Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PDrEX60R8bfyXytYQlx7XagRIv0.roa
File: PDrEX60R8bfyXytYQlx7XagRIv0.roa (raw, json)
Hash identifier: 2ZZLgxx8nq5tKDh+QEXDvzz7DeSpQUTR2aMiI7HBCQc=
Subject key identifier: 3C:3A:C4:5F:AD:11:F1:B7:F2:5F:2B:58:42:5C:7B:5D:A8:11:22:FD
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A0D878DC5B6D38B27214DB275B1D483281
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PDrEX60R8bfyXytYQlx7XagRIv0.roa
Signing time: Fri 25 Sep 2026 12:09:54 +0000
ROA not before: Fri 25 Sep 2026 12:09:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.187.6.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:78:dc:5b:6d:38:b2:72:14:db:27:5b:1d:48:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Sep 25 12:09:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c3ac45fad11f1b7f25f2b58425c7b5da81122fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:4f:1e:9a:9d:26:79:4c:22:84:41:86:06:
16:28:b1:f4:ad:9d:38:e0:b2:05:6c:76:7a:88:57:
f9:33:33:19:20:a1:5f:55:c2:89:c1:b3:8b:7a:ad:
fb:ab:f2:3b:56:81:5e:04:bc:d3:85:09:54:ec:c9:
a3:85:16:a6:18:4f:5c:9b:dc:7a:5d:d6:0c:5e:11:
85:78:4a:21:84:24:11:df:12:63:cf:69:9a:3c:11:
07:92:3c:e9:89:7e:76:39:24:fb:eb:33:48:88:ea:
2c:c4:a9:2a:f0:f4:9e:91:9b:ec:b1:2e:27:80:eb:
e7:4f:99:7e:db:a0:8e:71:ad:de:a3:3b:4f:42:3a:
81:49:1e:97:04:ea:a1:12:98:a5:71:75:89:ad:0c:
3b:43:be:73:d0:7d:f2:c5:90:bd:05:9e:81:f3:94:
68:50:bb:c1:49:57:d7:01:c2:2f:f4:f8:bb:05:7f:
45:a0:a5:55:b9:fd:95:91:8f:aa:f5:8d:2b:b4:eb:
99:03:34:88:58:7f:ae:1a:ea:95:ce:6f:22:92:8e:
fa:12:1d:65:79:32:27:4a:d4:56:db:ba:5d:ff:d3:
e0:d7:7c:95:83:e9:75:c6:f2:28:4a:80:39:91:a3:
75:bc:da:f8:7b:61:d4:e1:fa:54:a3:65:79:89:d8:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:C4:5F:AD:11:F1:B7:F2:5F:2B:58:42:5C:7B:5D:A8:11:22:FD
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/PDrEX60R8bfyXytYQlx7XagRIv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0/24
89.187.8.0/24
89.187.10.0/24
89.187.12.0/24
89.187.14.0/23
89.187.17.0-89.187.19.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b3:9c:b2:47:87:93:86:f7:9c:d6:6d:90:37:f1:3f:4c:50:
a8:fe:a6:15:26:b2:ce:74:bf:f9:c9:40:27:40:37:db:95:15:
0e:52:7a:16:cb:97:e0:fa:1e:57:68:91:f1:06:f2:08:51:56:
fa:49:30:36:14:f8:19:f9:05:a6:33:ee:65:25:f3:fe:ee:08:
ad:f0:cb:4b:ab:95:7c:c7:e9:a8:6f:13:0f:bb:19:38:60:75:
73:09:e3:b6:67:95:9b:1b:d7:ca:a5:1b:50:07:9f:10:8c:55:
fe:66:16:83:cd:ef:02:0d:fc:b6:a6:f7:5d:85:0b:14:83:b8:
de:97:69:5f:a5:e1:be:53:cd:6e:4d:29:ff:07:6b:2c:97:3e:
8b:08:06:75:b6:11:99:db:bb:06:bf:a6:c3:98:ac:da:9f:1b:
30:88:af:64:85:11:98:1b:f3:38:8a:8a:90:dc:e4:48:dd:04:
10:f3:16:99:d0:ed:c6:2b:fc:4d:d8:a7:7f:9b:68:fb:b7:b2:
f0:57:d3:ce:b4:a9:91:8e:a2:a6:7e:6f:03:85:46:45:71:62:
5f:a3:ec:dc:1c:72:e5:78:f2:dc:ba:ad:e0:4d:74:35:65:2a:
fd:99:46:9c:b5:f1:08:1f:e8:97:5a:79:7f:f6:a0:27:2d:c3:
66:bd:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:35 2026 by rpki-client