Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pPGIecinm7xqqyGr-l8cHaTpiLs.roa
File: pPGIecinm7xqqyGr-l8cHaTpiLs.roa (raw, json)
Hash identifier: rN3hsflq3ynZ1Bl5WsXqqY0u5feHLl6WF/IYUZT77GM=
Subject key identifier: A4:F1:88:79:C8:A7:9B:BC:6A:AB:21:AB:FA:5F:1C:1D:A4:E9:88:BB
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A06A90A9A6131A9F430DA41853560A84D0
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pPGIecinm7xqqyGr-l8cHaTpiLs.roa
Signing time: Fri 04 Sep 2026 03:57:40 +0000
ROA not before: Fri 04 Sep 2026 03:57:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22773
IP address blocks: 170.100.148.0/23 maxlen: 23
170.100.150.0/23 maxlen: 23
192.6.66.0/23 maxlen: 23
192.6.172.0/23 maxlen: 23
192.6.174.0/23 maxlen: 23
192.25.180.0/23 maxlen: 23
192.25.182.0/23 maxlen: 23
192.25.200.0/23 maxlen: 23
192.25.208.0/23 maxlen: 23
192.25.210.0/23 maxlen: 23
192.25.232.0/23 maxlen: 23
192.25.244.0/23 maxlen: 23
192.25.246.0/23 maxlen: 23
192.137.24.0/23 maxlen: 23
192.137.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:90:a9:a6:13:1a:9f:43:0d:a4:18:53:56:0a:84:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 4 03:57:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4f18879c8a79bbc6aab21abfa5f1c1da4e988bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:3b:b7:a6:4a:ec:00:00:dd:dc:18:c0:8e:
72:53:82:2c:f1:0b:1e:d7:c0:49:7c:27:83:81:dc:
8b:96:12:25:a2:ab:51:4f:ce:fb:9c:77:bb:14:ca:
e3:56:b7:fc:41:1f:69:f6:28:8d:4b:91:1a:3b:28:
36:88:a1:0a:79:db:2a:8c:9c:b9:a3:b5:3e:7e:98:
f9:e3:0f:63:73:14:db:82:d0:b1:26:f6:99:99:22:
95:95:f9:e2:d7:3c:ac:52:00:28:59:6f:21:d4:91:
69:35:93:e0:fd:b4:a6:d0:32:fe:af:55:bb:d9:a8:
93:6a:60:06:ea:5f:e4:6d:88:82:98:da:97:bb:b3:
32:5b:49:20:d6:b3:d1:7a:13:0f:8e:d9:b7:ae:45:
f1:20:83:0d:e6:2b:40:4a:b1:b0:dc:0d:32:ca:93:
ab:6d:ac:40:78:ed:61:cc:bf:af:61:bb:29:73:0b:
95:6c:62:b5:d9:5f:ca:a1:35:ce:75:a3:76:d4:f9:
9d:2f:18:08:fd:6d:49:d0:ab:60:e1:ba:1a:59:ea:
2c:b2:18:cf:a6:50:4c:42:6a:9a:42:81:bd:eb:87:
ab:88:48:41:fc:cd:7b:2d:81:e6:ec:46:63:69:68:
6a:25:7b:40:81:67:c9:25:29:9c:99:f4:1e:6d:2c:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:88:79:C8:A7:9B:BC:6A:AB:21:AB:FA:5F:1C:1D:A4:E9:88:BB
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pPGIecinm7xqqyGr-l8cHaTpiLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.100.148.0/22
192.6.66.0/23
192.6.172.0/22
192.25.180.0/22
192.25.200.0/23
192.25.208.0/22
192.25.232.0/23
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
83:31:e3:20:43:ad:5b:4e:12:7b:32:ad:5d:d6:49:5e:27:6c:
bf:e1:7e:9d:b0:df:e2:52:b6:ff:05:a5:63:2b:78:78:ef:9e:
e6:e1:64:55:4d:99:60:b6:c6:10:4d:5e:5d:08:28:34:e2:a4:
a6:4c:4f:61:55:7c:6d:5f:48:cc:ac:5d:21:28:bc:14:12:c2:
31:98:d8:f8:bf:49:f6:a3:63:ea:5b:e6:bf:3f:89:27:d0:2c:
81:55:19:95:3f:34:d1:bf:ea:61:d0:e1:96:67:89:67:36:9d:
0d:df:63:c5:c9:2b:fe:9b:24:84:c3:73:de:7e:bb:02:93:d0:
57:4f:ca:3d:73:ce:e2:91:d9:b1:70:28:12:91:bc:75:88:44:
78:f7:a9:d4:33:d7:4e:f4:4d:00:6d:b0:5f:5d:63:c1:80:93:
3d:d6:ef:2b:09:a9:b7:f7:74:51:32:44:14:68:e0:47:64:47:
79:81:07:36:50:aa:69:ab:d7:4b:d9:ea:f8:4a:69:7b:7e:e2:
9e:c9:cd:23:32:ef:a6:19:e6:ed:de:04:33:18:0a:ef:c3:bc:
33:75:e0:15:06:66:a4:64:94:63:85:dc:37:f3:c6:95:c4:e4:
cd:f6:98:ca:be:1c:a8:b4:a9:5b:60:61:4c:99:18:09:de:25:
76:9d:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:42 2026 by rpki-client