Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/PP71s4oA0Pqlb0hxrkFxP4F71FI.roa
File: PP71s4oA0Pqlb0hxrkFxP4F71FI.roa (raw, json)
Hash identifier: Gwz4XfEbTmJrMswxNq9bB/hGvbvOMm1RzpVvdkkptJY=
Subject key identifier: 3C:FE:F5:B3:8A:00:D0:FA:A5:6F:48:71:AE:41:71:3F:81:7B:D4:52
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01A0A95B4AF732F607429E2025F3C04C8217
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/PP71s4oA0Pqlb0hxrkFxP4F71FI.roa
Signing time: Wed 16 Sep 2026 08:35:27 +0000
ROA not before: Wed 16 Sep 2026 08:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 62.68.69.0/24 maxlen: 24
91.221.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:5b:4a:f7:32:f6:07:42:9e:20:25:f3:c0:4c:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Sep 16 08:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cfef5b38a00d0faa56f4871ae41713f817bd452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:86:e8:42:77:33:e7:1b:28:be:6b:ad:49:
76:6b:68:4e:49:cb:ff:59:f4:f3:11:f7:ff:b7:24:
f4:b6:10:4b:33:bb:95:e7:a1:9b:59:8f:ee:bd:26:
2f:66:84:bb:b0:1d:dd:d0:e3:84:63:5a:39:69:c2:
51:ea:3a:cd:1b:b3:3c:27:57:93:a0:60:3c:19:f2:
05:b4:1c:45:58:78:80:12:81:9f:be:07:96:9d:3e:
7d:d2:1b:4f:3d:bd:77:4f:25:47:12:70:f1:44:eb:
18:a9:2d:41:34:76:dd:7d:fc:df:2d:a4:3a:38:af:
87:26:f7:2d:e2:53:10:20:27:38:e7:d0:1d:5d:9f:
5b:a6:8b:eb:19:44:79:71:2e:dc:34:90:2a:b7:f9:
01:5e:8d:69:b8:73:a1:1a:cc:fc:87:66:49:7f:0a:
17:e6:b5:bf:f4:f2:5b:09:c0:47:ac:83:6c:40:3a:
00:a6:7e:7e:d0:63:dd:88:06:c4:97:c3:41:70:78:
05:5e:df:b7:82:8d:81:6d:95:52:14:dc:70:07:f1:
3a:cd:9c:2a:2f:62:fb:0b:0a:50:5b:bc:ab:89:0e:
63:b3:dc:b5:63:0e:1b:15:0a:85:30:e6:06:6b:ec:
41:76:69:8f:c2:a9:97:8a:7f:41:41:01:00:4b:15:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FE:F5:B3:8A:00:D0:FA:A5:6F:48:71:AE:41:71:3F:81:7B:D4:52
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/PP71s4oA0Pqlb0hxrkFxP4F71FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.69.0/24
91.221.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ff:91:5f:b1:a9:b2:2f:2e:59:db:d6:e2:cb:77:7e:c0:ff:
3e:dd:60:b9:14:e9:61:b4:f1:f4:71:9c:c9:8c:26:5b:12:02:
8c:fd:4f:05:f4:1f:54:c6:05:89:6a:75:62:e7:e1:ef:b3:ef:
3b:70:28:ed:76:16:ce:16:be:2b:ae:fc:1f:fa:fd:63:26:62:
1d:e6:64:1d:e0:72:8c:ec:a9:3f:cd:23:d3:27:4b:f7:60:84:
e4:f9:11:aa:d5:7d:ea:12:76:5a:ca:3c:c1:aa:09:ea:25:b2:
96:99:f7:26:7f:4c:6e:4e:1a:82:c2:77:c3:8d:fd:86:b5:5c:
ea:e9:eb:68:44:64:9d:82:33:ca:56:0b:a8:8d:3a:1e:fa:82:
db:29:14:5e:c7:88:f9:03:64:8e:6f:06:9e:2e:9e:8a:0b:7d:
6f:2c:69:89:8c:4b:17:9a:b0:f9:2f:dc:1f:25:56:dd:24:b4:
3b:3a:62:e9:79:c4:46:6a:9c:17:59:4f:02:55:03:74:c8:f5:
60:3c:9a:bc:71:5f:20:7e:44:10:6a:ed:ec:ca:e1:53:f9:d9:
03:70:3d:98:0b:5b:c7:a2:d4:73:f3:0b:92:1c:16:d7:52:0d:
cb:ba:84:f1:24:a2:78:77:b2:2d:8b:f5:ac:34:c0:54:d7:21:
8c:8a:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:19 2026 by rpki-client