Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PzuqaTz-D_3PezbQ9eaGfZyZGyU.roa
File: PzuqaTz-D_3PezbQ9eaGfZyZGyU.roa (raw, json)
Hash identifier: O9cJtYgV577olLQNZsC8Ly68kS3GDoxhmidNa1ubYwA=
Subject key identifier: 3F:3B:AA:69:3C:FE:0F:FD:CF:7B:36:D0:F5:E6:86:7D:9C:99:1B:25
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 019EB39B7A5841139207B2B43DAB618E7B99
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PzuqaTz-D_3PezbQ9eaGfZyZGyU.roa
Signing time: Wed 10 Jun 2026 22:16:11 +0000
ROA not before: Wed 10 Jun 2026 22:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44692
IP address blocks: 78.31.144.0/23 maxlen: 23
78.31.146.0/23 maxlen: 23
78.31.148.0/23 maxlen: 23
78.31.150.0/23 maxlen: 23
85.202.96.0/20 maxlen: 24
85.202.107.0/24 maxlen: 24
109.125.192.0/19 maxlen: 19
109.125.218.0/23 maxlen: 23
109.125.220.0/22 maxlen: 22
109.125.224.0/23 maxlen: 23
109.125.226.0/23 maxlen: 23
109.125.228.0/23 maxlen: 23
109.125.230.0/23 maxlen: 23
109.125.232.0/22 maxlen: 22
109.125.236.0/22 maxlen: 22
109.125.240.0/22 maxlen: 22
109.125.244.0/22 maxlen: 22
109.125.248.0/22 maxlen: 22
109.125.253.0/24 maxlen: 24
109.125.254.0/24 maxlen: 24
109.125.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:9b:7a:58:41:13:92:07:b2:b4:3d:ab:61:8e:7b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Jun 10 22:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f3baa693cfe0ffdcf7b36d0f5e6867d9c991b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:2d:20:d7:26:d7:bf:5c:8f:44:1a:a0:9c:
24:c0:a4:1b:82:53:76:bb:60:64:77:9d:67:24:e5:
cf:6b:ce:89:ea:60:bb:44:7a:15:69:49:d4:89:ce:
d2:88:d1:73:f6:ad:9f:5b:62:1b:74:3f:a3:7c:d3:
b8:ea:bc:4f:62:b2:4f:5a:87:fa:ff:68:c8:3c:b6:
7e:a2:a7:b7:2f:f7:7e:09:a8:49:42:c2:a3:7d:21:
0b:be:b7:d1:3c:70:ae:08:6b:86:d5:03:01:95:7d:
6c:e5:ce:a7:56:e7:cc:f8:f1:a4:00:12:5d:3b:d2:
10:77:8b:9b:b7:b4:e4:f7:44:3d:b2:f0:04:9a:b6:
ce:fd:e9:af:18:a4:70:5c:4b:32:cb:f8:a7:8d:82:
2b:05:c3:d1:2b:b8:fb:5e:6c:9a:b5:39:e1:cb:64:
52:c4:82:c6:0a:5a:b6:8d:e9:58:3a:12:13:32:72:
e1:a5:08:94:85:6d:e2:e8:35:cb:28:69:23:b9:0d:
e8:42:ab:53:49:56:b8:b3:85:88:43:e2:3d:0e:0c:
f1:bc:38:b3:53:41:b0:d4:00:67:e9:7c:46:23:03:
95:a4:68:f7:79:94:6f:ac:36:d2:c4:93:83:96:9c:
45:84:4f:ca:a5:84:58:e5:ce:19:65:2b:ee:55:b6:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:AA:69:3C:FE:0F:FD:CF:7B:36:D0:F5:E6:86:7D:9C:99:1B:25
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PzuqaTz-D_3PezbQ9eaGfZyZGyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.144.0/21
85.202.96.0/20
109.125.192.0-109.125.251.255
109.125.253.0-109.125.255.255
Signature Algorithm: sha256WithRSAEncryption
62:2a:f1:ad:2b:0d:c9:e4:66:9a:7f:37:38:94:ae:df:43:21:
ba:33:42:13:99:a8:1c:9d:5e:20:87:9d:37:6f:e1:40:fe:fe:
25:b4:bd:8a:b7:ad:ee:d8:81:4e:d1:82:0a:d1:2c:80:30:0f:
5a:12:26:f8:da:ce:e8:4f:e4:3d:2d:d4:13:97:49:dd:cb:1a:
25:90:28:7c:44:05:ea:0e:21:6a:cd:70:3f:41:bd:35:ac:2b:
46:80:df:c9:db:be:7e:9d:a0:04:b0:73:74:96:d4:09:e0:5a:
91:00:62:19:e9:83:5b:d5:2c:2e:21:03:3a:d0:ea:2a:de:23:
f7:b2:11:89:11:98:93:34:2a:c7:44:77:cd:0f:4c:10:cb:cb:
5c:b7:84:ba:12:12:cf:52:42:fa:48:86:5e:e2:5f:45:fa:6a:
31:20:71:a7:ce:2d:f3:dc:b2:06:bc:25:f4:66:d2:d8:fa:92:
29:d7:db:ea:de:5c:c4:51:c0:b1:c1:8c:4c:5b:5d:55:00:3e:
e9:71:40:dc:4a:a2:bc:13:c1:10:44:99:e3:13:60:0c:2b:8a:
0d:8a:a8:3f:7d:6a:bc:4c:c2:cd:b9:d1:b7:50:78:ae:5b:f0:
4f:13:c8:7d:0e:4d:95:0a:d2:1e:71:f1:66:28:ec:47:02:f9:
27:ba:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:42 2026 by rpki-client