Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PCnYDFn0k2F6lGuZ21llekgxV8k.roa
File: PCnYDFn0k2F6lGuZ21llekgxV8k.roa (raw, json)
Hash identifier: fJn0EssGBGoeosMUZyS2a8EsGxua3RdLQsjTU4b7/0M=
Subject key identifier: 3C:29:D8:0C:59:F4:93:61:7A:94:6B:99:DB:59:65:7A:48:31:57:C9
Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial: 019D6F0BD70AB343A0FE46C954B1521C6A14
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PCnYDFn0k2F6lGuZ21llekgxV8k.roa
Signing time: Wed 08 Apr 2026 21:42:20 +0000
ROA not before: Wed 08 Apr 2026 21:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401856
IP address blocks: 188.246.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:0b:d7:0a:b3:43:a0:fe:46:c9:54:b1:52:1c:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Validity
Not Before: Apr 8 21:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c29d80c59f493617a946b99db59657a483157c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:3c:77:78:1a:d0:07:30:bc:4b:1d:b3:87:
7f:c2:97:55:27:63:59:89:c5:61:4b:a0:5a:46:ba:
1e:ce:43:53:7b:6f:a5:fd:93:f6:3d:ec:bd:10:ac:
6c:46:ec:15:1a:7e:f5:4a:62:87:c3:79:ff:48:29:
34:2d:f6:3a:18:33:76:c4:bc:b8:99:7b:4d:f3:ab:
6f:3c:a7:3c:c5:17:4a:a9:60:4e:3e:e7:92:c8:74:
b4:05:df:4c:4e:bd:09:3b:87:c0:02:e9:f5:3f:46:
9b:5e:96:f6:17:21:44:d2:97:f1:7d:3c:d5:01:58:
0a:52:ef:e5:13:56:06:2c:77:4d:02:87:a1:b9:bb:
92:76:3a:92:b4:91:8f:6e:fc:55:3a:e3:7e:25:bb:
a4:79:8b:3b:b2:68:c2:59:43:93:46:7b:47:5a:87:
3c:08:77:e4:61:55:0b:4d:42:54:1b:c5:b3:fc:16:
bc:8f:cb:5e:10:50:91:a0:08:ee:78:6e:83:7d:12:
61:a5:d7:89:7b:7c:07:6b:88:14:87:ec:b2:6e:0d:
52:c1:5f:8a:c7:a1:09:26:a9:bf:47:36:53:3f:8b:
e5:73:9e:f4:fb:fb:c1:22:fc:03:95:f2:1f:1c:cb:
18:e7:6e:66:99:b6:ef:75:d3:ba:23:7a:47:92:c9:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:29:D8:0C:59:F4:93:61:7A:94:6B:99:DB:59:65:7A:48:31:57:C9
X509v3 Authority Key Identifier:
keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/PCnYDFn0k2F6lGuZ21llekgxV8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.246.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:03:16:f8:1f:ad:db:78:df:95:d8:73:9b:1f:01:8c:55:9a:
12:b3:25:45:66:92:6c:aa:d4:52:a8:e8:38:cd:ae:9b:83:eb:
7a:f6:07:74:94:c3:97:f5:5a:74:87:e0:a2:53:39:88:cb:49:
c8:6b:9c:cb:6f:d3:52:33:3b:8a:23:b4:45:ae:b2:22:e0:d7:
80:48:76:77:b7:c9:10:10:43:bc:b6:51:2b:ca:57:3e:9a:bf:
e6:c3:fa:21:22:9f:29:eb:8d:53:a9:10:d4:d0:98:d4:38:ca:
e1:d6:35:38:e6:16:cf:a7:8e:f7:7c:f9:3d:4c:ba:18:18:e9:
9b:40:75:e1:f0:f8:87:d5:2c:ca:c6:ab:98:e6:1e:07:52:99:
13:1b:87:a9:ee:ae:03:2a:61:49:dc:7a:ab:48:37:c5:21:c6:
2a:e7:96:51:54:8c:d9:85:4e:c2:89:0b:11:7c:ea:c8:e9:c4:
a9:ae:2b:02:43:35:ca:e8:3b:ad:da:90:8d:33:77:d7:c4:41:
7a:0e:6d:c7:2c:4a:78:71:fe:e8:39:3c:b3:39:bd:c9:bd:45:
ac:47:c1:78:d4:2b:a0:d4:c7:2d:87:c2:3b:b0:d2:98:ee:37:
38:77:e8:70:c4:a3:dd:73:24:f8:16:68:4a:29:40:2f:c9:7a:
a3:d4:f1:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1vC9cKs0Og/kbJVLFSHGoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx
NGMzY2IwHhcNMjYwNDA4MjE0MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzI5ZDgwYzU5ZjQ5MzYxN2E5NDZiOTlkYjU5NjU3YTQ4MzE1N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg88d3ga0AcwvEsds4d/wpdVJ2NZ
icVhS6BaRroezkNTe2+l/ZP2Pey9EKxsRuwVGn71SmKHw3n/SCk0LfY6GDN2xLy4
mXtN86tvPKc8xRdKqWBOPueSyHS0Bd9MTr0JO4fAAun1P0abXpb2FyFE0pfxfTzV
AVgKUu/lE1YGLHdNAoehubuSdjqStJGPbvxVOuN+JbukeYs7smjCWUOTRntHWoc8
CHfkYVULTUJUG8Wz/Ba8j8teEFCRoAjueG6DfRJhpdeJe3wHa4gUh+yybg1SwV+K
x6EJJqm/RzZTP4vlc570+/vBIvwDlfIfHMsY525mmbbvddO6I3pHksn40wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwp2AxZ9JNhepRrmdtZZXpIMVfJMB8GA1UdIwQY
MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt
MWRkNmQyODFjODhhLzEvUENuWURGbjBrMkY2bEd1WjIxbGxla2d4VjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh
LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPbSMA0G
CSqGSIb3DQEBCwUAA4IBAQCrAxb4H63beN+V2HObHwGMVZoSsyVFZpJsqtRSqOg4
za6bg+t69gd0lMOX9Vp0h+CiUzmIy0nIa5zLb9NSMzuKI7RFrrIi4NeASHZ3t8kQ
EEO8tlErylc+mr/mw/ohIp8p641TqRDU0JjUOMrh1jU45hbPp473fPk9TLoYGOmb
QHXh8PiH1SzKxquY5h4HUpkTG4ep7q4DKmFJ3HqrSDfFIcYq55ZRVIzZhU7CiQsR
fOrI6cSprisCQzXK6Dut2pCNM3fXxEF6Dm3HLEp4cf7oOTyzOb3JvUWsR8F41Cug
1Mcth8I7sNKY7jc4d+hwxKPdcyT4FmhKKUAvyXqj1PF5
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:10 2026 by rpki-client