Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PTBKRflkAumVIBovEGGJlyyGv3k.roa
File: PTBKRflkAumVIBovEGGJlyyGv3k.roa (raw, json)
Hash identifier: KI75S3E/iFJtrXREJKkhApzFrnT0bwWxTS/ly+wPgLA=
Subject key identifier: 3D:30:4A:45:F9:64:02:E9:95:20:1A:2F:10:61:89:97:2C:86:BF:79
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019CE3A1B4AEEB0C52AA348EF1BD5BCD36BD
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PTBKRflkAumVIBovEGGJlyyGv3k.roa
Signing time: Thu 12 Mar 2026 19:59:11 +0000
ROA not before: Thu 12 Mar 2026 19:59:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200155
IP address blocks: 45.74.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:a1:b4:ae:eb:0c:52:aa:34:8e:f1:bd:5b:cd:36:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 12 19:59:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d304a45f96402e995201a2f106189972c86bf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:3f:00:8b:3e:58:2e:7a:4c:ee:7e:a0:7c:
18:32:83:a3:a1:b6:8f:82:7a:da:24:7e:e7:71:10:
c9:28:5b:7c:96:5e:22:a5:e3:16:c7:6e:44:fe:f7:
9b:7c:ea:68:5a:74:ab:97:be:2f:d6:b6:f1:86:db:
cc:3e:a9:be:c3:22:9d:a2:a0:97:da:9b:86:fe:03:
47:be:f5:72:79:68:9f:88:96:7b:a2:1f:99:45:42:
95:9e:82:68:65:98:0d:79:c0:cd:e0:c0:11:24:e1:
6f:9f:ec:db:1c:00:5d:8b:8c:9c:1e:b5:d0:58:23:
b1:36:ee:12:01:6d:ae:e5:c4:b7:a6:09:3a:c0:1b:
87:b9:ae:88:ab:88:56:67:44:c4:87:06:27:a9:55:
36:c1:1d:dd:72:46:81:df:c9:bd:53:df:59:37:41:
5e:fe:a2:2d:0a:22:a3:1e:15:c6:ed:a0:ff:ac:1d:
91:10:79:9f:e4:81:8c:84:46:62:6e:9d:42:45:7f:
57:7b:90:57:89:6f:1e:fa:ab:61:4e:24:12:71:ff:
9d:24:9e:32:61:25:15:71:1a:e5:11:77:14:99:4b:
69:4f:c6:2f:d8:c8:be:3a:bc:98:02:70:7a:c0:66:
55:7b:13:ac:f8:25:40:f7:48:0f:5a:13:0a:99:4e:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:30:4A:45:F9:64:02:E9:95:20:1A:2F:10:61:89:97:2C:86:BF:79
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/PTBKRflkAumVIBovEGGJlyyGv3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b1:25:16:3c:ba:e8:71:ba:5e:4d:26:59:57:ca:1a:8f:f1:
89:7d:c8:53:53:0f:6d:33:08:15:fc:22:7b:71:22:6e:94:e4:
91:93:1d:9f:2a:90:53:5b:9d:7b:92:d8:5c:43:be:62:69:14:
ba:3b:0f:01:1f:1c:f8:43:8f:7f:9d:00:f2:73:80:90:6e:5f:
cf:01:ba:db:d4:b8:e9:b7:d9:b5:ec:f5:e3:ac:87:de:47:a5:
e5:a4:43:04:85:c7:a6:9d:76:72:a0:39:1a:4d:c2:a8:62:cc:
9f:72:dd:36:58:64:5c:47:87:34:c7:3f:83:90:39:37:06:cd:
8e:e4:bc:c2:e7:20:bb:ff:45:fd:e0:4a:f9:46:66:a4:7a:2b:
5e:d9:db:9a:b0:fe:e4:9d:d8:9a:17:2c:57:91:fd:89:cc:14:
5b:bb:6d:38:57:1a:d0:d4:5c:0a:9b:9c:ef:f5:9b:72:be:ba:
34:47:5a:1b:6b:8c:8d:94:af:c1:ca:36:b2:8b:e0:1a:df:e1:
9d:b7:ad:cb:e5:c3:9e:b2:23:3a:b3:41:bd:2a:43:18:ca:aa:
79:7e:4f:74:00:de:86:cf:f0:9a:18:79:58:5c:da:fc:35:f1:
01:05:3c:2d:36:fa:7b:16:19:50:d0:1b:3c:6d:31:72:8c:ad:
ad:25:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:25:47 2026 by rpki-client