Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PG5gaW6QKtR5JzL6q5eBke0iYq0.roa
File: PG5gaW6QKtR5JzL6q5eBke0iYq0.roa (raw, json)
Hash identifier: CI7oeUgCJQOVE+/gNMHsZoUM76jLEBj4sJYAooPBpw4=
Subject key identifier: 3C:6E:60:69:6E:90:2A:D4:79:27:32:FA:AB:97:81:91:ED:22:62:AD
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019CF72D0ADC03B7B29B742DBF0EAC6DBFDA
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PG5gaW6QKtR5JzL6q5eBke0iYq0.roa
Signing time: Mon 16 Mar 2026 15:04:10 +0000
ROA not before: Mon 16 Mar 2026 15:04:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 146.247.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:2d:0a:dc:03:b7:b2:9b:74:2d:bf:0e:ac:6d:bf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 16 15:04:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c6e60696e902ad4792732faab978191ed2262ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8b:5e:2b:46:44:dd:f7:3f:12:a0:f6:4c:28:
ce:a1:8b:86:8c:48:dd:5e:42:75:b7:50:34:2d:86:
44:02:89:93:c6:ac:6d:e0:94:37:28:b5:83:48:36:
7b:6d:4c:3a:55:9e:64:b7:66:dd:71:6a:f3:f7:69:
2e:6a:f0:8d:52:d4:1d:67:89:16:5f:f8:aa:4c:b1:
20:46:5f:ec:a7:7e:d8:81:c2:61:87:bc:1d:a9:cd:
7e:f1:a4:cc:32:1a:75:c5:70:19:b3:a9:30:1c:cc:
9c:8b:25:30:f1:33:41:8e:ea:88:6e:9f:81:11:2b:
c2:31:4e:c4:38:dd:3d:95:83:20:6b:33:95:f0:f7:
0a:f1:63:fb:7e:c7:41:98:bb:88:03:27:5a:b4:ae:
cf:cd:a6:34:93:c9:7a:e2:45:3c:a9:04:12:1f:9c:
05:6d:e7:41:c0:8e:b8:be:d4:8a:c3:6b:83:fe:b8:
d7:60:ac:a5:a7:6c:12:40:40:e1:5d:a6:44:c8:b5:
d0:55:98:9f:87:d2:23:f6:4c:6d:1f:89:14:4c:61:
92:48:5b:b4:4a:80:3b:8f:5f:a1:e9:e8:ba:15:4a:
0c:6b:85:cd:b2:35:a1:60:57:fb:25:be:d5:a0:d6:
eb:a2:ac:a5:6b:2a:51:8e:8b:05:39:9b:fc:3c:0e:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:60:69:6E:90:2A:D4:79:27:32:FA:AB:97:81:91:ED:22:62:AD
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PG5gaW6QKtR5JzL6q5eBke0iYq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.115.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6c:c7:61:21:44:f2:f2:a6:c9:76:66:3d:37:89:32:3f:3a:
b7:af:06:d1:88:a8:50:da:11:b7:f6:cb:74:89:11:be:e3:af:
d3:1e:2c:8c:aa:fe:43:c7:09:5f:c2:9f:33:82:4b:df:ad:0c:
72:8d:11:c4:d4:3f:ed:cf:85:63:76:1a:c3:04:41:02:03:3f:
c7:72:0d:44:ef:39:17:04:a8:4e:e2:62:f9:94:d6:30:7e:12:
43:c3:73:38:66:95:9c:01:7b:fc:04:82:35:ed:47:02:71:c3:
f2:cd:e7:84:b8:f2:bf:f6:c6:83:e4:e9:08:71:fe:7b:92:c8:
20:5d:a0:ab:ed:c4:ca:fb:b9:7b:f4:a1:fd:45:04:fb:3d:d1:
93:e4:ed:41:3a:09:07:2d:8a:6f:2d:37:55:9b:ee:a5:1e:09:
17:cf:83:c9:04:c5:9a:2e:d3:63:20:5f:d5:0a:99:f5:cf:87:
32:a0:c7:99:37:f6:18:50:64:a7:25:e3:e6:40:37:4b:9f:db:
f4:7b:29:84:6c:a1:60:ef:4f:6d:2b:b8:f8:44:8e:d8:2a:9c:
b1:e5:3b:11:e1:2c:aa:40:ab:2e:fa:64:f6:fa:a0:e8:57:40:
90:f4:8e:33:06:e4:dc:d3:97:50:1a:17:e2:4e:35:57:10:ce:
08:d3:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 09:16:53 2026 by rpki-client