Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/PLNxljvNbMULWVPOWC0uQS--Ges.roa
File: PLNxljvNbMULWVPOWC0uQS--Ges.roa (raw, json)
Hash identifier: gYcn3gceVAs9xiJbc+bC+drgufGqfvNkY6jlU9pioCM=
Subject key identifier: 3C:B3:71:96:3B:CD:6C:C5:0B:59:53:CE:58:2D:2E:41:2F:BE:19:EB
Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial: 01A1687541A20B4A5EE7FA90616926739B8B
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/PLNxljvNbMULWVPOWC0uQS--Ges.roa
Signing time: Fri 23 Oct 2026 11:11:17 +0000
ROA not before: Fri 23 Oct 2026 11:11:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44356
IP address blocks: 80.84.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:75:41:a2:0b:4a:5e:e7:fa:90:61:69:26:73:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Validity
Not Before: Oct 23 11:11:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cb371963bcd6cc50b5953ce582d2e412fbe19eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:44:8a:38:1d:2a:17:9f:5c:75:8e:23:37:
58:88:89:85:4e:03:73:1a:d4:d7:a9:81:20:af:e1:
ca:3f:d2:2f:6a:19:a0:d7:e2:37:90:42:d3:f0:c2:
70:a3:d8:b4:60:13:61:4b:2f:cb:70:51:49:4f:1c:
e6:06:c6:87:a3:9f:b3:fa:22:0f:7f:45:42:01:ba:
0c:b2:65:fe:d0:dc:1e:09:99:66:e4:cb:8d:a1:40:
73:18:8d:e6:89:a0:17:fd:6b:ec:f8:c2:ca:6a:b7:
d2:65:6c:0c:30:e9:0e:b7:fc:bd:ee:3d:67:dd:2d:
28:bc:1c:17:a2:24:49:d4:c7:6a:fd:ab:5e:40:21:
50:62:e9:f7:25:08:ab:e0:be:00:dc:c6:c0:90:2b:
29:8f:f7:b8:42:2e:50:24:c5:32:f9:01:0d:25:a7:
fd:22:db:07:b3:93:a2:57:77:5d:97:22:3f:2a:24:
04:a7:33:37:85:1f:4e:9a:a4:51:ea:b4:e4:22:f1:
0a:a5:a2:7f:c3:47:0e:3b:42:0b:75:4b:30:82:5c:
ac:c1:c5:81:f0:c9:f1:83:e9:cb:55:7c:d6:e5:ba:
ab:fb:62:64:e1:05:ab:a7:c3:a5:54:64:80:d1:4d:
82:c2:84:c8:b6:e4:81:6d:9b:0c:21:3a:6f:ea:34:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:71:96:3B:CD:6C:C5:0B:59:53:CE:58:2D:2E:41:2F:BE:19:EB
X509v3 Authority Key Identifier:
keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/PLNxljvNbMULWVPOWC0uQS--Ges.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.144.0/24
Signature Algorithm: sha256WithRSAEncryption
33:65:72:76:b6:17:fc:2d:84:82:6a:21:54:27:4f:74:3f:40:
69:37:6a:d1:4d:17:08:81:0e:0e:bd:6a:6b:d6:6b:01:ac:14:
bc:e8:43:f7:13:9d:94:ea:3e:0e:a9:d5:d7:7a:f2:b1:59:a1:
55:e3:64:33:c9:b3:c7:1d:df:ab:b9:05:46:b7:75:3f:d7:9e:
91:75:71:a4:bc:ab:b1:17:d6:5c:49:a8:af:38:56:8a:99:3e:
69:07:cd:e3:e8:33:2a:b6:2a:85:c6:ca:c9:15:47:a3:b3:28:
7a:35:af:31:1b:8b:20:13:fe:ee:86:76:a8:6e:7f:d8:c7:87:
ed:1c:b8:34:88:32:62:fe:1b:87:65:5e:0e:25:3f:18:29:5e:
3f:96:99:ba:8b:36:15:93:56:b9:c6:f3:e6:da:37:e5:90:5f:
26:aa:db:42:a9:83:16:52:59:c3:8d:23:af:cb:a8:e7:10:48:
6e:cd:1e:d3:50:ab:af:7d:70:51:6f:48:d5:20:a0:68:a8:33:
da:a0:7c:ad:27:0c:72:d0:a2:3f:73:f8:5f:96:d7:c4:6b:97:
69:9e:3b:71:bd:56:c4:e3:ea:3a:28:29:58:bb:d0:72:11:c9:
22:49:d4:d8:6d:48:ca:8a:5e:37:f7:d3:6b:97:12:84:5e:f2:
3a:47:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:34 2026 by rpki-client