Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/PZJdHjym53uET0OFIQgV_dFsyE8.roa
File: PZJdHjym53uET0OFIQgV_dFsyE8.roa (raw, json)
Hash identifier: AkjMbM/sTK2f55dA2eB4xGGQChluiSrx1kNICLSxkzA=
Subject key identifier: 3D:92:5D:1E:3C:A6:E7:7B:84:4F:43:85:21:08:15:FD:D1:6C:C8:4F
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A18CAF7D598B91D6C71EAFEEDA6675B87D
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/PZJdHjym53uET0OFIQgV_dFsyE8.roa
Signing time: Fri 30 Oct 2026 12:01:13 +0000
ROA not before: Fri 30 Oct 2026 12:01:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 81.188.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:af:7d:59:8b:91:d6:c7:1e:af:ee:da:66:75:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Oct 30 12:01:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d925d1e3ca6e77b844f4385210815fdd16cc84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:4e:67:49:3a:f2:40:92:a4:10:ab:41:b7:
4d:36:bb:a5:28:f4:bb:66:60:ab:5d:f4:1d:d4:b6:
50:2c:d8:23:b4:6c:cf:99:9e:55:4a:f3:71:04:f0:
9d:06:d6:bd:59:94:de:3c:e5:63:59:ef:10:6e:28:
bc:07:8a:82:43:0b:33:2c:c7:16:a6:bc:bc:cc:1a:
4a:93:27:0e:1a:f5:9e:1b:e5:ac:a1:06:a3:26:2e:
0e:6f:eb:67:ad:af:d7:ca:ec:73:7c:da:cc:42:43:
16:f0:0c:ff:76:ed:06:bc:39:d8:b9:2d:fd:e6:6d:
cb:54:1b:69:00:ed:68:46:a9:ec:0a:d1:c4:5a:df:
a9:13:cc:38:ac:80:d4:d1:9b:42:17:97:2c:52:e1:
8f:f2:91:1a:69:15:32:d7:16:34:10:be:ae:7e:99:
69:d4:48:95:39:eb:a4:78:3d:92:58:13:59:f8:6f:
e1:71:75:83:41:b2:16:c0:2a:f2:fa:6c:47:36:3b:
24:4b:66:75:d4:77:dd:3e:f9:07:50:7c:85:68:95:
94:ff:de:9a:cf:17:ee:64:8d:6c:b3:7b:fa:07:95:
57:a0:3a:19:32:c2:a3:93:1d:09:49:54:09:00:38:
f2:50:f9:d2:e9:b0:b4:e1:f2:e4:1b:fe:42:92:a5:
11:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:5D:1E:3C:A6:E7:7B:84:4F:43:85:21:08:15:FD:D1:6C:C8:4F
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/PZJdHjym53uET0OFIQgV_dFsyE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:b6:30:fd:1a:0e:71:69:a6:8a:64:e9:8c:79:0c:70:76:d5:
b1:b9:7c:85:97:7b:ad:2d:25:08:73:80:36:c5:63:0c:6e:79:
b9:98:04:ee:36:93:c5:e9:a4:c5:75:c0:44:e2:7d:86:f7:48:
e4:de:99:b8:99:40:e0:7c:09:b2:ad:a4:16:32:a2:86:83:4f:
d9:0b:32:40:0b:35:a2:b5:d7:50:04:ed:f0:84:2d:fe:77:17:
69:99:72:41:b0:7a:ca:02:9d:4f:a7:07:4e:34:a1:19:ba:55:
bd:18:29:c8:0c:86:38:b1:52:c7:c6:a5:7c:48:74:99:2a:98:
24:7d:77:32:41:5d:5c:4b:3e:8d:20:2a:1a:ff:e0:bf:0d:83:
82:4a:ea:c7:fb:4c:3e:c9:33:a6:6a:1d:3e:f3:31:26:6a:46:
1e:71:9a:27:7b:05:eb:c4:17:80:8b:15:b2:c5:be:d3:55:30:
78:7a:16:1a:e8:f6:29:69:34:ae:81:07:8f:a8:a3:5a:2c:13:
50:c2:6e:f8:1e:2a:8d:41:5d:02:9e:bf:b9:c6:0d:66:6b:fd:
74:49:cd:f3:35:13:16:b6:a8:4d:a7:7d:87:b9:3d:25:f4:85:
79:e6:37:cd:89:35:78:3f:d9:e9:99:50:96:33:61:79:4e:bc:
a8:d4:20:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:45 2026 by rpki-client