Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/pnv_wdpav11svFAgZJ0ikU2MOaQ.roa
File: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (raw, json)
Hash identifier: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=
Subject key identifier: A6:7B:FF:C1:DA:5A:BF:5D:6C:BC:50:20:64:9D:22:91:4D:8C:39:A4
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019DD8A7CE420B71661FFD551085ABF5A78F
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/pnv_wdpav11svFAgZJ0ikU2MOaQ.roa
Signing time: Wed 29 Apr 2026 09:52:49 +0000
ROA not before: Wed 29 Apr 2026 09:52:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207177
IP address blocks: 5.182.60.0/24 maxlen: 24
2a03:9f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:a7:ce:42:0b:71:66:1f:fd:55:10:85:ab:f5:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Apr 29 09:52:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a67bffc1da5abf5d6cbc5020649d22914d8c39a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:cb:3f:d8:27:75:eb:8d:36:9c:c0:db:e4:
37:d5:51:10:1d:9e:a0:8d:22:36:8d:bb:e0:48:5b:
90:27:9d:1f:2d:db:d4:9d:25:5b:a1:d9:1e:ca:74:
e9:1e:70:bd:e2:c5:7a:c5:e3:c0:78:5c:d1:61:95:
2a:f3:93:5d:33:a0:1d:4a:dc:95:c9:cf:03:70:be:
40:6c:59:b6:74:35:f2:27:e0:cc:1a:68:3b:cb:20:
76:93:ef:b3:b9:7c:6a:27:91:6d:76:6e:32:3c:53:
48:18:19:fc:d3:82:72:32:ca:bd:89:46:00:d8:4e:
93:d2:78:41:50:e3:ea:64:2c:c0:37:a5:92:7b:66:
1a:e3:ea:11:c3:b6:70:71:c6:11:ed:9c:99:16:5d:
b4:60:80:36:0a:b5:54:a8:5d:8e:cf:6c:9c:50:fe:
19:68:39:8c:01:09:1a:95:7d:65:0e:e4:fe:96:06:
77:9d:86:0f:1a:01:20:87:aa:9e:b6:88:0c:ba:4e:
c5:ea:e8:4f:25:93:27:55:fe:72:af:c5:83:be:72:
cc:9f:13:07:35:7c:6a:94:d8:a1:e7:35:10:79:a5:
3d:87:ce:30:3c:57:f9:95:d8:d2:71:26:98:ff:b5:
00:cd:64:2b:21:d5:30:58:5c:4e:f9:ac:1f:a3:ec:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:FF:C1:DA:5A:BF:5D:6C:BC:50:20:64:9D:22:91:4D:8C:39:A4
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/pnv_wdpav11svFAgZJ0ikU2MOaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.60.0/24
IPv6:
2a03:9f80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:6e:8f:59:09:c1:91:46:e4:6e:f6:cf:c3:fd:ea:d7:4f:a5:
fc:6f:0a:39:5c:55:da:05:4a:d8:6f:d7:67:47:7d:e3:88:2b:
4d:ac:f0:7d:e4:e0:7e:82:b4:b8:77:bf:ad:2a:d7:28:5e:6a:
26:d4:b9:08:bc:ad:5b:c8:95:ee:58:39:46:c7:da:97:ef:6b:
92:b9:fe:9a:40:d6:c4:9d:0f:d9:02:0b:57:76:e1:2e:b8:1e:
e9:d5:a2:91:9e:ca:2f:fa:37:ca:15:3e:3f:50:21:75:58:97:
3a:25:1d:73:18:e8:4f:87:3c:c7:b8:f8:f9:45:bb:ff:45:a6:
9f:f9:5b:7d:34:c9:66:79:b4:a4:a0:0d:20:54:38:77:0e:30:
fc:a6:8b:a3:3a:26:4b:a7:e5:97:26:65:a7:d4:e2:7a:59:4a:
eb:2c:c3:ce:3d:b6:21:4e:67:e8:c2:e9:7a:19:dd:3b:b6:3a:
22:86:6d:51:14:e0:90:67:b3:e5:9c:4a:44:7b:90:3f:6a:7d:
f5:86:33:bf:85:35:7e:b3:16:fe:86:19:22:f8:52:c3:34:17:
44:72:a3:d5:70:3b:d5:73:b1:fd:5f:44:63:36:9f:64:25:9e:
c0:6e:44:33:1f:59:a1:2e:6a:91:4a:e0:d8:cd:6c:29:62:a0:
7e:3a:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 14:46:56 2026 by rpki-client