Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/puPiLzKc1gTDog4ORl0jcUy0eEc.roa
File: puPiLzKc1gTDog4ORl0jcUy0eEc.roa (raw, json)
Hash identifier: 9kbry6I6m6eOz+KPWkolYu9NnTr1Jhg4kFBwX+7kH/w=
Subject key identifier: A6:E3:E2:2F:32:9C:D6:04:C3:A2:0E:0E:46:5D:23:71:4C:B4:78:47
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0F5DAEB6DDF30F49A6DF8269ED1D0E8EF
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/puPiLzKc1gTDog4ORl0jcUy0eEc.roa
Signing time: Thu 01 Oct 2026 05:05:59 +0000
ROA not before: Thu 01 Oct 2026 05:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 165.84.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:da:eb:6d:df:30:f4:9a:6d:f8:26:9e:d1:d0:e8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 1 05:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6e3e22f329cd604c3a20e0e465d23714cb47847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:3b:d9:de:39:98:51:ae:e1:a7:33:4c:09:
7c:ae:62:40:62:5f:1d:ad:fa:49:d3:81:b4:cd:09:
7c:b4:55:9f:5a:16:fb:37:e1:58:91:96:45:fe:c2:
70:87:88:be:23:1c:26:c4:8d:72:9f:ef:b8:6d:1a:
c8:d4:25:80:25:28:77:cf:ee:ef:c5:35:e8:56:2d:
93:1a:5e:f2:d9:e3:d1:3b:90:b2:55:85:34:9f:41:
9b:3b:96:e3:8b:78:6f:71:c9:56:b5:ed:19:87:ae:
c5:06:1e:cf:25:7d:7f:80:37:87:03:1e:45:3e:2c:
c3:36:79:bd:c0:0a:f3:bc:ff:fd:0a:d2:b1:6b:14:
6e:60:0a:db:ab:ee:dc:e5:3e:91:80:bc:07:b6:e1:
f9:13:d4:7f:93:53:b1:88:48:42:40:94:29:39:36:
2d:fa:34:0e:c6:7a:25:27:27:07:3d:1d:e0:c2:2a:
9a:02:de:5b:b2:df:50:2e:66:66:7c:d7:eb:b9:d3:
f8:a4:a0:56:c8:fb:71:9c:a8:a9:04:d4:47:5f:e7:
f8:05:20:64:f8:0e:40:6b:46:03:e7:6b:ae:39:61:
f4:a8:19:ac:f1:3d:4f:77:dd:9a:4e:a7:e9:cd:f5:
d9:f1:bc:fa:d4:75:92:5f:52:f7:d3:0a:53:21:15:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:E2:2F:32:9C:D6:04:C3:A2:0E:0E:46:5D:23:71:4C:B4:78:47
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/puPiLzKc1gTDog4ORl0jcUy0eEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.228.0/24
Signature Algorithm: sha256WithRSAEncryption
66:93:65:11:42:83:81:5b:43:43:06:eb:7e:95:fb:7f:08:a0:
6e:67:0f:0f:7a:cd:b6:8c:f9:b9:a7:c6:93:6c:d0:0e:2c:ae:
73:84:49:6e:a7:9f:c2:e7:a6:f2:85:a2:b7:da:dc:10:62:82:
67:ce:d2:61:c6:23:44:8a:30:70:dc:0c:55:4c:63:7e:1f:a8:
50:48:db:a6:3a:af:2c:40:bc:98:66:ef:c6:dd:e7:ab:74:24:
c4:ac:06:a3:63:c7:87:af:e1:45:09:ed:03:d6:f7:83:a4:72:
90:09:70:8f:9a:ed:e1:db:b1:58:f5:02:57:da:fb:4d:00:4b:
27:06:50:10:0a:a8:df:7f:52:b7:53:be:c9:f0:49:2d:fd:70:
05:d1:da:79:24:a8:4d:ec:e5:29:f4:cc:9f:6e:40:de:82:3b:
71:92:87:cf:c9:27:dc:76:40:49:dd:f3:b0:b9:0b:88:9a:46:
89:ed:ac:44:ca:27:77:d6:54:11:5d:f9:a7:d0:5e:53:c0:0b:
4f:cb:0c:ba:0e:b9:1d:82:d5:c6:e8:6e:b7:d9:e1:94:58:5c:
7f:f1:66:17:dc:2b:de:66:93:b5:d3:cc:2d:85:f9:f9:d4:3c:
b4:78:9e:ea:2a:67:6a:00:f0:b6:28:77:4e:e7:69:91:44:b4:
29:91:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:16 2026 by rpki-client