Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/PL-txAhjQWFtHrZGpTGWCn6zPqQ.roa
File: PL-txAhjQWFtHrZGpTGWCn6zPqQ.roa (raw, json)
Hash identifier: vggIRq07zyVXxFjek+pphYzXKZ/c2oqcoF1DL/VdpVE=
Subject key identifier: 3C:BF:AD:C4:08:63:41:61:6D:1E:B6:46:A5:31:96:0A:7E:B3:3E:A4
Certificate issuer: /CN=36f6ee6d32790e498950d63877b0321232a7f833
Certificate serial: 019E3F9BD1156B7792A9B299AE9F0B2822B0
Authority key identifier: 36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/PL-txAhjQWFtHrZGpTGWCn6zPqQ.roa
Signing time: Tue 19 May 2026 09:40:36 +0000
ROA not before: Tue 19 May 2026 09:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 137.44.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:9b:d1:15:6b:77:92:a9:b2:99:ae:9f:0b:28:22:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f6ee6d32790e498950d63877b0321232a7f833
Validity
Not Before: May 19 09:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cbfadc4086341616d1eb646a531960a7eb33ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:18:1d:6e:e5:7c:d9:fe:2f:3a:9b:e4:28:
1e:d9:37:ed:58:49:52:7f:bd:69:e9:1b:3f:8f:df:
b2:04:e7:f5:ce:8b:74:5b:29:47:2d:ac:71:7e:42:
79:fa:74:26:60:fd:9f:46:0a:43:f9:06:ee:4f:63:
03:2d:1e:08:cc:88:ec:56:f2:07:ad:e9:55:0c:47:
3b:53:54:b9:f7:38:f2:81:c7:7c:a6:05:48:d2:95:
a9:f3:a8:6a:cb:82:25:0e:bc:9f:50:2d:fd:ab:31:
9e:66:09:a6:5c:bd:42:c8:8a:4e:6a:59:d0:56:b3:
7b:cc:3c:e4:c9:fd:c3:1f:91:c9:aa:6b:6e:2b:8d:
92:40:f4:01:44:37:58:b2:a9:a1:1e:13:a1:27:72:
17:0a:1d:9e:6f:73:7c:8b:14:f8:9e:03:63:40:ff:
75:6e:25:8b:56:f1:03:f2:7e:fc:11:ef:26:7f:ea:
cc:71:13:37:7f:ca:a8:fb:b7:70:93:1a:4d:ee:b6:
a4:da:1c:fb:9b:3a:a6:49:59:79:6a:61:5b:72:86:
ed:aa:92:38:7d:d9:b7:eb:84:c0:d7:99:0a:33:b0:
a3:86:44:90:2e:55:a6:d9:49:22:56:03:6b:66:1e:
92:22:50:09:ca:45:be:8c:d4:78:f6:ed:84:35:5d:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:AD:C4:08:63:41:61:6D:1E:B6:46:A5:31:96:0A:7E:B3:3E:A4
X509v3 Authority Key Identifier:
keyid:36:F6:EE:6D:32:79:0E:49:89:50:D6:38:77:B0:32:12:32:A7:F8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvbubTJ5DkmJUNY4d7AyEjKn-DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/PL-txAhjQWFtHrZGpTGWCn6zPqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/NvbubTJ5DkmJUNY4d7AyEjKn-DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.44.124.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:7f:6b:39:b9:74:83:00:fa:15:06:af:8b:77:37:10:ca:3a:
8b:c9:f2:39:a1:42:dc:d8:36:8e:2a:8e:7a:9d:87:c6:da:5e:
5b:25:4d:5c:6b:eb:dd:76:41:17:90:21:17:0d:f1:87:2e:cd:
e9:f7:1e:16:49:33:dd:b9:59:c0:66:4e:6d:cd:b8:52:4a:ec:
fb:b2:c4:0b:3b:b4:29:f5:f7:ff:71:4d:bf:37:c1:ad:10:87:
5d:26:d3:57:e5:08:d5:34:3c:f7:d1:e6:2e:98:05:95:dd:84:
c1:13:3d:1e:d6:ee:e4:97:8b:3e:c5:35:c5:88:ae:ef:5c:97:
98:7d:35:05:e4:fb:ef:b9:65:97:de:0e:bb:b1:1e:21:96:ff:
1b:4d:e5:ce:c6:f4:8c:2e:7f:20:bb:bf:21:74:1f:4b:18:15:
e4:1d:8a:e4:e5:ae:29:af:71:8e:e0:8a:b3:78:83:2c:23:97:
80:18:74:7b:fe:bb:43:ef:3d:5a:bb:d5:b9:14:fd:67:7f:02:
99:76:40:28:eb:10:00:47:e2:d0:35:1f:95:dc:34:7e:8c:0d:
1a:2f:47:8a:40:a5:ac:95:ba:2c:00:4e:55:4b:9c:18:a0:21:
11:4f:e3:81:69:f4:5a:cf:9d:59:f4:f0:7a:60:31:7a:9c:da:
f9:49:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:13:46 2026 by rpki-client