Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/PA7a7k_FqAbOCSSdny8A5zy4pu0.roa
File: PA7a7k_FqAbOCSSdny8A5zy4pu0.roa (raw, json)
Hash identifier: 6VEOQ9K5YG9bmrKa0p42IftHBCyP7E0XhFsTGVC9+aE=
Subject key identifier: 3C:0E:DA:EE:4F:C5:A8:06:CE:09:24:9D:9F:2F:00:E7:3C:B8:A6:ED
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 019F2368E3B5EDD48776A9E72663DFA427FF
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/PA7a7k_FqAbOCSSdny8A5zy4pu0.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.239.62.0/24 maxlen: 24
185.138.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:b5:ed:d4:87:76:a9:e7:26:63:df:a4:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c0edaee4fc5a806ce09249d9f2f00e73cb8a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:9d:b3:aa:4f:f1:eb:1e:0d:88:ac:76:e5:
57:82:9c:59:6a:cf:b2:55:cf:93:f9:ae:4f:e7:33:
11:b7:d4:d0:ab:44:e6:a8:14:c0:76:5d:49:22:cf:
3e:5e:fe:9d:94:ff:cf:8b:68:96:eb:81:6c:7a:68:
d4:3d:73:5c:61:18:7e:17:bc:ad:bc:f1:6d:57:83:
2b:bf:00:7f:93:96:05:a0:1b:9c:25:3e:01:e2:2a:
c4:7a:03:43:34:11:13:b4:e7:9f:67:d6:54:db:a8:
3e:36:7b:06:22:50:66:30:04:4e:fa:81:98:15:f5:
ba:58:75:bf:b0:26:c9:a7:ab:78:c5:a3:ae:14:a4:
98:7d:c5:60:b6:ea:7e:d0:41:57:61:f6:f4:23:31:
9d:50:b0:cc:6a:32:1d:01:fa:0d:db:61:71:cb:8b:
55:81:52:7c:0d:e0:19:1b:b8:ca:53:1f:f0:5b:7b:
9c:bf:63:36:1b:1c:c3:87:e8:a3:44:cd:18:a4:73:
24:55:49:37:09:14:fe:22:17:64:41:20:1c:08:5f:
3f:71:c9:fd:43:5a:e4:dc:5d:61:6f:be:7d:80:f6:
87:c5:a0:fd:82:3c:04:30:f0:1b:8a:75:e0:1d:cf:
55:bd:bd:ae:6e:28:c6:0d:d9:cb:47:57:a2:d7:4e:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:DA:EE:4F:C5:A8:06:CE:09:24:9D:9F:2F:00:E7:3C:B8:A6:ED
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/PA7a7k_FqAbOCSSdny8A5zy4pu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
185.138.235.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d1:73:3c:bb:7f:88:a6:85:48:e4:02:74:e1:9a:f0:8d:96:
ea:db:a6:15:e8:74:92:19:c5:3c:57:39:e0:57:06:9f:6f:e9:
2c:3f:5b:15:bb:a7:87:16:a7:f0:80:d1:78:24:54:6e:8f:a5:
69:72:d8:a6:db:f2:6c:7a:b9:69:b6:62:1f:db:68:b3:eb:74:
23:b9:87:66:17:63:f3:8f:4f:b1:71:25:c1:e7:71:71:8f:25:
d2:b2:62:a3:91:db:a6:99:98:f0:86:cd:9e:88:00:8e:73:1e:
76:e8:80:10:8e:eb:57:f3:82:1c:49:55:a1:45:5d:de:c8:11:
b4:ac:57:66:4c:c2:e8:dc:49:b9:73:f9:3b:92:60:03:a6:42:
80:f2:e0:c7:65:67:bf:dd:ee:8f:7a:bc:85:f3:94:ee:b4:af:
10:fd:bc:21:b6:d4:d7:67:cd:21:c5:f4:80:fe:ce:2e:cc:22:
70:a5:95:eb:ea:e6:ea:b9:94:6a:13:c3:2d:b5:35:3c:6e:20:
db:b7:38:ab:51:b8:f9:da:63:32:c1:57:37:1a:4a:b5:d7:fc:
52:6a:2f:29:6c:b3:0a:50:35:b6:09:ad:b5:82:40:11:52:f9:
87:04:5f:bb:38:c7:ca:a6:16:1c:bd:f9:5b:3f:46:e7:c7:13:
9a:53:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 14:02:40 2026 by rpki-client