Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa
File: pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa (raw, json)
Hash identifier: i1jQeihj8pFQh1bbrfH4V97DkpUqCZyj8dwZ2mijp1g=
Subject key identifier: A4:B8:C7:AD:CB:DC:34:11:40:96:A4:78:CC:93:8E:85:4F:CD:0B:E7
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 019ECF389A3E5BE14C4BE7E3F85274DB24E2
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa
Signing time: Tue 16 Jun 2026 06:57:33 +0000
ROA not before: Tue 16 Jun 2026 06:57:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2830
IP address blocks: 185.31.56.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:38:9a:3e:5b:e1:4c:4b:e7:e3:f8:52:74:db:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Jun 16 06:57:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4b8c7adcbdc34114096a478cc938e854fcd0be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:17:b0:dc:49:74:14:02:b0:ac:df:f7:eb:
27:b2:38:0b:f7:83:ee:2c:13:83:eb:ef:63:fe:24:
71:c1:58:9e:38:22:a5:9a:53:18:e0:f1:f0:b3:c8:
0d:fb:e7:4d:98:12:8c:e7:6d:a1:eb:ed:ef:2b:f3:
fd:51:e0:ed:94:8a:b1:8a:c1:c5:72:c3:69:54:71:
e1:fc:07:3b:ab:89:5d:60:6e:71:2b:ca:92:bb:eb:
b5:8e:26:63:7b:1b:4d:b9:c5:49:f0:61:63:51:90:
ac:ff:0e:3f:d5:6b:65:9f:8e:e6:b2:f4:de:63:4f:
64:21:41:7a:ff:32:45:e8:51:04:b3:d6:bd:2e:8e:
dc:c8:07:d0:79:34:f5:2d:ad:1b:0e:cd:96:21:60:
aa:fe:aa:c8:38:f4:b2:69:8d:37:a9:74:38:d7:d4:
fa:b8:67:3b:d9:24:54:b5:80:ee:16:0f:f2:87:0f:
c4:7b:ae:22:8d:3d:b8:1e:ca:27:c2:b1:9b:3a:65:
ea:ba:5a:c6:99:9f:74:8f:6d:d4:93:d1:e2:9b:bb:
b2:2a:11:4a:77:ca:fd:81:e6:6a:ef:e0:92:ca:46:
35:91:a4:82:4e:53:06:e4:e7:e3:3d:b6:21:4e:12:
55:76:2c:db:0a:0d:60:83:39:1b:22:a5:5b:d9:a7:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B8:C7:AD:CB:DC:34:11:40:96:A4:78:CC:93:8E:85:4F:CD:0B:E7
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.56.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a8:27:aa:4c:06:21:c3:e1:bb:37:7b:c8:3c:71:ee:0c:a9:
f8:13:85:43:b4:a0:fe:60:13:57:d9:dd:e9:20:3e:1e:5a:cc:
e6:06:6e:75:74:4f:2b:e0:e8:f2:65:d0:16:cd:49:64:f5:e4:
f6:c7:0c:38:c5:cf:24:06:0f:41:3f:7c:37:32:40:b3:dc:54:
79:76:d0:95:89:74:a0:65:b5:8b:58:e9:44:34:e9:29:32:98:
ca:3b:46:ac:59:4f:f3:e3:98:97:52:c1:49:57:ec:8c:11:f4:
b4:65:6d:ad:b5:34:48:a0:52:58:ce:34:93:c0:5d:3e:e1:30:
bd:20:98:4c:da:a1:c1:1a:8e:64:1a:b0:17:24:8c:e3:f3:03:
39:8b:e4:f3:d1:a2:9b:3d:5f:9b:8a:60:83:4d:2a:db:73:bd:
b4:ba:2f:ad:d6:1e:08:1c:31:ea:a9:14:1c:e0:d1:91:b4:87:
bc:e2:18:24:7a:59:93:ab:c1:fb:9c:f9:18:55:6d:8d:68:0d:
bd:9d:74:b3:9b:50:27:00:6c:30:a3:db:3e:0e:0c:66:a3:17:
fe:8a:ff:81:ee:05:2f:de:d1:fc:50:04:56:05:6d:14:13:4f:
c0:fc:1f:51:21:17:91:55:d8:1a:e1:aa:88:c7:77:94:06:07:
a2:81:c3:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7POJo+W+FMS+fj+FJ02yTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNGVhMmFhOGQzNGQ0M2I0YjY0MWEzYWYzMDY0Mjg0OWJm
NGE4ZmUwHhcNMjYwNjE2MDY1NzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGI4YzdhZGNiZGMzNDExNDA5NmE0NzhjYzkzOGU4NTRmY2QwYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxUXsNxJdBQCsKzf9+snsjgL94Pu
LBOD6+9j/iRxwVieOCKlmlMY4PHws8gN++dNmBKM522h6+3vK/P9UeDtlIqxisHF
csNpVHHh/Ac7q4ldYG5xK8qSu+u1jiZjextNucVJ8GFjUZCs/w4/1Wtln47msvTe
Y09kIUF6/zJF6FEEs9a9Lo7cyAfQeTT1La0bDs2WIWCq/qrIOPSyaY03qXQ419T6
uGc72SRUtYDuFg/yhw/Ee64ijT24HsonwrGbOmXqulrGmZ90j23Uk9Him7uyKhFK
d8r9geZq7+CSykY1kaSCTlMG5OfjPbYhThJVdizbCg1ggzkbIqVb2adxsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKS4x63L3DQRQJakeMyTjoVPzQvnMB8GA1UdIwQY
MBaAFNtOoqqNNNQ7S2QaOvMGQoSb9Kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjA2aXFvMDAxRHRMWkJvNjh3WkNoSnYwcVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mYTE0ZTgtZjcxNi00MDc1LTg2MTQt
M2Y0OTViZjk5NDMxLzEvcExqSHJjdmNOQkZBbHFSNHpKT09oVV9OQy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mYTE0ZTgtZjcxNi00MDc1LTg2MTQtM2Y0OTViZjk5NDMx
LzEvMjA2aXFvMDAxRHRMWkJvNjh3WkNoSnYwcVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR84MA0G
CSqGSIb3DQEBCwUAA4IBAQBrqCeqTAYhw+G7N3vIPHHuDKn4E4VDtKD+YBNX2d3p
ID4eWszmBm51dE8r4OjyZdAWzUlk9eT2xww4xc8kBg9BP3w3MkCz3FR5dtCViXSg
ZbWLWOlENOkpMpjKO0asWU/z45iXUsFJV+yMEfS0ZW2ttTRIoFJYzjSTwF0+4TC9
IJhM2qHBGo5kGrAXJIzj8wM5i+Tz0aKbPV+bimCDTSrbc720ui+t1h4IHDHqqRQc
4NGRtIe84hgkelmTq8H7nPkYVW2NaA29nXSzm1AnAGwwo9s+Dgxmoxf+iv+B7gUv
3tH8UARWBW0UE0/A/B9RIReRVdga4aqIx3eUBgeigcMm
-----END CERTIFICATE-----
Generated at Sun Jun 21 17:35:07 2026 by rpki-client