Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pBvZw9cUXjs5MmPM4GkkCdviIUA.roa
File: pBvZw9cUXjs5MmPM4GkkCdviIUA.roa (raw, json)
Hash identifier: cls1nsNU1tCx9cfpf1VqW7cVl+vIqArqblbAgoRbfXg=
Subject key identifier: A4:1B:D9:C3:D7:14:5E:3B:39:32:63:CC:E0:69:24:09:DB:E2:21:40
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019FF4BFB1E6C4EF9536AD40BD3BAE3E9724
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pBvZw9cUXjs5MmPM4GkkCdviIUA.roa
Signing time: Wed 12 Aug 2026 06:53:51 +0000
ROA not before: Wed 12 Aug 2026 06:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 88.223.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:bf:b1:e6:c4:ef:95:36:ad:40:bd:3b:ae:3e:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 12 06:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41bd9c3d7145e3b393263cce0692409dbe22140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:92:37:ca:4a:3a:9a:b8:6d:f8:49:fb:3b:
8f:85:c1:f4:24:50:4d:df:e6:17:33:78:a5:58:0c:
8a:ba:71:63:9a:b2:95:87:94:b0:e2:59:6e:83:1d:
b3:f8:6e:db:24:59:07:a6:4a:3a:6e:75:02:6a:94:
c1:23:8c:7b:d6:f8:ab:1d:7a:40:f2:be:4a:d4:d2:
73:33:c4:16:21:b2:db:ff:50:14:fb:3a:d1:b6:41:
1d:24:ff:ad:b4:28:97:29:eb:c8:64:2b:e9:32:b8:
d2:12:0a:6d:c5:12:59:45:6d:88:f3:ac:ed:97:e1:
25:7c:40:93:32:2c:3c:5c:e5:6a:bd:ab:cb:3f:f0:
e5:6e:22:ce:90:67:69:d4:05:3b:57:5b:f3:94:8f:
08:81:bf:6c:47:b2:c7:47:08:9c:06:d4:c8:6a:46:
96:75:e7:e4:77:50:89:21:15:b0:6b:c6:88:48:17:
dd:c0:57:28:31:72:15:27:e9:fb:23:32:fa:d4:89:
1b:2c:ad:cb:ca:5b:aa:96:16:28:37:f2:a3:e0:fd:
1d:55:31:38:18:85:40:f6:86:ef:49:0b:27:8e:95:
14:f6:d6:c8:d9:88:53:b3:15:57:f1:e4:a2:78:ac:
42:75:07:c2:38:f7:df:95:c9:a7:9a:9d:81:e2:3b:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:D9:C3:D7:14:5E:3B:39:32:63:CC:E0:69:24:09:DB:E2:21:40
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/pBvZw9cUXjs5MmPM4GkkCdviIUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:08:c1:6b:02:61:59:57:73:7c:2b:74:d7:58:7a:1d:5e:d7:
0c:f0:fc:b5:b6:d2:cb:54:8f:e4:ed:8b:87:17:b4:d8:a8:5a:
59:36:fe:21:eb:3b:6d:69:4f:c5:6e:c5:c5:94:10:40:b9:ac:
47:56:9c:de:34:22:2a:8f:ae:aa:15:0c:61:02:42:b4:21:71:
89:b4:8e:c6:45:f7:e7:18:33:ff:95:bb:ba:b3:c2:a1:9f:4c:
d9:6b:fb:03:be:8c:5c:0e:4c:43:93:51:3a:b2:ef:8b:60:56:
cb:15:25:ed:fe:df:b9:38:08:8b:cc:6e:98:0a:ca:6c:8b:a6:
66:93:a4:37:e1:a0:ed:08:16:4c:7c:9f:b3:e7:4a:5a:67:de:
ab:d9:b1:ba:51:67:b5:d4:e2:10:28:fc:2f:a5:21:41:a6:69:
eb:3c:02:90:d3:cf:29:ef:f1:84:20:65:ea:1d:72:2c:7b:0e:
d3:b7:90:55:a1:d2:75:40:53:5e:73:b0:53:c7:a8:53:0a:b5:
9d:81:5c:bc:52:d3:59:d1:cf:76:a2:18:7e:48:d4:64:f3:2d:
ed:cd:77:88:dc:54:51:2f:98:1a:48:a2:5e:11:e0:7e:4c:3d:
3c:d6:18:aa:41:e7:8f:91:b9:f1:97:f9:f6:ab:20:b8:c6:32:
dd:d0:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:21:57 2026 by rpki-client