Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PfpKG9L9nw21zDeclBkBtIdO1Qs.roa
File: PfpKG9L9nw21zDeclBkBtIdO1Qs.roa (raw, json)
Hash identifier: gpC8SL/cXbSFWb5uAYLLH5P0ilNgbgl7FKWZOdyr4Rg=
Subject key identifier: 3D:FA:4A:1B:D2:FD:9F:0D:B5:CC:37:9C:94:19:01:B4:87:4E:D5:0B
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F23687841B1D37FB2481E3C6F8EC2E565
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PfpKG9L9nw21zDeclBkBtIdO1Qs.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 194.143.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:78:41:b1:d3:7f:b2:48:1e:3c:6f:8e:c2:e5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dfa4a1bd2fd9f0db5cc379c941901b4874ed50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:a6:2a:3a:07:9e:5d:3a:03:50:ab:81:da:
62:82:d4:d9:8d:f8:73:2e:1f:be:63:ea:b0:77:a7:
e1:56:9e:1e:e9:d4:e6:98:34:31:d5:67:b7:28:01:
2b:a9:77:3d:b1:87:9f:6d:c6:1c:b4:98:6b:9e:ef:
a7:97:51:54:ab:17:cb:9c:04:be:f9:4c:26:4c:72:
57:8c:80:85:79:44:f8:a6:dd:25:9d:e3:35:9e:23:
bd:67:e4:9f:e0:fb:70:f9:c8:f5:92:e0:44:81:db:
eb:c4:ad:51:5f:70:70:cd:ac:4b:be:72:16:b3:23:
37:01:45:f9:3b:27:3c:f9:d7:f4:26:da:20:74:e3:
b2:a5:f3:ff:8f:8b:c8:4d:ca:0d:4f:24:aa:a2:1a:
3b:c5:17:16:87:fe:ab:33:4a:d3:51:50:eb:0a:a2:
f2:22:58:8d:5c:2e:4f:0d:21:c1:43:23:26:87:2b:
99:8d:df:13:74:2e:9b:31:13:09:27:01:1c:bc:78:
48:b0:ee:54:96:df:ac:8b:48:d2:27:eb:91:49:42:
39:19:9b:b3:9b:0c:24:1b:09:97:17:1d:32:11:82:
fe:13:a4:5d:aa:cc:28:92:d6:fc:15:95:70:c1:13:
94:65:41:f2:23:5e:93:6a:3a:4d:d2:77:3c:fa:24:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:4A:1B:D2:FD:9F:0D:B5:CC:37:9C:94:19:01:B4:87:4E:D5:0B
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/PfpKG9L9nw21zDeclBkBtIdO1Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.207.0/24
Signature Algorithm: sha256WithRSAEncryption
30:87:4d:c9:e0:31:c8:c6:f7:83:46:2b:42:f2:19:95:b3:1b:
bd:b6:1f:42:cf:d8:ec:2f:c8:ff:03:d2:ca:c3:61:8b:ce:cf:
22:55:36:ac:05:79:9b:fc:4d:8f:48:16:79:d2:96:3b:3d:86:
2d:f9:ca:48:20:d7:34:fc:a1:32:47:77:6c:6b:e1:c8:62:22:
e7:0a:54:bf:8c:8d:5f:95:b6:ef:f3:65:38:10:d2:b8:27:be:
c7:a2:00:a4:fa:f1:32:0b:4b:32:ff:d5:a9:12:22:bb:74:d3:
f3:92:3f:b1:c0:c1:38:58:2c:00:5f:bb:b8:96:f0:93:2a:98:
e8:80:13:05:a5:eb:24:6c:6e:50:79:c2:1e:93:16:88:05:ec:
9d:4d:02:27:9b:2e:23:40:8c:32:7e:4d:c7:a9:4a:67:03:f0:
d8:ec:d2:98:23:58:a3:76:df:50:58:01:15:e0:61:b4:e5:b7:
77:bd:36:06:ae:bf:e3:1e:26:27:83:5e:12:78:2a:9c:81:ce:
68:2c:17:39:9a:75:ca:67:6a:f7:f8:e3:4e:55:27:c7:44:55:
57:56:17:cf:22:a7:3e:23:67:ac:d3:8f:1f:44:b1:9d:92:c1:
ed:6b:3d:eb:36:2f:53:fb:73:d1:ea:15:6b:9e:f2:e0:6c:50:
9a:1d:85:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:46:06 2026 by rpki-client