Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/PEkym1OPMpNIdeN11ZQCBbwOhAc.roa
File: PEkym1OPMpNIdeN11ZQCBbwOhAc.roa (raw, json)
Hash identifier: bY07kjjzHaYOKoX3oZoXOe61arnA6Qa9njUm+T8zLXY=
Subject key identifier: 3C:49:32:9B:53:8F:32:93:48:75:E3:75:D5:94:02:05:BC:0E:84:07
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F2DA741ACC9C8C87154475504BD7AC233
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/PEkym1OPMpNIdeN11ZQCBbwOhAc.roa
Signing time: Sat 04 Jul 2026 15:02:43 +0000
ROA not before: Sat 04 Jul 2026 15:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212336
IP address blocks: 69.8.128.0/24 maxlen: 24
69.8.129.0/24 maxlen: 24
216.23.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2d:a7:41:ac:c9:c8:c8:71:54:47:55:04:bd:7a:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 4 15:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c49329b538f32934875e375d5940205bc0e8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:df:13:cf:7d:f5:78:e3:ba:52:9f:9d:70:
aa:3c:c8:69:7a:dc:79:a7:95:a9:39:bd:d5:4e:5b:
0a:bd:b4:6f:13:16:70:12:c3:7d:61:10:e5:48:5e:
1f:b2:db:22:27:3d:be:ba:77:84:8a:66:f5:53:97:
1b:de:2a:2d:c5:a5:39:17:6f:5b:ea:bb:e4:b5:0f:
f1:c9:d3:dc:15:28:18:5d:3b:c5:15:d0:0f:cf:ec:
7f:65:09:89:58:b2:ae:3c:f5:b5:3c:84:87:27:c8:
1e:8e:d6:64:2e:a3:53:38:d7:8a:64:a3:21:4a:00:
ed:20:d8:66:a9:be:b1:b1:97:5d:4e:73:d0:7d:1c:
2e:e3:63:18:50:57:25:9c:14:82:1a:7f:ca:ac:ba:
35:5c:b4:4b:7d:b7:48:b7:07:bc:f3:c2:0f:83:0c:
a8:31:e6:0f:5a:81:19:3c:77:2d:ca:04:90:76:46:
02:ff:91:fa:1c:eb:05:04:56:3e:99:8c:3d:6a:c3:
d4:15:19:d0:c4:83:81:71:29:c0:a1:66:c1:6f:45:
8c:05:8f:8d:06:f1:d6:b7:92:1f:b2:3d:1a:59:eb:
68:a8:9a:06:e9:9f:a9:cb:c6:18:36:49:1c:b6:05:
80:86:ea:1c:c7:f4:7d:cf:8c:0b:e3:1b:7e:7f:e6:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:32:9B:53:8F:32:93:48:75:E3:75:D5:94:02:05:BC:0E:84:07
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/PEkym1OPMpNIdeN11ZQCBbwOhAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.8.128.0/23
216.23.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:cb:66:f8:5c:fb:8e:26:c3:9a:85:34:c6:db:ee:62:f2:48:
8c:5a:68:fc:a0:12:99:6f:f6:52:45:02:5c:0f:42:35:a4:49:
2c:4d:4c:fb:3f:84:0a:4f:80:9e:b4:81:f2:da:38:31:44:37:
d2:92:80:72:4c:0b:bb:14:85:eb:2a:f3:ea:3a:80:32:a3:af:
8b:93:06:46:51:81:c2:db:df:2c:69:a5:61:3d:a3:6b:1f:0b:
c2:c2:b3:45:29:bc:05:e6:87:6f:e3:d7:6b:cd:ad:89:f6:1a:
38:ac:82:94:28:c2:46:d8:ab:5b:b8:48:ec:9b:d6:69:9c:98:
93:69:b0:55:22:be:d3:98:20:a3:87:19:d6:a2:73:cd:11:ff:
df:82:10:ed:f5:fc:16:9b:5c:79:31:ce:9d:8e:f6:6f:ae:10:
07:6d:45:d3:bf:aa:a4:81:5b:e0:f9:95:39:e2:12:cb:f3:17:
89:6c:0a:72:d5:b0:e9:8b:7b:a5:bb:ca:4e:66:c9:9b:14:0c:
69:27:4b:40:84:ab:18:67:d8:0c:83:84:50:9e:92:a7:ca:27:
ac:ff:27:a1:c9:77:8b:36:92:37:7a:eb:0d:12:f7:18:36:75:
91:2c:04:21:64:cf:80:16:f3:a1:ad:a7:23:5b:fd:69:bf:16:
f4:ad:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client