Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ptfnfwRXTo1kPCeKLbT3gSdhGZE.roa
File: ptfnfwRXTo1kPCeKLbT3gSdhGZE.roa (raw, json)
Hash identifier: 1v1opJPQmrzs+09Cmf2YuV7HVsG/Rh40IKl8jBi74fg=
Subject key identifier: A6:D7:E7:7F:04:57:4E:8D:64:3C:27:8A:2D:B4:F7:81:27:61:19:91
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019C3179D35185A1D8AEACE73C6A2583E087
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ptfnfwRXTo1kPCeKLbT3gSdhGZE.roa
Signing time: Fri 06 Feb 2026 05:43:13 +0000
ROA not before: Fri 06 Feb 2026 05:43:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210622
IP address blocks: 81.181.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:79:d3:51:85:a1:d8:ae:ac:e7:3c:6a:25:83:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 6 05:43:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6d7e77f04574e8d643c278a2db4f78127611991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:77:7e:e7:2d:34:9f:98:70:b5:b7:4b:ea:
ea:76:78:89:d5:44:8d:e1:75:b7:56:4e:eb:e7:6d:
24:11:82:d3:22:8e:5d:e7:c8:5c:ad:94:35:e6:ec:
8e:cb:1b:32:89:4a:16:ab:63:cc:b5:b0:bc:77:0c:
49:cb:7f:e5:34:d7:2d:92:f1:21:8e:d5:3f:51:3e:
d7:03:eb:8e:a8:65:52:9c:d9:29:45:fb:53:f3:e2:
95:3d:82:c6:80:9e:69:cc:ba:13:8f:e7:d7:8d:84:
59:ab:ae:dd:41:0c:7e:03:1e:a8:3c:e3:bc:be:8c:
4c:d7:5c:02:fd:0e:d6:8f:eb:c8:ca:e9:97:0f:fd:
9a:86:a2:28:86:61:9a:69:ea:8e:0c:2d:4e:fd:3a:
73:51:c6:43:c2:54:be:5a:2b:55:ca:8e:10:ec:12:
9f:f5:38:ee:d1:be:d4:79:3c:95:c5:c0:aa:2e:2f:
d8:15:68:6e:68:20:cb:01:72:e7:a6:50:78:04:89:
83:fb:03:8e:2a:aa:ea:19:e7:97:d3:8e:ff:03:cb:
7f:5d:99:0b:c2:89:99:fa:8b:6e:1a:86:db:77:c2:
09:c8:8b:ce:60:6d:d9:c0:e7:58:75:54:71:51:ea:
a9:99:5b:bf:90:10:64:da:81:66:ab:05:4d:6c:ab:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:E7:7F:04:57:4E:8D:64:3C:27:8A:2D:B4:F7:81:27:61:19:91
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ptfnfwRXTo1kPCeKLbT3gSdhGZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.164.0/24
Signature Algorithm: sha256WithRSAEncryption
79:63:3f:71:fa:e2:88:67:0d:9f:81:5d:98:0f:32:0a:95:ac:
2e:a6:e0:9a:2c:87:94:1d:a0:62:d9:cd:18:58:1a:43:23:bc:
9d:c5:8e:9e:cf:d5:1b:5b:ec:fe:2b:85:0b:6f:82:ac:3f:ec:
d3:f3:e0:c9:0b:44:6e:1d:4a:88:5a:43:3d:a6:e5:2c:77:93:
57:09:55:0f:c2:64:d2:3f:40:55:d3:e7:27:63:83:05:ff:38:
53:74:62:e6:41:85:0a:f6:ff:c7:24:b7:e1:5e:ed:eb:21:b6:
84:e2:f0:01:d3:95:af:1c:0d:99:69:31:c7:6c:ca:dd:81:83:
c4:b8:f3:fc:e8:b9:b7:49:c0:42:71:7a:0f:d3:e0:95:c2:bd:
0c:1b:da:92:6c:2c:1c:20:a0:e4:91:ca:66:3c:fc:33:36:54:
47:7c:37:96:25:f4:de:63:64:b0:2c:f5:6b:11:36:92:31:40:
ef:18:48:71:54:b6:2f:52:21:41:06:30:6d:aa:46:8f:f4:b7:
88:c0:d7:ca:1d:ae:6e:4c:20:cd:ff:f0:9b:d2:72:99:51:62:
a4:f8:99:73:77:4b:17:fb:1d:c6:dd:ae:e3:81:af:fe:45:bb:
b9:34:fa:0f:11:df:a1:24:1f:d6:6f:5b:e7:a0:b3:9d:29:8d:
bc:0a:68:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwxedNRhaHYrqznPGolg+CHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMjA2MDU0MzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ3ZTc3ZjA0NTc0ZThkNjQzYzI3OGEyZGI0Zjc4MTI3NjExOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24h3fuctNJ+YcLW3S+rqdniJ1USN
4XW3Vk7r520kEYLTIo5d58hcrZQ15uyOyxsyiUoWq2PMtbC8dwxJy3/lNNctkvEh
jtU/UT7XA+uOqGVSnNkpRftT8+KVPYLGgJ5pzLoTj+fXjYRZq67dQQx+Ax6oPOO8
voxM11wC/Q7Wj+vIyumXD/2ahqIohmGaaeqODC1O/TpzUcZDwlS+WitVyo4Q7BKf
9Tju0b7UeTyVxcCqLi/YFWhuaCDLAXLnplB4BImD+wOOKqrqGeeX047/A8t/XZkL
womZ+otuGobbd8IJyIvOYG3ZwOdYdVRxUeqpmVu/kBBk2oFmqwVNbKvFbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbX538EV06NZDwnii2094EnYRmRMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvcHRmbmZ3UlhUbzFrUENlS0xiVDNnU2RoR1pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbWkMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Yz9x+uKIZw2fgV2YDzIKlawupuCaLIeUHaBi2c0Y
WBpDI7ydxY6ez9UbW+z+K4ULb4KsP+zT8+DJC0RuHUqIWkM9puUsd5NXCVUPwmTS
P0BV0+cnY4MF/zhTdGLmQYUK9v/HJLfhXu3rIbaE4vAB05WvHA2ZaTHHbMrdgYPE
uPP86Lm3ScBCcXoP0+CVwr0MG9qSbCwcIKDkkcpmPPwzNlRHfDeWJfTeY2SwLPVr
ETaSMUDvGEhxVLYvUiFBBjBtqkaP9LeIwNfKHa5uTCDN//Cb0nKZUWKk+Jlzd0sX
+x3G3a7jga/+Rbu5NPoPEd+hJB/Wb1vnoLOdKY28Cmh7
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:19:20 2026 by rpki-client