Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pvKn5P6W0geqPhRpqQoqoG2NcG4.roa
File: pvKn5P6W0geqPhRpqQoqoG2NcG4.roa (raw, json)
Hash identifier: jZ0UDbD+lL9KJLctKmX3BzyaqOoOU/LXfYVgwDGMH/8=
Subject key identifier: A6:F2:A7:E4:FE:96:D2:07:AA:3E:14:69:A9:0A:2A:A0:6D:8D:70:6E
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FAE8D290E2A26B4D7EE935714DCE9166C
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pvKn5P6W0geqPhRpqQoqoG2NcG4.roa
Signing time: Wed 29 Jul 2026 15:45:14 +0000
ROA not before: Wed 29 Jul 2026 15:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 9.151.0.0/19 maxlen: 19
9.151.208.0/20 maxlen: 20
9.151.248.0/21 maxlen: 21
9.232.192.0/18 maxlen: 18
9.233.48.0/20 maxlen: 20
9.237.96.0/19 maxlen: 19
9.237.128.0/18 maxlen: 18
9.237.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:8d:29:0e:2a:26:b4:d7:ee:93:57:14:dc:e9:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 29 15:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6f2a7e4fe96d207aa3e1469a90a2aa06d8d706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:83:21:03:94:6a:cf:d3:00:fd:49:8d:84:
d2:c2:8f:96:63:ed:ae:ba:6b:94:71:15:84:ea:d6:
60:f6:95:5b:b7:70:3b:47:c6:7a:7c:cc:81:48:7b:
bb:1e:54:06:37:a2:10:78:23:95:d2:33:5b:12:74:
7e:60:15:7f:52:68:c5:3d:37:b3:bd:ec:51:17:5e:
ce:84:aa:e4:83:08:13:35:5a:be:6e:75:4f:29:0c:
39:e5:21:e8:97:ba:21:5b:5d:f4:fe:92:22:b4:fe:
c9:c6:9e:aa:d7:ab:7b:42:14:16:5e:74:9c:7a:7b:
06:6a:7f:5b:9c:ed:48:61:05:a8:13:d0:3e:4b:3a:
78:30:7a:69:88:ed:6d:cf:26:df:6f:ef:57:fb:a3:
85:9c:27:e2:75:08:53:c4:28:bc:8b:aa:1c:27:ac:
eb:02:c8:6c:7c:2c:a4:99:ee:8e:fc:a8:19:62:9e:
ec:18:d6:04:aa:0a:11:24:2f:9a:2a:05:1f:48:17:
0b:c9:c7:ef:15:3d:26:c1:ec:c6:8a:f0:a2:e7:2c:
27:b1:53:78:95:e4:ba:e6:5a:cd:c6:8a:2a:23:9c:
93:e3:a8:08:ef:0f:a3:e7:c9:48:34:78:4a:09:ab:
af:e3:5c:16:64:36:23:0f:15:53:ce:a3:75:70:3c:
6d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:A7:E4:FE:96:D2:07:AA:3E:14:69:A9:0A:2A:A0:6D:8D:70:6E
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/pvKn5P6W0geqPhRpqQoqoG2NcG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.0.0/19
9.151.208.0/20
9.151.248.0/21
9.232.192.0/18
9.233.48.0/20
9.237.96.0-9.237.223.255
Signature Algorithm: sha256WithRSAEncryption
0a:a8:0f:60:98:e1:d1:ba:38:c6:d4:37:3c:29:dd:41:7e:e3:
73:5a:34:1a:bd:b0:a8:3c:fa:8c:55:4f:ae:9d:1c:f5:4a:b6:
fb:a2:4c:51:20:91:bb:7b:45:12:56:84:76:88:cd:08:70:18:
41:e5:b4:79:9f:0a:e2:d2:64:d3:53:17:d2:7a:c2:86:f2:84:
89:b0:76:cd:13:2d:9e:3e:3b:2d:8e:da:b6:97:c5:08:ed:a6:
0e:01:1d:98:a6:74:0d:50:5f:89:09:37:c9:db:a0:9e:e1:d9:
34:7b:6d:03:e3:ab:a0:8b:ac:d9:3f:ec:4e:c5:4a:a2:b8:ca:
95:d5:e9:41:e0:24:c4:db:c1:2d:c7:33:99:c1:ea:2b:47:cf:
1a:52:e7:f0:6e:d0:e4:0d:db:4e:f0:34:b4:f8:b5:d4:b5:e5:
d0:95:78:5e:2b:3e:de:fa:06:a3:e7:f6:2c:9b:f6:3a:a6:08:
0d:92:0e:1e:4c:e5:90:30:5d:2f:58:34:95:ed:13:f3:58:ee:
72:2f:b7:46:a5:dc:47:d3:72:25:06:c2:51:9e:20:53:68:ae:
07:7b:c6:4a:86:96:62:e3:1b:b4:41:73:ed:ff:33:c9:b2:63:
52:7a:80:97:bf:3d:25:85:c8:65:f5:cb:1a:10:ba:41:4f:17:
aa:3c:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:58 2026 by rpki-client