Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa
File: pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa (raw, json)
Hash identifier: lkyyCZk1iYJ84UbKknek5JQ+JBGp0Xaxfyamk1cul+0=
Subject key identifier: A5:D9:8E:83:14:02:31:0C:B8:AB:C4:41:39:69:3C:8D:45:14:3C:E9
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 019F236877C261C6C8316C29DAC494F2CB98
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 213.220.51.0/24 maxlen: 24
213.220.54.0/24 maxlen: 24
213.220.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Jul 2026 15:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:77:c2:61:c6:c8:31:6c:29:da:c4:94:f2:cb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5d98e831402310cb8abc44139693c8d45143ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:cc:14:64:ce:86:f6:a2:99:a2:d3:8c:47:
4e:82:4f:3a:57:f2:ca:93:65:bb:30:fa:2f:10:56:
cc:a7:9d:3f:d7:21:c9:34:ec:69:89:79:ec:16:3f:
d7:69:df:53:2c:25:3d:fb:36:65:76:9d:09:df:f0:
34:ca:82:54:a1:d4:a5:a0:33:b2:45:e9:92:34:fb:
97:b6:f1:72:d5:35:1a:c1:5e:92:f8:59:db:c1:4c:
65:0c:f0:eb:9e:a4:42:de:a2:d6:e0:ef:93:fc:9d:
bd:d3:e4:6f:58:bc:b8:5f:37:99:20:55:64:15:82:
69:84:19:03:5e:48:d1:ec:f6:e6:d7:ac:9f:f1:2b:
e7:ae:df:f2:04:59:0f:7f:de:20:55:d1:d7:d9:d8:
82:a1:15:d9:1f:c4:fe:d5:36:c1:55:07:eb:1a:35:
eb:e2:31:65:11:45:e1:23:c5:ea:41:be:87:6f:27:
bf:2b:bd:a9:e8:95:25:ed:79:21:a5:e2:49:fb:02:
e1:45:ed:ea:d9:d7:3c:34:59:50:52:4e:54:4f:af:
9d:e8:73:1c:eb:67:f0:61:45:95:05:a7:73:17:41:
05:cc:31:91:a9:5a:2e:ce:f6:3d:46:4d:b9:c5:05:
49:53:ff:da:c3:eb:55:d2:81:eb:28:90:f7:00:2a:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:8E:83:14:02:31:0C:B8:AB:C4:41:39:69:3C:8D:45:14:3C:E9
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.51.0/24
213.220.54.0/24
213.220.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:4f:9e:5a:c1:7b:e4:8d:26:83:b6:36:dd:94:3b:94:fd:d7:
fb:82:52:a9:25:5d:5d:16:f4:42:01:f3:79:d7:a3:c9:df:f0:
db:f9:c2:e4:74:e0:f5:5c:5b:97:b6:60:0e:78:64:b6:79:34:
94:57:4d:d0:f7:78:d2:25:75:89:1b:7d:30:9c:3d:43:4e:21:
85:49:39:39:b9:2a:5f:c8:aa:43:ac:f6:44:6e:ef:f6:55:73:
24:f5:fb:73:43:a2:84:3d:ce:da:4e:bd:cf:e1:03:88:79:bb:
98:9a:f5:26:86:5a:da:2e:20:f2:cc:f7:5e:e6:1d:53:37:96:
6f:09:e2:02:31:b8:c3:0f:f3:3b:b3:dc:69:eb:27:89:3f:c1:
b8:f4:71:03:14:21:ea:d4:ff:46:59:47:8c:46:3f:71:87:b1:
30:0a:0a:ce:ac:ac:d1:e2:27:dd:4a:63:2a:c5:db:6d:cc:4f:
9f:db:6a:16:46:d0:e4:0e:da:f2:d1:39:e6:25:5d:a2:ab:63:
e2:85:d5:4a:ba:7d:bb:b4:c7:32:1e:2f:84:13:bd:75:42:a8:
80:b2:0f:1f:b2:81:a2:b8:b4:54:7a:e5:46:52:e1:8a:20:38:
90:f4:84:d4:48:a9:50:80:f9:4e:e5:80:31:af:53:aa:7f:45:
0a:8c:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 23:47:12 2026 by rpki-client