Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pxq446UNxMX48IpTz2HO1tgd-0s.roa
File: pxq446UNxMX48IpTz2HO1tgd-0s.roa (raw, json)
Hash identifier: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=
Subject key identifier: A7:1A:B8:E3:A5:0D:C4:C5:F8:F0:8A:53:CF:61:CE:D6:D8:1D:FB:4B
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019F236919B08708FCD8011E711F195063DC
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pxq446UNxMX48IpTz2HO1tgd-0s.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.166.140.0/23 maxlen: 24
185.166.142.0/24 maxlen: 24
185.166.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:b0:87:08:fc:d8:01:1e:71:1f:19:50:63:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a71ab8e3a50dc4c5f8f08a53cf61ced6d81dfb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:c3:d0:37:b6:e4:5c:be:4f:a8:b1:3d:59:
f9:09:b2:14:a6:9e:f2:6d:cb:68:ee:ff:9f:ee:f2:
97:75:1a:89:93:62:a6:e6:ee:0b:64:1c:aa:45:9f:
7f:64:bd:fe:e7:ec:c8:c8:94:09:cc:51:94:2f:77:
c8:6d:04:3d:f8:9f:c0:6f:e7:83:ff:4f:8c:c8:41:
de:42:68:73:47:3b:ab:5d:a0:ca:48:d4:8f:63:f8:
37:4b:23:29:f4:fe:f5:b7:4c:88:1e:63:ec:1e:d8:
ee:08:43:5f:bb:fb:dc:e1:5a:cb:a5:3f:83:10:14:
df:9c:4a:bc:f2:1d:c2:68:46:18:c9:a4:3e:72:3a:
05:21:e6:b5:cb:6d:24:22:2b:b3:18:4d:08:67:57:
5e:7c:9f:36:3b:18:97:d2:eb:fd:3a:b4:da:dd:62:
0c:31:79:1e:45:0e:b9:b4:52:8f:cd:18:76:8c:58:
71:58:7a:c1:68:4a:09:d6:44:4c:9c:af:d6:c3:6d:
11:85:25:33:3a:4c:f3:21:e5:93:e5:59:56:14:e9:
6b:40:d2:ba:d3:26:00:c1:32:b3:a5:f9:c5:39:b0:
af:22:08:09:c4:e1:eb:63:8e:63:89:97:ee:85:95:
69:eb:a8:3f:fd:9b:ac:61:a0:50:d4:d2:a2:16:d3:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:B8:E3:A5:0D:C4:C5:F8:F0:8A:53:CF:61:CE:D6:D8:1D:FB:4B
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/pxq446UNxMX48IpTz2HO1tgd-0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.140.0/22
Signature Algorithm: sha256WithRSAEncryption
69:60:2f:fb:88:66:bf:30:ea:11:99:82:57:f1:f3:da:60:4a:
e0:f0:e1:13:6d:6b:5a:c3:87:68:b6:2b:14:6e:e9:47:76:2d:
0e:d7:98:1b:92:0c:0d:0c:e3:8e:61:92:17:ec:50:9e:25:52:
fc:4a:e3:c0:80:b7:92:4b:58:89:ed:4b:f3:36:29:e6:ec:e3:
8b:2d:c8:6c:7b:ea:dc:7b:8f:03:2d:e7:bd:45:39:1d:b2:f4:
71:ab:66:53:43:38:11:24:2e:af:87:53:b3:9b:9a:4a:7b:6d:
57:8b:b5:58:18:69:5e:77:7a:d7:50:9a:db:fa:6b:60:5b:8f:
a5:1c:61:a9:3e:25:1c:47:09:be:ac:3a:2d:76:32:58:7a:96:
d8:ef:52:d1:1e:c3:ba:af:f2:c5:2a:ec:e6:9c:6f:33:5b:2e:
df:6d:6b:f1:1b:c4:09:eb:9b:cc:03:c6:65:84:e6:00:17:b5:
de:1f:55:bb:1b:29:a5:38:c5:9a:79:b4:57:e9:9f:ab:04:fd:
e2:77:0d:9f:db:cd:db:a9:f1:56:96:50:a1:d9:57:e8:1c:e1:
51:e1:1e:34:9c:93:d1:df:57:5a:fa:bc:dc:6e:00:1f:e5:c2:
d1:0a:ac:41:e4:1f:d8:1c:c9:cc:56:3d:9e:9e:4b:83:12:88:
d7:88:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:03:15 2026 by rpki-client