Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/PNZmFprWesbgjjFNmEzeRiTPxww.roa
File: PNZmFprWesbgjjFNmEzeRiTPxww.roa (raw, json)
Hash identifier: esFbGCv/rbxHKSKnMmbITuyvPzDyAB0IEk3oq2r+UYc=
Subject key identifier: 3C:D6:66:16:9A:D6:7A:C6:E0:8E:31:4D:98:4C:DE:46:24:CF:C7:0C
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019F62CCE77529C858A813A2DA356FD1F012
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/PNZmFprWesbgjjFNmEzeRiTPxww.roa
Signing time: Tue 14 Jul 2026 22:43:43 +0000
ROA not before: Tue 14 Jul 2026 22:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215105
IP address blocks: 185.236.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:cc:e7:75:29:c8:58:a8:13:a2:da:35:6f:d1:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jul 14 22:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cd666169ad67ac6e08e314d984cde4624cfc70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:ac:45:18:d2:88:18:14:b4:b2:c9:c6:9c:
46:fc:94:07:36:6d:52:6d:57:2b:b0:b8:68:7a:c7:
2d:2f:50:f7:bf:21:7b:85:61:83:93:41:d5:e7:7e:
03:bc:0f:33:83:74:ba:52:7c:5d:87:a3:ac:da:04:
ab:30:ba:51:4a:4b:a4:4d:90:59:b5:0c:ef:6b:3c:
90:1b:3f:ea:51:8a:b8:b7:ba:0e:66:96:21:7e:e7:
df:07:43:17:00:15:ce:51:d0:6b:21:68:99:c4:30:
ca:97:97:6b:ba:19:dc:e9:30:46:85:a5:64:c9:ed:
8a:a8:d8:47:5c:6d:99:c1:4e:a2:36:dd:b7:e3:9b:
50:70:ac:b9:d7:e5:6e:42:6f:8c:fa:be:70:e1:b5:
94:d5:ee:53:18:68:49:2e:24:de:f9:17:15:fd:fe:
3e:cc:f7:ee:90:e3:5e:c9:78:d9:60:1e:e8:64:4e:
f5:f4:a6:66:d3:8e:f7:55:a9:d0:c9:e2:fe:8c:69:
6d:19:71:87:37:df:cf:52:a7:70:c7:b3:00:2a:90:
2a:3a:49:72:c8:d1:92:40:b8:d4:63:e4:9c:3c:da:
c7:bf:37:3b:f5:37:4d:f8:90:28:a1:4a:53:3d:51:
2e:7e:9f:2f:13:0a:cf:67:98:f5:be:30:64:4e:30:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:66:16:9A:D6:7A:C6:E0:8E:31:4D:98:4C:DE:46:24:CF:C7:0C
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/PNZmFprWesbgjjFNmEzeRiTPxww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.242.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:bf:5e:ae:8d:f4:2a:b5:87:84:11:fa:dd:a6:19:29:a9:06:
ed:b6:f7:82:eb:91:2b:80:f9:93:33:0c:6c:51:1c:19:77:6b:
d9:7b:81:af:a5:79:be:09:11:99:05:aa:98:06:01:a8:35:a4:
04:d7:f4:53:7d:1a:c1:07:ed:77:75:2b:13:79:67:9c:48:94:
be:35:4b:fe:15:96:ab:84:5c:51:6f:3e:e1:dc:8d:4e:c9:94:
f8:74:50:45:66:62:32:89:63:75:6a:6c:fe:b4:11:b4:3f:21:
e5:22:2b:8a:ec:c2:23:0b:d9:49:ef:f1:11:dc:5a:d0:44:df:
57:2f:d6:79:be:fb:f1:bd:55:6a:f2:b2:e4:ad:cb:a5:40:ed:
3d:42:21:6e:a6:ed:b8:ff:88:58:f4:49:21:3c:05:5e:14:dc:
7a:9d:72:2f:8e:a6:29:e3:1e:25:f2:fa:55:00:60:3f:fd:ef:
b8:c5:da:65:4f:95:ef:e4:16:01:3a:d2:29:ae:aa:ad:70:5c:
8a:64:38:1a:43:59:70:68:04:43:a4:a8:2b:de:50:c1:a3:1a:
7c:90:04:0e:b9:8b:c3:40:d0:af:e6:21:77:6e:71:ab:2d:8a:
14:c9:16:1e:e8:f0:75:fb:93:c4:4a:4c:2e:0f:dd:47:7a:9d:
7a:3b:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:13:46 2026 by rpki-client