Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/pmgPvDWNXzx67afVGPG0OJgW7X0.roa
File: pmgPvDWNXzx67afVGPG0OJgW7X0.roa (raw, json)
Hash identifier: ZnEtDVkvLqmPOoGIeREvPS9v/DfhjVSig9E44aTD2xs=
Subject key identifier: A6:68:0F:BC:35:8D:5F:3C:7A:ED:A7:D5:18:F1:B4:38:98:16:ED:7D
Certificate issuer: /CN=f6c2e9c2c47f73ac7385a5581ab21a2c35bf37a8
Certificate serial: 019FEFE8FB2A771E72E50F74C2377BF86401
Authority key identifier: F6:C2:E9:C2:C4:7F:73:AC:73:85:A5:58:1A:B2:1A:2C:35:BF:37:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sLpwsR_c6xzhaVYGrIaLDW_N6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/pmgPvDWNXzx67afVGPG0OJgW7X0.roa
Signing time: Tue 11 Aug 2026 08:20:50 +0000
ROA not before: Tue 11 Aug 2026 08:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 2a0c:8740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/9sLpwsR_c6xzhaVYGrIaLDW_N6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/9sLpwsR_c6xzhaVYGrIaLDW_N6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sLpwsR_c6xzhaVYGrIaLDW_N6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:e8:fb:2a:77:1e:72:e5:0f:74:c2:37:7b:f8:64:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c2e9c2c47f73ac7385a5581ab21a2c35bf37a8
Validity
Not Before: Aug 11 08:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6680fbc358d5f3c7aeda7d518f1b4389816ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:17:06:ac:64:17:9a:c3:6f:5c:3d:e5:15:
d9:5a:3b:4a:52:3e:a9:cd:2b:33:fe:27:5a:16:69:
c5:16:23:81:01:e6:8c:37:7a:50:9e:f8:68:9e:c6:
64:be:fd:63:44:7c:b4:03:7c:ab:89:33:2b:27:3e:
a3:7c:ce:47:e2:fd:df:97:72:bc:2d:e4:16:1b:8f:
cc:f2:b6:06:f3:d1:9a:e5:aa:ef:4d:a6:cc:2a:eb:
ad:ed:4e:8f:28:df:4e:df:bb:c8:95:5d:4b:d1:20:
80:ed:6c:4a:ad:c1:90:66:d4:01:cf:70:dc:8a:a4:
de:d6:db:e7:21:17:b4:01:0c:5b:98:85:0b:18:d4:
05:fa:0e:71:bc:4a:72:bb:ef:30:b0:3f:e4:85:d4:
bb:e1:b8:eb:9c:06:ec:65:b0:b5:81:06:27:e5:d3:
21:1a:b8:11:96:36:8a:34:53:9e:eb:b2:f3:e7:68:
e5:09:7b:8e:98:6b:50:ed:85:ee:38:0e:cc:dc:56:
e1:c2:2f:24:94:03:48:bc:1c:b3:ea:5b:7f:44:cd:
07:60:a8:0d:3b:17:97:c5:60:ea:3a:4f:19:c0:45:
83:eb:b8:55:0d:00:f8:84:ac:a5:c7:d7:4c:2b:ab:
75:d6:10:7c:65:1a:63:3a:0a:18:58:7a:a0:ed:42:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:68:0F:BC:35:8D:5F:3C:7A:ED:A7:D5:18:F1:B4:38:98:16:ED:7D
X509v3 Authority Key Identifier:
keyid:F6:C2:E9:C2:C4:7F:73:AC:73:85:A5:58:1A:B2:1A:2C:35:BF:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sLpwsR_c6xzhaVYGrIaLDW_N6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/pmgPvDWNXzx67afVGPG0OJgW7X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b6aaab-9260-43f1-8c8f-d6a89195564f/1/9sLpwsR_c6xzhaVYGrIaLDW_N6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8740::/48
