Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Pyk_bRJ7ejk8_Fumq-HLryuJP9M.roa
File: Pyk_bRJ7ejk8_Fumq-HLryuJP9M.roa (raw, json)
Hash identifier: LaJyZ9csQEU1luirKy+kAgu3mEKujZJxSTQyIvGuEr4=
Subject key identifier: 3F:29:3F:6D:12:7B:7A:39:3C:FC:5B:A6:AB:E1:CB:AF:2B:89:3F:D3
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019DB41E829D13B4ACF1C5A62322C3536EC6
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Pyk_bRJ7ejk8_Fumq-HLryuJP9M.roa
Signing time: Wed 22 Apr 2026 07:36:31 +0000
ROA not before: Wed 22 Apr 2026 07:36:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 83.98.128.0/19 maxlen: 24
83.98.140.0/24 maxlen: 24
83.98.160.0/22 maxlen: 24
83.98.166.0/23 maxlen: 24
83.98.168.0/21 maxlen: 24
83.98.176.0/20 maxlen: 24
83.98.192.0/21 maxlen: 24
83.98.200.0/22 maxlen: 24
83.98.208.0/20 maxlen: 24
89.18.160.0/22 maxlen: 24
89.18.168.0/21 maxlen: 24
89.18.180.0/22 maxlen: 24
89.30.128.0/18 maxlen: 24
89.30.171.0/24 maxlen: 24
89.30.192.0/19 maxlen: 24
89.30.208.0/20 maxlen: 24
89.30.224.0/21 maxlen: 24
213.189.0.0/21 maxlen: 24
213.189.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:1e:82:9d:13:b4:ac:f1:c5:a6:23:22:c3:53:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Apr 22 07:36:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f293f6d127b7a393cfc5ba6abe1cbaf2b893fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:ff:68:6f:85:21:85:6e:12:ab:14:43:dc:
5f:74:3e:e5:94:9c:75:28:21:e3:55:dd:10:de:aa:
da:a5:47:23:15:20:32:e7:b8:46:74:83:07:5c:78:
e8:66:a9:8a:39:a4:73:cd:cd:ea:ab:c3:16:9b:d5:
cd:b4:ac:c2:b2:e8:9b:6d:fb:49:57:5d:a2:65:f1:
bf:bc:c1:5e:34:bc:20:5e:76:9b:61:ac:f9:09:94:
32:d4:f5:dd:5e:09:d0:23:50:1c:8b:62:ca:6a:19:
8f:e3:1b:23:c4:41:a0:e8:e2:d5:9f:0f:d5:13:0d:
33:6b:9c:e6:6c:0e:d7:f1:0b:d2:54:f5:e5:76:5e:
41:18:57:84:9f:91:af:16:53:41:1b:c0:c6:89:1d:
ea:1f:41:8c:97:95:1f:ed:61:8c:f6:e8:02:82:b5:
ce:ee:72:44:36:97:b5:38:a9:c5:9c:33:0c:ca:39:
a5:db:13:ad:b4:a5:9e:c5:42:e8:ec:d3:dd:42:26:
03:3e:3f:d0:5f:b4:77:77:f2:06:9e:59:54:d2:d5:
42:57:f3:e1:4e:64:94:d7:78:45:ff:60:88:eb:9d:
41:96:36:5b:7b:2f:a0:d4:33:84:e4:25:7b:53:86:
97:6b:d2:ef:fa:bf:94:7c:cc:11:a1:60:fd:71:af:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:3F:6D:12:7B:7A:39:3C:FC:5B:A6:AB:E1:CB:AF:2B:89:3F:D3
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/Pyk_bRJ7ejk8_Fumq-HLryuJP9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.128.0-83.98.163.255
83.98.166.0-83.98.203.255
83.98.208.0/20
89.18.160.0/22
89.18.168.0/21
89.18.180.0/22
89.30.128.0-89.30.231.255
213.189.0.0/21
213.189.16.0/20
Signature Algorithm: sha256WithRSAEncryption
07:c3:f5:27:78:fe:5c:b1:de:f7:9c:47:79:da:c1:5e:62:27:
3c:fe:f6:69:54:2f:5b:e4:ee:5e:55:54:2a:58:77:d5:ad:e2:
32:4d:dc:60:8b:37:2a:2b:3c:20:bd:45:02:1f:67:66:10:72:
ba:58:d7:7c:63:3d:bb:fa:f5:b8:97:35:6b:25:a8:84:bf:2c:
15:78:3d:b1:ee:a4:6a:94:75:22:99:81:a3:93:85:ec:de:c7:
7e:61:ae:14:cf:04:1d:8f:7e:eb:a3:cb:bb:08:ad:1e:c7:af:
11:9f:9d:15:9e:2f:5a:9b:96:15:ec:ec:91:13:ce:15:1c:d8:
e2:dd:d4:c7:7e:43:78:68:26:c8:9e:e5:3f:e8:30:46:0a:a8:
f8:4b:95:9b:dd:59:12:90:03:00:19:6d:4f:05:f6:bc:f5:63:
2e:5b:83:7f:e1:10:57:1c:fb:1b:eb:5d:62:87:a0:d0:24:e9:
5e:57:a9:d8:ec:c1:fa:ff:bf:63:03:10:05:d8:11:74:79:c8:
07:1c:cb:95:4f:24:7c:18:83:ba:76:af:61:cf:6f:fb:ee:20:
41:f9:43:4b:f5:95:86:aa:58:a7:45:e2:27:f6:ef:9a:90:f5:
36:93:9e:c7:6f:c9:51:47:e1:6c:08:59:00:ae:57:cb:53:c8:
31:47:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:26:09 2026 by rpki-client