Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pLBi2Mr_FQIMThTcSFIDRIJCiUU.roa
File: pLBi2Mr_FQIMThTcSFIDRIJCiUU.roa (raw, json)
Hash identifier: SvI4Rl+RRJDx+5Z8idY2btQTjWtX2d5c4fCu+DkjxiM=
Subject key identifier: A4:B0:62:D8:CA:FF:15:02:0C:4E:14:DC:48:52:03:44:82:42:89:45
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019FD640202BA0DEB4B593F145B7468FCB48
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pLBi2Mr_FQIMThTcSFIDRIJCiUU.roa
Signing time: Thu 06 Aug 2026 08:45:54 +0000
ROA not before: Thu 06 Aug 2026 08:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36384
IP address blocks: 89.207.224.0/24 maxlen: 24
89.207.229.0/24 maxlen: 24
2a00:79e1::/32 maxlen: 32
2a00:79e1:800::/42 maxlen: 42
2a00:79e1:abc::/46 maxlen: 46
2a00:79e1:f00::/40 maxlen: 40
2a00:79e1:f000::/38 maxlen: 38
2a00:79e1:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:40:20:2b:a0:de:b4:b5:93:f1:45:b7:46:8f:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Aug 6 08:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4b062d8caff15020c4e14dc4852034482428945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:12:64:0a:6d:25:6e:97:42:3a:c9:b9:71:
9d:08:71:65:5b:fb:68:ac:a6:09:fc:31:1c:bc:e0:
c3:73:58:12:9f:83:88:4d:57:7d:77:79:44:36:db:
8b:94:84:89:7d:bb:d9:1c:97:c0:35:32:f4:86:90:
28:8d:4f:aa:23:4f:c0:2e:cc:40:43:96:72:16:ba:
7c:c1:82:21:50:25:18:5a:15:5a:16:b8:68:38:79:
55:09:e4:91:07:9d:9d:41:4e:b9:9d:e9:53:a4:d1:
06:e5:9e:5a:54:e2:bf:e6:67:98:f3:5d:31:6c:af:
01:09:ba:1a:22:bd:c3:98:e2:a6:db:8c:ec:93:5e:
a0:ad:2a:7e:8d:13:00:7c:93:18:2d:50:b3:58:d5:
04:6c:86:ba:c6:f3:98:0b:20:dc:b5:a0:50:28:5d:
10:d2:94:85:97:4a:48:28:c6:65:4b:06:b3:51:96:
24:ae:79:92:01:d2:9d:c4:2f:f7:b0:e6:57:79:89:
a4:d8:12:21:3c:c5:30:7e:a4:d2:cc:ee:3f:1d:7c:
4c:09:a2:08:e2:fa:b9:41:e9:ad:f9:d6:20:17:cd:
c9:57:eb:af:d0:16:e6:44:cc:bb:b7:43:0c:81:09:
d6:35:cb:6d:df:a7:86:43:f3:ca:75:93:f8:b7:bf:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:62:D8:CA:FF:15:02:0C:4E:14:DC:48:52:03:44:82:42:89:45
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pLBi2Mr_FQIMThTcSFIDRIJCiUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.224.0/24
89.207.229.0/24
IPv6:
2a00:79e1::/32
Signature Algorithm: sha256WithRSAEncryption
90:bd:3c:ea:b5:c6:f3:48:87:bc:ae:47:00:21:7d:3b:1d:78:
1f:85:89:a9:ab:54:2c:80:33:79:de:7f:d0:0d:32:1e:e1:c8:
2d:ad:c2:53:e2:6d:c4:dc:43:c1:4b:11:0a:9a:2b:db:2c:e6:
a3:75:57:70:a7:7d:96:53:5e:1b:67:91:9b:35:c4:15:0e:3c:
f9:81:95:91:b8:1b:04:70:0f:28:8d:31:df:75:ca:9e:2a:58:
f5:0d:b0:ba:94:4c:3f:e4:b1:16:4a:b7:2b:75:c9:09:d9:cb:
d8:5d:03:a9:1c:b3:d9:50:e8:5b:16:3d:4a:4e:fb:09:a4:82:
65:e7:dc:3b:92:70:cd:79:66:ac:5e:fa:4d:a9:d4:ae:94:ce:
0d:89:57:6d:4d:39:ef:50:8c:b7:a4:53:21:9f:a9:f1:a3:49:
c2:ce:a8:13:38:5d:81:b7:3b:34:e8:75:d5:00:d9:7b:04:63:
8e:09:ba:a6:47:b6:eb:64:fc:32:25:34:e6:fc:55:e4:25:f8:
90:21:57:9f:29:76:92:6c:96:15:88:f4:7e:47:5e:85:a4:af:
de:6c:22:6f:53:2f:4c:b2:96:4e:81:21:65:0b:3f:19:56:3b:
cb:30:de:e9:52:38:ef:74:8b:ec:1f:23:46:99:0e:b9:2b:e5:
e6:dc:94:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:50:38 2026 by rpki-client