Signature Algorithm: sha256WithRSAEncryption
ad:60:42:f9:65:44:18:f4:f7:26:7e:23:2c:fc:f5:62:0b:b7:
fc:c5:fe:27:ca:13:a1:98:2a:2c:3f:da:49:9a:e0:dd:8d:59:
a1:1b:33:8f:82:49:5d:6f:10:b8:eb:85:46:e8:8f:20:50:e2:
93:74:fd:47:1b:63:dd:5e:af:05:85:f4:2f:ff:d7:01:27:b8:
2f:96:b6:54:3d:e5:88:bd:a6:9c:de:6a:60:cf:af:6d:39:f7:
3d:5e:0b:af:41:d1:f2:80:23:53:02:44:6a:88:55:df:c8:ce:
03:a7:bc:45:b5:e0:d6:db:78:00:38:c8:80:e5:5d:a3:a0:a9:
55:6a:ff:bd:e2:8c:c1:6a:04:3c:aa:40:02:e6:9f:28:bd:16:
f9:fb:e7:f8:e9:8e:0d:bd:76:78:3f:bf:e6:aa:ea:cb:d2:7e:
10:a0:4a:f1:17:3e:ea:b4:01:9f:78:47:48:3d:2b:34:fa:cb:
50:54:79:36:bd:1a:7b:a9:5e:70:4c:0c:c8:e7:ae:41:6b:09:
c4:9a:a7:2f:d8:87:af:8b:3e:8f:c0:d0:a5:bb:7c:ca:8d:c5:
a5:ef:10:91:85:af:7c:ee:da:68:0e:ca:8e:43:ba:ec:c6:dd:
ff:d3:9b:0f:dd:fe:a8:93:d1:c2:f9:eb:f6:74:e6:03:6e:9f:
31:bf:32:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/v6Psqdx5y5Q90wjd7+GQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzJlOWMyYzQ3ZjczYWM3Mzg1YTU1ODFhYjIxYTJjMzVi
ZjM3YTgwHhcNMjYwODExMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjY4MGZiYzM1OGQ1ZjNjN2FlZGE3ZDUxOGYxYjQzODk4MTZlZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX8XBqxkF5rDb1w95RXZWjtKUj6p
zSsz/idaFmnFFiOBAeaMN3pQnvhonsZkvv1jRHy0A3yriTMrJz6jfM5H4v3fl3K8
LeQWG4/M8rYG89Ga5arvTabMKuut7U6PKN9O37vIlV1L0SCA7WxKrcGQZtQBz3Dc
iqTe1tvnIRe0AQxbmIULGNQF+g5xvEpyu+8wsD/khdS74bjrnAbsZbC1gQYn5dMh
GrgRljaKNFOe67Lz52jlCXuOmGtQ7YXuOA7M3Fbhwi8klANIvByz6lt/RM0HYKgN
OxeXxWDqOk8ZwEWD67hVDQD4hKylx9dMK6t11hB8ZRpjOgoYWHqg7ULC6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKZoD7w1jV88eu2n1RjxtDiYFu19MB8GA1UdIwQY
MBaAFPbC6cLEf3Osc4WlWBqyGiw1vzeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNMcHdzUl9jNnh6aGFWWUdySWFMRFdfTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9iNmFhYWItOTI2MC00M2YxLThjOGYt
ZDZhODkxOTU1NjRmLzEvcG1nUHZEV05Yeng2N2FmVkdQRzBPSmdXN1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9iNmFhYWItOTI2MC00M2YxLThjOGYtZDZhODkxOTU1NjRm
LzEvOXNMcHdzUl9jNnh6aGFWWUdySWFMRFdfTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyHQAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCtYEL5ZUQY9PcmfiMs/PViC7f8xf4nyhOhmCos
P9pJmuDdjVmhGzOPgkldbxC464VG6I8gUOKTdP1HG2PdXq8FhfQv/9cBJ7gvlrZU
PeWIvaac3mpgz69tOfc9XguvQdHygCNTAkRqiFXfyM4Dp7xFteDW23gAOMiA5V2j
oKlVav+94ozBagQ8qkAC5p8ovRb5++f46Y4NvXZ4P7/mqurL0n4QoErxFz7qtAGf
eEdIPSs0+stQVHk2vRp7qV5wTAzI565BawnEmqcv2Ieviz6PwNClu3zKjcWl7xCR
ha987tpoDsqOQ7rsxt3/05sP3f6ok9HC+ev2dOYDbp8xvzLD
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:34 2026 by rpki-client