Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ppv0reMN4c0UlYMkbsgqS65Ru1I.roa
File: Ppv0reMN4c0UlYMkbsgqS65Ru1I.roa (raw, json)
Hash identifier: PXSnvsqYkxQdIeklM8GilcCDaX24Q/LN5/IXEh9AagA=
Subject key identifier: 3E:9B:F4:AD:E3:0D:E1:CD:14:95:83:24:6E:C8:2A:4B:AE:51:BB:52
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019DB943E536EB8E0FA393DB4F14DD6436BB
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ppv0reMN4c0UlYMkbsgqS65Ru1I.roa
Signing time: Thu 23 Apr 2026 07:35:27 +0000
ROA not before: Thu 23 Apr 2026 07:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402298
IP address blocks: 216.195.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:43:e5:36:eb:8e:0f:a3:93:db:4f:14:dd:64:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 23 07:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e9bf4ade30de1cd149583246ec82a4bae51bb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:bc:bb:37:62:7a:17:36:cb:fb:77:fc:59:
ff:c5:7b:b6:9f:9a:92:b3:36:a0:df:4d:e8:a0:17:
ab:d9:97:ba:32:70:0f:2d:59:ef:95:eb:41:ce:c2:
66:e1:57:8f:76:3a:62:48:5b:66:da:79:83:30:e2:
a1:58:95:b9:8d:06:2e:f7:e2:29:37:29:ec:2e:99:
44:7f:83:62:f4:31:68:d6:13:9b:4a:a1:c0:85:42:
ed:dd:2c:5b:22:10:99:3a:70:94:48:1a:af:29:c2:
cf:fe:7f:d8:67:a3:35:b3:db:30:06:97:ec:1a:a7:
42:3f:f5:10:a8:f8:f4:e4:dd:4f:55:93:af:e6:97:
79:66:b4:91:51:40:4a:81:92:f3:9c:ad:ef:34:ff:
3b:20:0a:4a:ad:30:f5:24:41:f6:1c:ee:9f:db:8d:
02:aa:24:a1:87:73:08:aa:36:c4:80:d5:4b:73:c6:
63:24:39:2f:7e:62:cd:f8:a6:42:d0:a6:44:69:23:
33:4c:d3:2b:a1:eb:3f:3b:fd:1d:22:bc:40:83:ca:
66:ee:f1:f9:d4:c7:f2:f6:9a:d6:0a:92:1c:f2:e8:
38:01:44:c9:92:78:be:71:4b:d1:75:d3:e1:ed:e5:
a1:0d:f4:45:ce:7c:27:43:71:29:03:4e:71:a6:0b:
4d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:F4:AD:E3:0D:E1:CD:14:95:83:24:6E:C8:2A:4B:AE:51:BB:52
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Ppv0reMN4c0UlYMkbsgqS65Ru1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.207.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a0:24:53:2d:6d:ec:07:c7:3f:16:f6:59:01:ab:73:dc:9e:
9f:07:a5:26:66:2c:54:0f:e7:5c:e6:22:07:3c:b0:cf:ef:5c:
78:36:c7:41:cd:b7:36:26:1c:35:24:48:37:f1:3a:b6:d2:29:
7b:e4:5b:6e:91:6b:62:0e:70:81:e6:34:e7:c2:a5:c6:fd:54:
4c:f6:61:9e:22:44:a8:e4:b0:d8:ec:aa:fe:d5:61:ba:ac:7e:
17:8c:ab:c8:83:2a:12:50:e6:00:67:c2:6c:4d:72:27:e7:11:
e2:b4:96:1f:f7:cf:9e:73:f3:31:8b:d0:76:12:16:d2:4f:26:
ee:e7:bf:8f:7f:cf:07:4c:84:e9:c3:c0:77:f2:cd:d7:86:fe:
73:95:51:c3:42:de:03:c8:18:13:30:ee:80:0e:99:cd:bd:15:
a0:e2:af:55:7d:4e:6b:6a:b5:cb:f4:3c:93:3e:73:77:57:0d:
f3:ae:0e:69:75:f0:e3:2c:5b:d7:1d:7d:01:db:f8:bf:e6:8c:
7f:66:be:3a:08:fb:5c:3e:f3:f7:c4:f1:44:cc:21:ae:65:1f:
18:ec:65:c2:cb:ae:62:60:42:a6:24:ab:00:88:80:d2:03:87:
ab:74:56:2f:38:d2:11:53:d5:33:6a:0a:f3:f4:fb:a9:cc:02:
bc:c2:75:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:26:14 2026 by rpki-client