e:
ff:d8:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:44:51 2026 by rpki-client