Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/plplcojObk3dawLZH3Mnt5_h870.roa
File: plplcojObk3dawLZH3Mnt5_h870.roa (raw, json)
Hash identifier: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=
Subject key identifier: A6:5A:65:72:88:CE:6E:4D:DD:6B:02:D9:1F:73:27:B7:9F:E1:F3:BD
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0E92B7579887B0903E10380888F70DFBA
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/plplcojObk3dawLZH3Mnt5_h870.roa
Signing time: Mon 28 Sep 2026 17:58:54 +0000
ROA not before: Mon 28 Sep 2026 17:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 213.109.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2b:75:79:88:7b:09:03:e1:03:80:88:8f:70:df:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 28 17:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65a657288ce6e4ddd6b02d91f7327b79fe1f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:84:0f:44:08:9c:b4:75:b2:da:0b:30:23:
33:5f:77:1c:9c:9b:5d:22:38:7b:7d:44:c0:5e:3d:
77:8d:ff:13:0a:d0:61:7b:8a:8b:3e:0d:bb:4a:ff:
ac:46:ed:b1:74:39:42:61:e5:62:e9:19:23:e2:c3:
7b:00:b4:14:7e:18:9f:70:c2:aa:a2:9b:fd:61:55:
bc:48:d3:e1:ce:4d:66:c5:dd:5c:eb:98:50:7b:78:
67:b7:ea:2d:43:a1:e7:dc:88:db:b0:8e:27:0f:6d:
1a:83:28:9d:09:84:7e:95:78:92:ee:d4:f8:69:73:
29:b2:71:15:21:c2:13:9e:28:88:c0:b0:4a:af:28:
ee:77:07:95:7d:96:ac:4a:30:e0:e5:1c:b1:93:1a:
7c:65:07:11:c6:50:62:56:83:6b:e7:1f:61:a3:4b:
89:2c:bd:9b:9e:a5:86:7f:07:76:a7:af:d4:91:eb:
be:a7:06:0e:d8:cd:57:c2:2e:54:9f:04:9f:e8:d1:
1b:6b:af:c3:dd:68:df:66:c0:ad:fd:d8:7a:c2:6e:
76:f0:c3:12:16:8a:5e:1f:cb:33:45:bf:9d:17:25:
8b:7f:35:c8:63:59:c2:3b:06:39:a9:a8:6a:d8:e6:
b8:f6:27:93:e2:e2:aa:04:f8:77:ef:43:de:9e:a4:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5A:65:72:88:CE:6E:4D:DD:6B:02:D9:1F:73:27:B7:9F:E1:F3:BD
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/plplcojObk3dawLZH3Mnt5_h870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.182.0/24
Signature Algorithm: sha256WithRSAEncryption
83:67:5e:5b:1b:f1:d9:2b:75:86:91:9b:9b:6c:a2:2a:9c:68:
cd:b5:26:6c:a1:97:a0:65:fc:5f:c0:ef:fe:fd:63:80:4c:6a:
67:e4:62:57:82:a4:52:85:76:b7:8e:41:ab:95:14:f1:ed:b6:
6a:91:3c:9e:d7:25:53:07:d3:24:d2:c4:02:45:31:ff:fd:6e:
f8:30:5e:4d:56:28:d1:1b:df:74:48:06:24:16:e2:54:39:69:
42:6b:5f:e5:b3:60:43:76:eb:9d:97:97:fa:59:d6:24:65:ee:
25:a7:10:00:3c:66:85:91:44:78:f7:18:1f:51:13:98:75:ac:
1b:ec:e8:fb:d6:77:a7:ee:7e:8c:b5:20:e6:af:d8:ed:b8:c3:
17:b6:b9:99:38:31:13:64:f0:fa:52:3f:09:a3:2b:c5:66:10:
d5:35:92:cd:cc:c2:a2:da:d4:41:2e:18:0f:47:47:ab:d6:e6:
fa:5e:3f:ab:00:24:29:f5:51:15:af:a0:68:42:fd:eb:97:d3:
82:58:3a:ef:99:45:b3:36:5d:2b:db:24:d3:59:25:0b:64:b7:
2f:fe:1a:48:05:bc:fd:92:8d:df:88:11:5a:33:09:63:14:07:
31:0c:cd:aa:bc:18:bd:b8:be:96:fa:a2:15:22:a0:bc:45:39:
6b:72:e3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:49:43 2026 by rpki-client