Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/pv-bc3o3nFs8YmaI8ZytA8ZrES8.roa
File: pv-bc3o3nFs8YmaI8ZytA8ZrES8.roa (raw, json)
Hash identifier: N4NHI2IxcLoPxohfia+ar+QwNiup6GPBCa61fQPK6Qw=
Subject key identifier: A6:FF:9B:73:7A:37:9C:5B:3C:62:66:88:F1:9C:AD:03:C6:6B:11:2F
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BEA00C1037ABE79F1CB93CD96EE33
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/pv-bc3o3nFs8YmaI8ZytA8ZrES8.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400810
IP address blocks: 198.34.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:ea:00:c1:03:7a:be:79:f1:cb:93:cd:96:ee:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6ff9b737a379c5b3c626688f19cad03c66b112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:f8:4f:89:ae:22:40:6a:70:3e:92:ea:a4:
42:b8:07:f2:eb:80:03:be:f9:1a:30:40:2c:a9:60:
ab:b8:b7:0f:2b:f5:6b:67:33:91:5a:37:48:9c:00:
10:85:cd:81:6f:57:4b:04:ab:bc:2b:64:4a:b6:77:
b0:89:56:41:dc:e6:e0:c1:40:d5:f7:90:3e:46:3b:
65:d1:20:88:ad:75:f8:dc:fd:0d:df:3e:b6:2a:2f:
02:a2:64:66:85:6f:03:11:f8:a5:30:8d:6e:9b:a1:
f8:ee:fa:03:29:16:c1:75:16:f1:0f:c0:cd:19:a7:
01:bc:01:54:ff:f7:61:81:80:4c:c6:ef:e3:ef:0f:
aa:04:19:64:8c:33:c5:f8:d4:dd:55:4f:2f:6a:c2:
61:c1:1c:9d:40:d8:c9:c7:6f:8b:9f:8b:9a:f4:76:
da:9d:a2:68:a3:f7:17:78:fd:64:ff:80:02:92:fc:
a1:7c:24:c0:26:a9:e1:4b:f5:c5:5b:ad:11:bf:08:
f9:28:b5:d6:cf:d6:a8:43:23:c2:cf:47:4d:87:40:
f0:b1:6a:88:2a:ba:5a:81:79:24:7f:f7:8f:29:5a:
e5:d0:19:d1:96:2c:61:9c:48:17:23:af:04:05:9d:
7b:6c:53:9f:4f:20:eb:c8:f0:d2:12:73:84:78:08:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:9B:73:7A:37:9C:5B:3C:62:66:88:F1:9C:AD:03:C6:6B:11:2F
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/pv-bc3o3nFs8YmaI8ZytA8ZrES8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.34.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:12:bc:e7:a5:1f:58:08:72:ee:23:60:3b:5e:5c:ba:9c:06:
00:37:8d:01:1c:6e:ce:c6:8f:64:f8:29:64:ab:f5:9c:5d:c7:
66:63:32:00:a8:7e:ba:5f:df:f8:22:23:d7:af:e3:51:19:3a:
70:58:d3:67:17:be:7c:d4:d1:12:2c:c8:5b:58:5d:62:bc:d0:
03:ac:cd:20:ab:51:6a:ae:8b:ce:d4:e8:75:07:14:1b:6e:4e:
f1:90:01:7c:28:89:95:d0:21:52:60:2c:f2:a1:d0:b2:06:99:
5b:59:0b:a8:83:a6:07:88:d7:24:34:23:e1:b0:7d:f2:ec:52:
0f:85:a1:54:85:17:40:fe:dc:69:13:36:ff:ee:2f:21:15:b4:
8e:a5:fa:9d:b8:b5:fa:e5:f7:a0:8b:d3:f2:98:2a:49:cb:77:
05:45:56:73:7b:a8:3e:35:8d:3a:e1:64:bc:54:f1:64:17:51:
4f:34:0e:6d:61:00:a1:72:85:29:11:a3:68:22:8f:20:1f:6a:
9b:62:4e:8f:ee:f3:3c:59:bf:42:62:14:90:69:8d:81:2b:ea:
d0:4c:9e:2d:9b:f9:f2:d5:d6:5b:9b:65:df:51:6e:72:e1:41:
71:c2:a4:04:fd:72:47:32:06:8f:bb:a0:00:1a:cd:2d:24:7c:
96:8a:58:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:45 2026 by rpki-client