Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Pfg9FH5XYb-hpUeNL9hp3DzQbdM.roa
File: Pfg9FH5XYb-hpUeNL9hp3DzQbdM.roa (raw, json)
Hash identifier: p/GObzoBsY7zMPkcKt4FWpXQRqrAp5+kOHSvY2fMMuY=
Subject key identifier: 3D:F8:3D:14:7E:57:61:BF:A1:A5:47:8D:2F:D8:69:DC:3C:D0:6D:D3
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1450BF755EB6B0ECF8406F4E05792B157
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Pfg9FH5XYb-hpUeNL9hp3DzQbdM.roa
Signing time: Fri 16 Oct 2026 14:09:34 +0000
ROA not before: Fri 16 Oct 2026 14:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 213.182.209.0/24 maxlen: 24
213.182.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:0b:f7:55:eb:6b:0e:cf:84:06:f4:e0:57:92:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 16 14:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3df83d147e5761bfa1a5478d2fd869dc3cd06dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:64:60:04:4f:c3:dd:88:b0:73:39:f0:bf:
65:ba:db:c4:23:c7:b9:10:58:27:ec:68:88:90:bf:
76:fd:13:b0:b7:6b:9b:71:7b:87:74:c0:2e:bd:4f:
2d:7d:50:83:b6:17:e1:f3:a2:37:06:f1:58:18:4c:
a9:01:14:68:ae:90:bc:06:f1:83:8e:bc:22:a5:5f:
18:b7:0c:e9:07:46:05:7c:24:ce:0f:18:13:39:32:
92:60:80:8b:0e:7a:02:36:55:ce:9b:af:a0:8d:cc:
19:76:17:58:c7:d6:c1:ff:5b:00:e7:40:fd:d7:5b:
6b:50:ed:68:35:49:16:c7:8d:ab:31:03:ee:b1:ad:
e6:dd:9f:68:3f:ef:a6:5a:73:09:96:3a:19:0d:19:
b2:0e:f1:4a:b0:41:cb:20:ea:e6:ac:53:41:4d:dc:
16:69:4b:83:6d:eb:a3:8c:18:57:b5:72:99:01:72:
26:e8:43:1c:2a:4c:5e:a3:11:a6:d1:72:ad:ef:50:
e5:3c:34:32:2e:f3:f3:e7:7a:05:ed:ac:7f:e5:9f:
39:fd:4f:06:a3:15:24:a1:14:ac:2e:9e:cc:3b:aa:
27:0a:22:a3:79:7f:47:b4:c4:96:17:f1:9c:41:33:
aa:3b:ce:ca:a5:67:5e:8d:f2:ce:ce:51:fa:7d:ca:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:3D:14:7E:57:61:BF:A1:A5:47:8D:2F:D8:69:DC:3C:D0:6D:D3
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/Pfg9FH5XYb-hpUeNL9hp3DzQbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.209.0/24
213.182.214.0/24
Signature Algorithm: sha256WithRSAEncryption
42:94:7d:bf:ad:7a:00:fe:09:f8:41:60:e1:9f:6a:ed:eb:91:
2b:f2:dd:98:79:bc:c6:03:ab:6a:86:1e:1f:98:7b:44:d8:97:
fd:f4:08:37:96:13:60:7c:0c:b1:a5:ba:96:a2:a9:45:cf:dc:
59:9e:ec:5f:02:10:d4:d6:8e:83:82:c5:71:88:ec:b7:7e:53:
60:d4:13:b6:7c:60:ce:93:c7:a3:ea:6b:6c:f4:5a:fc:36:5a:
0e:e0:8c:14:95:1d:40:82:14:b9:27:0b:51:45:b1:ba:04:f8:
38:2d:e0:f3:7f:11:38:c8:80:7e:6b:c8:3f:67:b9:96:11:90:
c2:37:2c:34:40:d2:72:2c:22:32:ae:68:cc:29:46:08:0f:6d:
a8:da:a8:81:50:f5:a9:5d:eb:d1:e3:f2:4e:81:4c:ef:bf:d4:
3e:ee:77:16:a8:f0:70:de:ad:06:f1:68:05:95:04:f3:b7:dd:
ad:26:f3:95:44:77:6c:57:f0:85:36:04:a1:75:fe:b8:cf:4f:
16:78:43:fe:06:7a:b0:c4:9b:28:88:e8:49:13:1a:e2:59:09:
a9:8c:27:b1:5d:9f:42:a0:ed:54:24:29:26:d2:13:ac:99:3e:
18:72:c4:51:e0:13:8b:82:6e:6c:38:36:6e:30:e0:1c:15:b7:
b1:ae:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:56 2026 by rpki-client