Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/PKsQ0MGMThKjH51r68KbPjZPH40.roa
File: PKsQ0MGMThKjH51r68KbPjZPH40.roa (raw, json)
Hash identifier: 3Eued/zp686i36xpm0Wg0HQsaRbvmEUZEHnKtw6sFtw=
Subject key identifier: 3C:AB:10:D0:C1:8C:4E:12:A3:1F:9D:6B:EB:C2:9B:3E:36:4F:1F:8D
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 01A01ACBA1DC2E296C711C45A4B5A2C922ED
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/PKsQ0MGMThKjH51r68KbPjZPH40.roa
Signing time: Wed 19 Aug 2026 16:12:27 +0000
ROA not before: Wed 19 Aug 2026 16:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201664
IP address blocks: 85.137.212.0/24 maxlen: 24
91.108.190.0/24 maxlen: 24
91.215.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:cb:a1:dc:2e:29:6c:71:1c:45:a4:b5:a2:c9:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Aug 19 16:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3cab10d0c18c4e12a31f9d6bebc29b3e364f1f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:50:c5:e4:66:d8:c6:9a:ff:8f:d3:a6:c7:
d0:c0:b0:1a:a2:97:64:b8:ef:54:b3:c7:f6:ab:45:
a0:80:10:06:3f:0b:29:a5:ba:3d:91:ec:3b:ea:7f:
97:36:bb:0b:b0:03:be:1d:a8:1c:88:9f:09:87:a4:
0a:15:a2:8f:63:8b:63:a0:75:f9:0f:9c:0f:e5:87:
27:ac:76:aa:d9:f4:f5:ed:ef:f3:7e:72:8a:67:a0:
00:7d:8b:7c:54:98:e3:10:0c:4c:06:b7:81:53:75:
75:3a:17:b7:2c:ae:86:5b:8d:f7:9f:e9:ff:dd:5c:
3d:49:db:4a:95:06:1f:8b:66:b7:a4:1e:d0:88:41:
25:2b:e6:06:d8:28:6e:9f:5f:16:e2:fc:d8:8c:72:
6e:36:45:13:ec:c1:db:65:69:8c:bd:c2:a9:71:9b:
46:e7:0e:53:4e:10:52:4a:56:19:08:53:ca:70:8a:
20:87:e7:07:f8:17:f7:58:2e:6e:41:22:5f:3f:a2:
54:95:dc:5e:56:c8:b8:25:a5:e2:03:27:bd:a2:f3:
99:92:30:4e:d7:20:db:d3:91:06:ad:2a:ce:61:bc:
e6:6e:e8:3b:e2:66:53:d0:25:88:6f:6a:0d:67:5c:
ba:a4:9e:47:8b:1a:c2:dc:c5:7c:a5:3a:b8:53:7d:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:10:D0:C1:8C:4E:12:A3:1F:9D:6B:EB:C2:9B:3E:36:4F:1F:8D
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/PKsQ0MGMThKjH51r68KbPjZPH40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.212.0/24
91.108.190.0/24
91.215.86.0/24
Signature Algorithm: sha256WithRSAEncryption
98:df:0b:1b:85:7e:66:c9:0f:4b:9c:2d:fa:31:ab:2e:df:f4:
46:01:4b:3f:92:34:bf:43:ff:7b:6b:6b:ed:77:3d:3c:9d:48:
40:4c:d1:78:48:7c:e5:e3:91:20:34:34:12:6e:a7:92:c9:ca:
48:7c:cf:34:cf:f4:37:e3:14:19:e5:58:c1:93:05:5a:4a:d9:
2f:77:c6:cd:33:e4:1e:15:1d:f4:44:3e:1c:f6:18:08:0c:97:
66:47:39:c1:e2:95:d0:d7:1d:7a:71:22:5b:b8:c9:72:cb:76:
74:e0:de:1f:d3:1c:1d:42:04:f8:1c:c4:f7:b4:7e:9c:1c:9b:
dd:d0:7d:23:ef:58:35:77:20:44:02:10:7c:28:d5:78:bd:50:
f9:68:06:2e:fb:e4:2a:89:62:e4:fe:98:fb:6b:9a:39:c3:cb:
66:29:45:45:ba:78:da:16:09:25:e6:bd:3d:2a:ab:f4:94:ec:
68:3a:bf:21:e0:a1:bc:72:e3:cb:11:86:af:e0:4f:2c:7f:26:
00:7a:b6:10:ca:76:c7:87:db:47:c8:ed:ea:f1:a7:a5:55:36:
4a:72:dd:58:cf:12:65:c7:b7:a8:6d:a7:3f:5f:1b:7d:da:e8:
06:c8:90:83:43:17:86:c8:17:89:50:24:1c:73:c6:3d:74:34:
05:8e:e3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 21:51:43 2026 by rpki-client