Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa
File: PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa (raw, json)
Hash identifier: nV+JTD3ujjyKHyqyqk7w4WpsjNbLI/Jo7BdCyaZPoos=
Subject key identifier: 3D:D6:09:30:CF:20:F5:BC:D2:FB:36:A2:0D:1A:50:35:C2:28:00:03
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 019B7FF2733B6A06C2D4D44B5CD549EED35E
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa
Signing time: Fri 02 Jan 2026 18:22:34 +0000
ROA not before: Fri 02 Jan 2026 18:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207949
IP address blocks: 194.104.90.0/23 maxlen: 24
194.104.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:73:3b:6a:06:c2:d4:d4:4b:5c:d5:49:ee:d3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Jan 2 18:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dd60930cf20f5bcd2fb36a20d1a5035c2280003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:f2:33:c3:7f:a6:da:c3:54:9b:6b:4c:7c:
2e:88:01:f2:41:de:a3:f9:2e:5c:e8:54:d6:f4:e1:
90:b0:f9:cf:64:a2:92:1b:c7:b5:ab:2f:42:5d:77:
ea:22:2e:3f:2b:ad:97:26:05:3d:d7:3e:62:50:7a:
df:f4:b2:76:23:83:e4:f1:1e:f7:e0:ea:4e:99:75:
23:3f:db:a0:6a:39:9f:d5:42:33:67:5e:97:36:e2:
b4:cf:a6:19:52:6b:c5:e0:ac:c4:c9:94:8c:1b:c7:
67:ca:41:c7:bb:31:58:ac:4a:70:72:9c:4c:4e:20:
23:8f:e7:c1:40:39:b0:2e:2d:7a:e0:67:08:9e:b1:
65:ff:2e:19:4c:3c:1b:27:53:d4:0b:6f:fc:eb:21:
64:7d:6f:b8:96:39:94:25:bb:c0:8b:a0:bf:36:a1:
f2:59:0f:a5:f3:79:87:a3:a7:47:a9:a9:d9:97:49:
b4:21:bb:84:e3:e0:ac:5d:06:f4:2e:db:bb:d5:e4:
8c:56:ef:36:d7:c6:9a:bb:4b:37:84:c1:3d:ea:73:
9d:dc:61:c5:81:7e:6a:b2:34:a4:a9:1e:64:e2:70:
3c:82:f1:be:a1:4b:73:24:35:be:f0:b6:5a:d7:28:
59:0f:8c:22:12:77:a1:9f:29:c8:84:0c:35:ec:d6:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D6:09:30:CF:20:F5:BC:D2:FB:36:A2:0D:1A:50:35:C2:28:00:03
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.90.0-194.104.93.255
Signature Algorithm: sha256WithRSAEncryption
0c:27:ac:fc:30:3c:f7:a5:b6:d8:8c:be:4b:1e:35:9a:ca:51:
7c:dd:c6:dd:79:02:51:e7:63:ab:bc:aa:6d:0b:cc:32:b2:65:
83:5d:3a:df:0f:f7:c7:5b:0b:3a:43:05:42:9c:39:d0:ee:45:
d3:ed:b8:bf:df:4c:cd:3b:ec:40:02:9f:5a:59:51:f4:4f:eb:
5a:c5:9d:bb:09:9c:b0:8e:f4:72:dc:b6:89:2e:7f:20:bc:9d:
1f:0a:b5:be:22:e0:ed:f8:22:d1:32:54:88:91:e6:df:e5:48:
5c:6a:fd:d1:35:96:77:e2:2b:6d:38:9b:4e:56:a0:e4:71:b7:
f7:99:13:46:66:9b:04:bb:e8:a7:6e:1b:95:46:b0:0f:df:0b:
bc:71:3d:e1:62:a4:ad:dd:3e:f6:2d:c4:53:5f:0a:57:12:32:
76:fd:ca:ca:14:5d:80:fd:bb:7c:b3:ce:08:40:30:36:da:69:
fa:3c:60:b7:ac:86:98:05:77:4c:c5:07:b3:f9:50:90:b7:0b:
c4:d1:4b:d7:f3:ac:b7:5e:48:25:80:0c:64:17:83:30:59:42:
0c:49:31:2f:6b:ba:f1:03:38:d8:03:02:4b:bf:ad:da:1d:ae:
d6:ce:90:46:d8:9c:98:23:9a:fd:e0:79:36:eb:bc:f7:ed:4b:
19:57:e9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:01 2026 by rpki-client