Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PL88gjSMdD7kyGdvQn1LCVV46eY.roa
File: PL88gjSMdD7kyGdvQn1LCVV46eY.roa (raw, json)
Hash identifier: 9W4rFoJsKe17+/50BediF0nNXJhkq7AKfLexOFodg2o=
Subject key identifier: 3C:BF:3C:82:34:8C:74:3E:E4:C8:67:6F:42:7D:4B:09:55:78:E9:E6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFB270FEC6A786DD4B3A21A13C066F900
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PL88gjSMdD7kyGdvQn1LCVV46eY.roa
Signing time: Thu 13 Aug 2026 12:44:28 +0000
ROA not before: Thu 13 Aug 2026 12:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146883
IP address blocks: 217.79.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:27:0f:ec:6a:78:6d:d4:b3:a2:1a:13:c0:66:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 12:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cbf3c82348c743ee4c8676f427d4b095578e9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:0d:3f:04:12:4e:04:b5:1d:00:ce:13:c3:
62:47:26:b4:11:b8:9e:79:0e:97:17:15:a1:b0:a2:
b0:8f:8b:18:12:76:7a:b9:e7:95:d5:06:58:cf:77:
d1:1f:be:1b:7e:86:86:88:6c:22:cb:4b:2b:db:74:
f8:53:bf:6f:33:c2:37:eb:d8:67:1c:3e:9d:99:3c:
d4:aa:6d:ca:90:0c:3e:ec:1d:c8:5c:4d:7f:df:71:
ec:38:94:16:7c:48:86:6c:68:fc:b6:41:37:88:a8:
ca:2c:0d:0c:18:df:7a:61:3d:89:a1:1f:97:20:66:
51:ea:19:44:6d:f1:8e:01:8f:c3:7c:02:c7:f6:80:
07:31:db:0f:b0:b8:b7:0c:d0:00:63:7b:a7:82:da:
04:fa:4e:5c:fc:9e:bd:51:94:02:19:52:b8:ce:74:
20:b7:96:ae:b8:a8:58:a9:f1:ef:d8:ec:15:c6:b8:
51:aa:02:a5:4c:ae:16:9d:8e:33:66:70:b9:29:a0:
58:1d:f0:81:71:85:6b:c2:38:8a:3d:66:c3:45:6e:
d0:ad:05:71:b3:cd:e9:68:db:3d:87:61:d2:65:17:
b5:5e:67:cf:49:c1:2c:04:a1:74:a0:30:3f:d6:3b:
85:fa:60:39:8f:f2:a2:ae:9a:20:23:4c:44:11:b3:
b6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:3C:82:34:8C:74:3E:E4:C8:67:6F:42:7D:4B:09:55:78:E9:E6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PL88gjSMdD7kyGdvQn1LCVV46eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:65:cc:79:ab:32:12:b3:9c:75:a5:23:c0:c8:44:21:55:03:
5f:f5:d2:14:94:1d:f8:69:53:b0:80:5a:02:5f:69:17:b4:02:
cf:b9:31:e8:4a:14:c1:78:6a:64:d6:f6:b7:24:1c:ca:e6:be:
f4:ba:06:72:0f:41:b7:de:1d:4d:06:ab:34:bd:0a:88:d1:f3:
a6:aa:fe:84:77:23:14:94:4f:95:5f:7c:85:bb:d7:83:7b:23:
72:5d:f6:ce:dc:b5:b3:36:51:d4:f9:e1:a6:fc:e8:a7:2a:eb:
3e:cb:69:90:85:6c:bd:58:21:7d:5f:3d:95:95:34:14:9b:34:
4d:71:3a:49:85:02:41:40:82:cd:04:63:62:bc:3b:c3:28:bc:
9b:96:60:4d:68:29:37:3f:2f:c2:ed:d8:26:33:90:2e:f5:c7:
55:e7:a7:6b:2e:eb:ef:9e:40:df:eb:dd:8c:e7:d4:b6:8e:2e:
ed:0c:44:b0:03:80:28:1b:e6:6b:dc:6a:62:18:a9:80:b6:f0:
a5:f9:88:e7:5e:98:d7:7d:5f:bf:2e:f2:dd:90:a0:b8:d7:ee:
45:ca:51:8a:2b:73:bc:50:7d:04:8f:32:04:83:c6:c8:02:83:
fa:0e:5b:a5:54:4d:2a:c2:3e:23:f1:22:a4:0b:a8:ed:6e:4a:
25:db:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 14:14:06 2026 by rpki-client