Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/pgFOS9dkmIijG3rbth2ZlYbDt_o.roa
File: pgFOS9dkmIijG3rbth2ZlYbDt_o.roa (raw, json)
Hash identifier: nTepFMKeqPqU0xbggQQuFwwV89aUHAiWuTxqiTaXabA=
Subject key identifier: A6:01:4E:4B:D7:64:98:88:A3:1B:7A:DB:B6:1D:99:95:86:C3:B7:FA
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 01A0201FC371D91C0A330B8CFF5A52EF7D8F
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/pgFOS9dkmIijG3rbth2ZlYbDt_o.roa
Signing time: Thu 20 Aug 2026 17:02:27 +0000
ROA not before: Thu 20 Aug 2026 17:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1f:c3:71:d9:1c:0a:33:0b:8c:ff:5a:52:ef:7d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Aug 20 17:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6014e4bd7649888a31b7adbb61d999586c3b7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:cc:61:cb:b0:bc:e6:0d:f4:75:6e:f0:f6:
de:29:ed:f3:fb:00:04:24:24:1f:a2:45:3d:d2:03:
2a:3e:31:43:41:29:93:03:59:a4:21:f4:f2:2b:8b:
61:10:a7:a8:e4:c8:1d:ed:9e:dd:2b:5f:63:7a:cd:
05:c6:53:12:aa:c7:8f:5a:cc:59:72:56:06:64:2c:
83:12:91:8f:08:8b:30:c8:ca:74:21:0c:0d:d9:69:
b8:9f:bc:17:ad:b9:ed:61:28:8c:66:31:3a:df:27:
cc:e9:ee:e8:96:ea:d9:bb:2d:88:08:68:a9:ff:fa:
7e:b4:0a:05:0f:61:ba:eb:53:8f:a3:f9:37:01:25:
c9:76:8a:3c:29:0c:16:27:f0:65:f3:f8:9d:1d:4f:
ac:2f:f3:cc:4e:e5:b6:a1:0f:f5:b9:e0:cc:57:09:
30:1d:3c:fc:cf:0f:2b:e7:48:8d:ba:d6:33:ad:47:
4b:58:a9:57:a6:c4:77:e4:b2:0b:12:20:f2:d4:18:
68:e5:70:c0:9f:ee:c1:e5:09:d4:9f:54:77:aa:91:
4a:39:92:bc:ba:e5:85:36:bb:43:27:2c:cb:85:dc:
b6:77:c4:70:c7:d7:9a:94:f1:f1:0d:e5:2b:f7:c0:
04:26:cc:ae:9f:00:4a:33:75:07:c6:38:d6:16:a0:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:4E:4B:D7:64:98:88:A3:1B:7A:DB:B6:1D:99:95:86:C3:B7:FA
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/pgFOS9dkmIijG3rbth2ZlYbDt_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:67:4b:38:fb:93:e3:e5:21:cc:64:ee:6d:15:b1:df:3c:2e:
85:6b:81:22:43:b6:ed:e1:91:82:c7:d6:30:4b:0e:ed:ea:8d:
21:a9:8a:0c:7c:e1:96:d8:a2:6f:02:4f:04:58:1d:c6:c1:59:
46:4b:db:ee:df:ad:eb:ab:e6:06:a8:3a:48:4b:26:61:ea:2a:
e8:f4:b4:26:16:8b:21:b5:c0:43:bf:7b:35:03:97:5c:89:7c:
81:fe:33:79:86:01:a1:e0:c2:d6:b5:19:24:78:57:5a:d8:d2:
9a:b9:97:60:c4:7a:12:0f:39:5f:b0:9f:0d:54:41:f8:bb:c4:
55:ae:df:cd:41:ab:f6:6c:93:c8:3b:03:f7:0e:da:ce:af:70:
cd:ab:96:57:67:1b:83:44:fc:90:d7:cc:56:e5:b7:c9:cc:3c:
a0:36:ea:ff:49:ed:17:dd:09:6a:52:f5:a1:62:92:5f:44:6d:
86:6f:a3:51:c1:76:f7:87:20:26:07:6b:e1:97:18:bc:5e:eb:
5f:31:37:64:d2:f9:a1:c0:e1:ee:26:2c:71:eb:74:f6:b4:90:
be:b9:b6:ec:40:3f:7e:ae:22:c4:76:cf:30:a3:5c:9b:61:d1:
9c:d8:40:46:da:22:aa:ac:9e:cd:62:49:8b:22:d8:af:68:47:
33:20:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:17 2026 by rpki-client