Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PziO4JGsoEQITtjzSU9anoUH350.roa
File: PziO4JGsoEQITtjzSU9anoUH350.roa (raw, json)
Hash identifier: Pzj7jWsVCTdRE9C9W3+BUwMljEWtUlG8ZJSIYiFoZ1w=
Subject key identifier: 3F:38:8E:E0:91:AC:A0:44:08:4E:D8:F3:49:4F:5A:9E:85:07:DF:9D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FD0464E91A4F655F3AA747B08815370CE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PziO4JGsoEQITtjzSU9anoUH350.roa
Signing time: Wed 05 Aug 2026 04:54:56 +0000
ROA not before: Wed 05 Aug 2026 04:54:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219085
IP address blocks: 82.110.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:46:4e:91:a4:f6:55:f3:aa:74:7b:08:81:53:70:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 5 04:54:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f388ee091aca044084ed8f3494f5a9e8507df9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:c0:cc:ba:47:5f:e3:89:0c:0d:ef:de:23:
43:e4:76:25:97:14:4c:35:be:85:c1:0e:84:50:78:
7b:6b:ed:11:2e:40:92:de:c8:4a:ae:e0:7d:89:b1:
be:0b:98:06:38:a7:4a:84:98:de:aa:3c:04:db:fb:
e9:62:13:41:fb:ed:07:a4:8c:f7:ae:2b:a7:33:9b:
4c:f2:3c:04:71:27:11:f3:cc:32:4e:ed:c7:06:9b:
3a:f3:53:f5:58:cb:7c:ed:1a:ce:a6:c0:20:b3:a5:
93:02:f1:5c:21:68:b7:52:f3:05:4e:ea:6d:41:a4:
c8:d1:45:95:4b:4e:8f:b6:0e:7b:61:f4:d8:17:3b:
aa:c7:92:b8:b3:1d:ca:bb:c2:22:5c:95:f0:14:3c:
e9:9e:55:01:b2:f4:17:a6:f0:3e:0b:d6:a7:1a:4e:
bc:1b:c8:e9:fd:66:4d:42:dc:26:f0:57:30:60:44:
6e:5f:ff:0e:83:db:84:d0:9e:57:dc:1a:a2:b9:92:
db:3e:73:64:3e:ae:2e:39:1b:fe:15:3e:cc:56:8e:
8b:50:a3:f7:12:76:bb:99:b1:70:c9:e8:38:be:29:
cb:18:f6:88:92:2a:2b:9a:4b:ac:ae:64:9f:6f:26:
e1:4f:9d:89:af:6f:92:58:ab:c4:49:57:b3:88:7e:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:8E:E0:91:AC:A0:44:08:4E:D8:F3:49:4F:5A:9E:85:07:DF:9D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PziO4JGsoEQITtjzSU9anoUH350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.60.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ca:2f:44:00:00:ce:1e:6a:47:26:06:9c:3d:83:41:2f:d3:
a2:3f:67:6c:eb:55:24:c0:14:c6:d5:9a:99:99:c6:d6:82:ad:
68:d9:fa:bd:d1:27:23:f1:ec:ae:58:82:c4:3d:59:c6:7a:8b:
a7:40:4e:73:4e:bd:82:9d:e3:59:c5:f2:16:53:f6:75:9c:a1:
ec:48:c7:38:e5:63:7d:af:e4:ac:25:d9:d5:41:3c:2d:02:5f:
b7:73:dd:c5:df:33:90:97:5b:0c:b2:48:a5:f4:4b:24:95:e6:
6b:3f:b2:34:e9:41:f5:63:0c:6b:53:58:6d:97:24:c6:f1:e8:
fa:fc:0e:a1:0c:a2:fa:7f:86:f3:b6:ef:88:11:45:e1:3b:e7:
14:e1:96:98:da:58:75:e7:4e:b6:2f:af:78:01:1c:8d:75:6a:
f8:6d:a0:aa:71:79:cc:26:f8:69:d0:99:ec:e4:14:aa:3a:01:
90:72:a6:83:86:6c:ab:e0:3a:3c:76:f0:60:da:28:6b:8f:dc:
d1:9b:60:b2:73:33:10:78:d9:06:3a:4a:ac:c8:41:bd:bc:65:
a4:9d:f1:18:cf:8e:d5:82:4a:bc:39:8e:c9:48:94:de:67:0e:
6e:66:56:36:ac:6a:c4:b2:8a:42:79:cf:19:b0:ab:af:06:6d:
df:f5:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:24 2026 by rpki-client