Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pjd_PrWmsW4PHzw0uN-zNUvQ3kY.roa
File: pjd_PrWmsW4PHzw0uN-zNUvQ3kY.roa (raw, json)
Hash identifier: 4iPuxaBwSW1wCXyiP5yMIHd9wt4L4IQUxGii0SbeQ8w=
Subject key identifier: A6:37:7F:3E:B5:A6:B1:6E:0F:1F:3C:34:B8:DF:B3:35:4B:D0:DE:46
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FFBA865B4798FA3606F31E0FE403AC230
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pjd_PrWmsW4PHzw0uN-zNUvQ3kY.roa
Signing time: Thu 13 Aug 2026 15:05:45 +0000
ROA not before: Thu 13 Aug 2026 15:05:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 79.99.147.0/24 maxlen: 24
82.153.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a8:65:b4:79:8f:a3:60:6f:31:e0:fe:40:3a:c2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 13 15:05:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6377f3eb5a6b16e0f1f3c34b8dfb3354bd0de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:f2:4a:44:ec:d4:0f:d3:f1:4f:89:f2:ca:
85:99:3f:a0:f4:42:cc:52:c4:a6:88:b8:79:05:15:
2f:f3:d2:60:db:fc:5f:d7:65:1c:c9:05:14:2c:be:
ad:2f:71:bf:07:3e:fa:66:19:1f:7b:49:c1:49:aa:
d1:36:63:f1:88:2f:e5:40:b7:f3:74:54:d9:0f:44:
6f:6b:c7:8a:ed:f4:8f:31:bd:79:48:9c:84:67:74:
55:7c:7a:90:32:c2:3e:e9:39:54:8e:57:c7:2b:7b:
1d:83:2a:82:5a:7c:fa:85:69:54:db:0b:b3:2d:7f:
e6:2c:85:44:3a:df:c3:a8:83:d5:3b:14:d2:1a:b1:
1a:f1:89:f9:96:da:f5:23:21:26:aa:5c:9d:fa:85:
24:1d:b5:79:18:47:15:27:79:c4:b0:a5:46:01:53:
7d:79:b4:bd:f1:05:1a:76:e1:1a:a6:df:f7:09:bf:
58:59:78:c6:4c:ea:ea:0a:60:3a:cb:fd:87:05:6c:
88:b7:5d:dc:14:a0:8b:d6:a5:17:87:53:7e:4c:60:
3e:c2:b2:6e:da:63:8e:78:3c:37:24:53:9a:2d:60:
cc:30:b7:84:34:ad:b2:ec:7f:1f:e0:86:b2:c0:69:
d4:69:a7:38:5b:cd:1d:df:ba:bb:d6:66:ce:17:14:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:7F:3E:B5:A6:B1:6E:0F:1F:3C:34:B8:DF:B3:35:4B:D0:DE:46
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pjd_PrWmsW4PHzw0uN-zNUvQ3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.147.0/24
82.153.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:bf:46:7f:4b:ee:d2:76:fd:ad:75:84:4b:c2:b8:a4:54:c3:
be:d9:b1:58:af:3c:26:50:6f:bc:1f:54:a5:3c:92:38:d2:66:
55:55:5c:fd:b2:91:4b:68:a4:72:d3:1e:80:4c:74:f7:7a:d7:
27:ea:8d:c2:39:bd:d5:c8:2b:33:e2:15:7f:f0:d4:27:8b:b4:
68:c5:84:8c:f1:ae:6f:ea:35:e1:bd:6f:ba:da:79:d5:da:6d:
65:2c:04:f0:a0:22:4b:5d:ef:a1:04:1b:a0:04:88:14:ac:07:
96:2a:3f:5d:e4:04:95:7f:07:c9:b6:6b:07:00:b6:79:19:e6:
90:1d:d2:b5:0f:40:fe:5d:96:04:80:ee:89:7c:97:b8:11:68:
84:92:28:de:70:d4:54:2a:54:ae:7f:08:d2:28:81:20:8f:39:
5d:e0:bf:38:7a:92:4e:6f:e1:b9:f8:1f:6c:24:e6:73:5d:ba:
4b:3a:cb:ad:f3:b2:37:8e:7e:ce:d7:48:d3:f8:79:b1:70:b0:
03:db:31:29:ab:1a:de:e4:ee:8f:f3:92:5c:48:7c:6b:f8:e6:
2d:49:ed:15:6c:83:17:ec:56:e3:72:86:c0:d6:d0:70:5c:da:
14:02:f5:cb:a8:5a:f9:62:36:d2:63:2b:ef:99:69:52:aa:49:
d5:11:cb:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/7qGW0eY+jYG8x4P5AOsIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwODEzMTUwNTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjM3N2YzZWI1YTZiMTZlMGYxZjNjMzRiOGRmYjMzNTRiZDBkZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCTySkTs1A/T8U+J8sqFmT+g9ELM
UsSmiLh5BRUv89Jg2/xf12UcyQUULL6tL3G/Bz76Zhkfe0nBSarRNmPxiC/lQLfz
dFTZD0Rva8eK7fSPMb15SJyEZ3RVfHqQMsI+6TlUjlfHK3sdgyqCWnz6hWlU2wuz
LX/mLIVEOt/DqIPVOxTSGrEa8Yn5ltr1IyEmqlyd+oUkHbV5GEcVJ3nEsKVGAVN9
ebS98QUaduEapt/3Cb9YWXjGTOrqCmA6y/2HBWyIt13cFKCL1qUXh1N+TGA+wrJu
2mOOeDw3JFOaLWDMMLeENK2y7H8f4IaywGnUaac4W80d37q71mbOFxTFRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKY3fz61prFuDx88NLjfszVL0N5GMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvcGpkX1ByV21zVzRQSHp3MHVOLXpOVXZRM2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2OTAwQA
Upl4MA0GCSqGSIb3DQEBCwUAA4IBAQA7v0Z/S+7Sdv2tdYRLwrikVMO+2bFYrzwm
UG+8H1SlPJI40mZVVVz9spFLaKRy0x6ATHT3etcn6o3COb3VyCsz4hV/8NQni7Ro
xYSM8a5v6jXhvW+62nnV2m1lLATwoCJLXe+hBBugBIgUrAeWKj9d5ASVfwfJtmsH
ALZ5GeaQHdK1D0D+XZYEgO6JfJe4EWiEkijecNRUKlSufwjSKIEgjzld4L84epJO
b+G5+B9sJOZzXbpLOsut87I3jn7O10jT+HmxcLAD2zEpqxre5O6P85JcSHxr+OYt
Se0VbIMX7FbjcobA1tBwXNoUAvXLqFr5YjbSYyvvmWlSqknVEcum
-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:26 2026 by rpki-client