Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/pl9CMVN9K5gR0945W-6Re2TMtvo.roa
File: pl9CMVN9K5gR0945W-6Re2TMtvo.roa (raw, json)
Hash identifier: JqHMuSBMUPGCgcifWudK/wr7jTf2RxW25x3NySvPvwA=
Subject key identifier: A6:5F:42:31:53:7D:2B:98:11:D3:DE:39:5B:EE:91:7B:64:CC:B6:FA
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 019FEF7CF2F176CE1537E7FBA902327EFBDE
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/pl9CMVN9K5gR0945W-6Re2TMtvo.roa
Signing time: Tue 11 Aug 2026 06:22:51 +0000
ROA not before: Tue 11 Aug 2026 06:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12347
IP address blocks: 93.189.64.0/21 maxlen: 21
2a02:410::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:7c:f2:f1:76:ce:15:37:e7:fb:a9:02:32:7e:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Aug 11 06:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65f4231537d2b9811d3de395bee917b64ccb6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:72:45:06:8c:fa:23:3c:d7:65:f6:9a:f0:
90:8e:94:fe:2b:01:3e:9e:d8:19:38:b6:4d:c8:61:
8f:ad:6e:aa:2a:b8:1f:f6:cf:e2:6d:da:ad:d8:76:
b9:f5:3e:ff:59:a3:5f:6f:c4:78:35:7b:41:43:97:
ae:2d:bd:76:29:60:d7:fa:dc:b3:10:6b:dd:72:6f:
67:36:09:44:aa:6d:1e:d7:36:1b:af:5a:ee:bc:18:
30:48:9c:40:12:3a:7e:2c:4d:5b:54:d6:0b:1e:07:
97:55:e5:f7:e0:0c:fd:2b:5c:e4:d0:77:24:1d:c8:
3f:0d:bc:5d:e9:42:93:3a:a5:13:12:aa:38:e8:23:
a3:77:35:cf:bf:e5:0f:d3:54:54:58:90:88:7d:3d:
b3:e7:84:d5:85:ef:0f:a6:de:d0:1e:74:67:76:b3:
30:84:7f:e3:50:ad:19:4c:05:ab:2d:a3:05:31:a6:
14:f7:0a:a8:2d:bb:5e:d4:db:a4:80:33:ee:81:86:
f4:0f:d4:c5:5b:00:1d:a1:dd:f8:59:0a:74:58:e3:
a9:4e:43:57:11:68:1c:54:bf:1c:21:c6:35:42:b4:
27:49:8d:5a:3e:0d:6b:cf:73:bb:3f:e0:c3:f7:0f:
81:1c:31:68:42:62:27:40:35:8b:eb:e1:84:9a:df:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:42:31:53:7D:2B:98:11:D3:DE:39:5B:EE:91:7B:64:CC:B6:FA
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/pl9CMVN9K5gR0945W-6Re2TMtvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.64.0/21
IPv6:
2a02:410::/32
Signature Algorithm: sha256WithRSAEncryption
97:1e:dc:06:a0:0a:35:66:d7:84:29:74:62:ba:d8:65:9d:8a:
e7:8f:96:67:42:0a:f6:74:7c:9d:e8:e0:9a:4d:83:21:a9:55:
54:2f:21:a7:5a:6f:ea:72:06:0e:c2:df:22:34:9e:94:78:00:
9f:98:29:96:e7:68:65:2b:80:b3:eb:6f:71:6b:fe:b3:f7:4d:
4e:9a:7b:a9:fe:5d:e1:12:32:3c:00:db:7b:7f:c4:87:5c:43:
5e:32:87:37:54:a3:fa:08:0f:fd:aa:ac:3b:4c:e3:23:0d:ef:
a5:da:25:25:fd:f0:a7:1a:dc:8b:95:52:df:54:05:60:b1:14:
bf:af:80:44:70:88:5b:8c:cd:7e:30:a8:fa:62:f0:f7:f0:07:
ba:63:87:46:84:45:4e:79:16:0b:6c:7f:d5:9f:d6:92:bb:82:
93:fe:aa:ad:03:a5:bd:87:b2:90:d6:90:a4:eb:e8:ea:51:ce:
98:9d:9e:12:3e:4f:fd:c8:ff:e2:1f:9a:b2:0d:71:ce:d2:7e:
f5:33:55:46:9f:7d:4a:05:f0:4b:99:21:8a:53:f9:df:1a:c1:
1c:3e:2a:8c:c8:5d:b5:d5:5f:aa:e9:88:01:2a:1a:fc:df:a8:
1a:cd:b3:15:e2:0f:a8:64:00:06:85:93:d7:26:e0:14:fd:c8:
56:24:58:bf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ/vfPLxds4VN+f7qQIyfvveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzA3YTQ1NTkyYWM5ZDE3MTlhODU3Njk2MDMxNzc4Mjli
NDZlMGEwHhcNMjYwODExMDYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjVmNDIzMTUzN2QyYjk4MTFkM2RlMzk1YmVlOTE3YjY0Y2NiNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXdyRQaM+iM812X2mvCQjpT+KwE+
ntgZOLZNyGGPrW6qKrgf9s/ibdqt2Ha59T7/WaNfb8R4NXtBQ5euLb12KWDX+tyz
EGvdcm9nNglEqm0e1zYbr1ruvBgwSJxAEjp+LE1bVNYLHgeXVeX34Az9K1zk0Hck
Hcg/Dbxd6UKTOqUTEqo46COjdzXPv+UP01RUWJCIfT2z54TVhe8Ppt7QHnRndrMw
hH/jUK0ZTAWrLaMFMaYU9wqoLbte1NukgDPugYb0D9TFWwAdod34WQp0WOOpTkNX
EWgcVL8cIcY1QrQnSY1aPg1rz3O7P+DD9w+BHDFoQmInQDWL6+GEmt8RsQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKZfQjFTfSuYEdPeOVvukXtkzLb6MB8GA1UdIwQY
MBaAFOVwekVZKsnRcZqFdpYDF3gptG4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEt
MzJjMzY1OGIyNWJlLzEvcGw5Q01WTjlLNWdSMDk0NVctNlJlMlRNdHZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNDQ2YWEtNmU0MS00NWMwLWIwOWEtMzJjMzY1OGIyNWJl
LzEvNVhCNlJWa3F5ZEZ4bW9WMmxnTVhlQ20wYmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXb1AMA0E
AgACMAcDBQAqAgQQMA0GCSqGSIb3DQEBCwUAA4IBAQCXHtwGoAo1ZteEKXRiuthl
nYrnj5ZnQgr2dHyd6OCaTYMhqVVULyGnWm/qcgYOwt8iNJ6UeACfmCmW52hlK4Cz
629xa/6z901Omnup/l3hEjI8ANt7f8SHXENeMoc3VKP6CA/9qqw7TOMjDe+l2iUl
/fCnGtyLlVLfVAVgsRS/r4BEcIhbjM1+MKj6YvD38Ae6Y4dGhEVOeRYLbH/Vn9aS
u4KT/qqtA6W9h7KQ1pCk6+jqUc6YnZ4SPk/9yP/iH5qyDXHO0n71M1VGn31KBfBL
mSGKU/nfGsEcPiqMyF211V+q6YgBKhr836gazbMV4g+oZAAGhZPXJuAU/chWJFi/
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:12 2026 by rpki-client