Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PIDDEbemErSdTEC2y8PIVK1VsMc.roa
File: PIDDEbemErSdTEC2y8PIVK1VsMc.roa (raw, json)
Hash identifier: emOSp3YBEHSz1/U0izrGfFUXPFP0gEF/+sG0svqzHv4=
Subject key identifier: 3C:80:C3:11:B7:A6:12:B4:9D:4C:40:B6:CB:C3:C8:54:AD:55:B0:C7
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A1534DA4E92642FAAC1F64A31929897ECB
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PIDDEbemErSdTEC2y8PIVK1VsMc.roa
Signing time: Mon 19 Oct 2026 08:35:59 +0000
ROA not before: Mon 19 Oct 2026 08:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149573
IP address blocks: 217.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:4d:a4:e9:26:42:fa:ac:1f:64:a3:19:29:89:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Oct 19 08:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c80c311b7a612b49d4c40b6cbc3c854ad55b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:b6:db:8b:ca:aa:7e:e4:6d:35:60:17:2b:
b0:69:4e:d7:e1:a3:c5:56:9f:e8:ca:24:14:cd:40:
c2:0d:c2:01:7b:bb:81:89:60:97:e5:54:93:e4:6c:
47:33:7e:4f:2d:f0:bd:8c:a5:fa:af:be:10:73:cc:
6a:67:b2:ca:3a:78:4c:a9:cd:ea:6e:b0:4f:a8:74:
bd:24:d6:af:fd:47:dc:d9:8d:4c:40:c1:e6:99:b1:
37:0d:32:4a:f2:00:89:66:8a:4f:50:5e:6b:fc:93:
b6:1c:f5:a1:5d:ec:d2:02:38:cf:4c:a4:0a:21:f9:
ef:be:86:56:6b:6b:c7:c8:81:9f:61:a6:9f:9d:57:
bf:71:5d:c2:71:27:33:e4:19:e9:ad:06:db:0a:71:
21:fb:44:64:76:5d:d8:7b:d3:a4:c4:0b:1e:92:ba:
72:e0:42:c5:b6:8e:f9:aa:e8:cd:70:20:ae:d4:c2:
b9:7d:c1:66:59:83:2d:76:43:d1:d9:c0:81:25:e4:
fa:81:aa:00:6d:72:dd:ef:53:99:11:1c:90:47:51:
a6:ff:8b:ff:a1:b5:37:f5:d5:95:54:a6:52:80:b6:
a2:d6:f0:c1:cf:6a:32:3c:99:ad:54:80:b7:b8:87:
7b:93:fb:dc:80:e9:f5:59:f9:71:a0:51:67:e2:e5:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:C3:11:B7:A6:12:B4:9D:4C:40:B6:CB:C3:C8:54:AD:55:B0:C7
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PIDDEbemErSdTEC2y8PIVK1VsMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6d:d7:ec:21:9d:1b:8f:57:2d:1b:39:55:d1:76:e8:99:e9:
a6:a0:db:a3:4f:34:f6:7a:c9:68:00:d8:69:90:ca:50:2d:7b:
15:35:ea:6a:57:a8:a9:49:a1:ea:07:6f:43:d5:b6:3d:be:c0:
d6:27:8f:f1:91:61:3e:26:92:70:30:01:04:f3:f5:f5:02:dd:
df:34:85:34:5f:a5:a0:fa:b0:bf:03:84:bb:8d:df:15:63:8a:
f5:31:a7:b3:6b:02:1b:03:63:b9:a8:d3:35:59:83:7b:46:8f:
fc:3f:12:bc:7f:df:a8:44:f5:dc:0d:9a:f8:25:b9:be:4b:d1:
fe:84:a3:62:74:97:51:71:01:ef:27:95:16:9c:8f:1f:df:32:
e4:b4:45:b8:e6:0e:78:57:bd:f7:6e:f2:9c:d1:2f:79:d6:77:
db:7b:6a:13:ec:97:d9:f1:91:87:00:20:f4:a4:91:6b:3c:16:
48:dd:94:cb:92:ac:2c:d4:1c:ea:ec:47:54:7b:78:9a:d8:3d:
ff:4b:6e:5f:ed:b7:64:d2:62:0e:4b:62:70:03:21:ff:9c:8b:
4a:6e:c4:32:86:ce:e1:ec:d1:36:42:08:8b:af:e9:c1:b3:fb:
ef:4a:af:2c:70:28:bc:66:83:57:ee:a5:14:01:f2:ca:a2:dc:
3d:b4:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:19:52 2026 by rpki-client