Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PAvEUaSwovJaJ92DAoF9PgnFMaI.roa
File: PAvEUaSwovJaJ92DAoF9PgnFMaI.roa (raw, json)
Hash identifier: GFx/s47DtJK59avm4NMVbr03dDJfSRd9z/LTjHCz1fk=
Subject key identifier: 3C:0B:C4:51:A4:B0:A2:F2:5A:27:DD:83:02:81:7D:3E:09:C5:31:A2
Certificate issuer: /CN=5754d19527fd85d0d444acadd44a01655fdc7400
Certificate serial: 019E20834E7C40FC9F34F7C028BCBB1F0703
Authority key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PAvEUaSwovJaJ92DAoF9PgnFMaI.roa
Signing time: Wed 13 May 2026 08:45:36 +0000
ROA not before: Wed 13 May 2026 08:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 62.69.137.0/24 maxlen: 24
193.219.115.0/24 maxlen: 24
2a00:a640:10a0::/44 maxlen: 48
2a00:a640:20a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:83:4e:7c:40:fc:9f:34:f7:c0:28:bc:bb:1f:07:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5754d19527fd85d0d444acadd44a01655fdc7400
Validity
Not Before: May 13 08:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c0bc451a4b0a2f25a27dd8302817d3e09c531a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:ba:0b:b5:d5:48:91:93:cf:a3:53:49:a3:
b5:0e:fc:e5:e3:7a:f1:ab:f3:d8:7a:4a:0a:10:8c:
80:06:7f:9a:79:7a:2d:c5:0f:59:54:27:93:38:07:
72:c5:f1:69:fa:19:8e:9c:d6:d3:25:05:31:c7:dd:
f1:68:cf:d1:d5:31:e6:be:5e:47:e6:d1:61:95:11:
63:a4:f9:d6:6e:0c:0d:2e:aa:67:4b:31:7b:c5:02:
3b:ca:fa:ae:b4:48:92:31:d0:b6:c8:d4:ff:99:31:
cb:28:8e:8a:90:cb:d7:3f:de:20:c5:33:4b:6d:ff:
e1:57:c7:ac:19:f4:ef:6a:a9:c4:c3:a6:03:ec:c0:
23:31:8a:90:0c:ea:d5:c9:bf:d4:5f:c6:06:04:f9:
3c:9a:86:4b:07:38:90:c3:fd:c4:03:0e:71:b2:df:
03:00:87:cc:5a:fa:bf:e8:b1:81:23:dd:69:1e:58:
c9:95:f7:2b:13:4c:91:cc:85:18:a5:bf:b5:86:08:
c3:84:63:83:46:16:2f:15:a4:ba:df:20:7c:0b:ee:
6d:ea:63:79:4b:70:47:7c:61:af:29:2d:5c:91:01:
c7:db:9f:ae:0d:4f:35:45:93:6d:78:5f:44:df:94:
9a:15:45:ec:19:f6:d0:ab:49:d3:b6:b7:59:3f:35:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:C4:51:A4:B0:A2:F2:5A:27:DD:83:02:81:7D:3E:09:C5:31:A2
X509v3 Authority Key Identifier:
keyid:57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/PAvEUaSwovJaJ92DAoF9PgnFMaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.137.0/24
193.219.115.0/24
IPv6:
2a00:a640:10a0::/44
2a00:a640:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
59:4f:54:64:b3:8c:5c:0e:f3:b2:d8:af:23:5f:8c:bb:0e:80:
a6:65:83:c7:39:f7:b2:f8:4d:0c:d1:35:0f:83:e5:c7:5d:85:
da:38:e4:c5:d3:1b:03:36:47:44:a6:96:0c:1f:dd:bc:e2:bb:
5b:ad:ae:9c:f8:65:dc:38:75:86:44:f8:49:d1:e3:7e:58:e7:
11:f8:94:a0:43:8f:13:11:1a:ae:05:3f:df:6c:40:cc:49:14:
73:24:40:ff:be:86:48:d3:54:1f:c0:ae:6d:2c:3d:ea:c8:55:
4b:b1:ef:7d:65:72:68:91:26:4c:13:85:0e:f0:55:e0:ce:ad:
a3:0b:5f:04:5d:39:d7:a3:9b:40:7f:dd:b9:6b:7b:82:bf:d5:
5d:8c:20:5a:82:5e:2d:5d:a8:1c:b4:3f:10:d6:53:b0:aa:1a:
9c:8e:d3:c5:ed:eb:68:a2:80:74:33:f2:83:c7:5e:11:a9:22:
bd:58:f7:ab:57:ee:6e:5e:ad:9f:ca:df:65:26:c0:3b:f9:c6:
a9:76:c7:20:b7:77:93:48:c6:25:72:b2:b7:0c:d3:85:2c:9d:
61:3c:b9:09:1f:94:d0:e7:98:95:65:db:e8:f4:b4:74:f3:74:
26:02:6f:05:65:e3:c7:68:18:73:ea:ce:ea:91:19:5f:82:0b:
72:4b:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:34 2026 by rpki-client