Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/PDxCkfQyXaQDRzoiTpfHAu_SPc4.roa
File: PDxCkfQyXaQDRzoiTpfHAu_SPc4.roa (raw, json)
Hash identifier: QfR0JtF2boxJ7z42cuWD2zkCq2bk8rsxpJr59VR8pDY=
Subject key identifier: 3C:3C:42:91:F4:32:5D:A4:03:47:3A:22:4E:97:C7:02:EF:D2:3D:CE
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A13E602EF57E72002EA79F9B674A57DBC5
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/PDxCkfQyXaQDRzoiTpfHAu_SPc4.roa
Signing time: Thu 15 Oct 2026 07:04:13 +0000
ROA not before: Thu 15 Oct 2026 07:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.15.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:60:2e:f5:7e:72:00:2e:a7:9f:9b:67:4a:57:db:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Oct 15 07:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c3c4291f4325da403473a224e97c702efd23dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:54:17:46:68:91:c2:49:5e:63:20:8e:bb:
96:ba:8c:92:cd:df:83:13:38:ef:bf:4b:e3:0b:c7:
43:50:b6:3a:12:96:94:3c:e5:bd:bf:06:e6:fb:e0:
8b:8d:11:13:70:b6:17:b7:43:7b:f3:71:bb:1d:f5:
01:25:1c:10:92:8c:d2:5c:26:44:b1:cc:3d:21:9b:
a3:68:eb:c7:c3:42:67:15:60:20:d6:28:d3:72:26:
a5:68:59:be:2c:dc:a8:ea:aa:c5:d3:63:b6:f8:a5:
ee:72:1c:f7:d0:45:27:42:e7:64:13:1c:63:93:5e:
b6:29:3a:9d:22:b7:80:57:06:07:d1:54:38:8c:b8:
1d:df:fe:6e:3a:1d:b4:85:b1:a9:37:a7:a5:ab:49:
cb:43:42:4f:37:ea:63:31:75:a8:83:4e:66:ec:c6:
67:59:69:49:35:88:cc:3a:cc:17:bb:18:f4:48:bb:
c5:d4:3e:e4:c7:f8:26:0d:c0:c1:18:48:8b:dd:ea:
f0:72:1c:41:9e:5c:f2:74:21:b8:1f:d1:d7:4f:3f:
89:7e:92:a8:1c:57:06:87:58:3c:00:0a:10:16:3f:
3d:6f:23:3e:ec:d9:14:46:7b:a7:d5:86:3c:4c:15:
74:bc:a9:00:12:2f:0c:8a:58:da:00:32:23:a5:b1:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3C:42:91:F4:32:5D:A4:03:47:3A:22:4E:97:C7:02:EF:D2:3D:CE
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/PDxCkfQyXaQDRzoiTpfHAu_SPc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.106.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:28:3f:1f:36:2b:c3:c7:f9:f9:2c:c1:60:09:9d:0e:2c:da:
aa:75:57:bf:de:ae:48:78:e5:5d:83:80:84:a4:db:2c:46:2e:
9a:63:c7:05:8e:c6:1d:62:83:6f:11:69:69:f7:c2:7f:13:66:
2f:50:b9:a2:46:5a:69:be:55:7b:b8:1f:60:ff:a0:79:f3:1f:
f5:f6:7b:85:15:ca:24:6f:e8:86:45:91:6f:b8:b6:39:31:d7:
a3:c0:3a:2d:35:0c:00:c1:2a:9c:fa:0c:8f:13:8d:e3:0c:17:
12:78:64:0f:08:27:dc:7a:ab:d7:cf:24:94:87:14:8d:3b:ef:
85:df:b4:8f:4d:9b:a7:06:ca:51:cf:c8:a5:74:38:cf:6e:43:
5d:91:c3:bb:8b:13:31:04:40:d2:3f:de:2e:5c:37:c3:13:44:
c5:a1:c7:72:89:68:8f:b6:c6:a9:0e:ee:70:fc:15:80:c6:61:
b2:68:4f:86:92:9a:d3:06:60:2e:9b:ca:07:cc:d1:52:e9:64:
df:02:78:d8:ad:0b:da:ac:59:dd:18:b8:16:3d:1d:9a:89:71:
74:86:f7:09:21:74:79:d2:c7:14:a9:62:86:50:1b:7b:9b:63:
fe:0e:fc:01:7e:df:18:1a:a0:72:e7:71:31:c4:8f:9a:6f:50:
31:ea:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:28 2026 by rpki-client