Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pkp_UXFgtIZPitM741WUAfnVCy4.roa
File: pkp_UXFgtIZPitM741WUAfnVCy4.roa (raw, json)
Hash identifier: ow1fFtEAs1V1FYq9cueqJfcFpLYySp0KqTI3WMh+guI=
Subject key identifier: A6:4A:7F:51:71:60:B4:86:4F:8A:D3:3B:E3:55:94:01:F9:D5:0B:2E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C74E0C4ED2E703CDA7A5BB54EF46B8682
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pkp_UXFgtIZPitM741WUAfnVCy4.roa
Signing time: Thu 19 Feb 2026 07:50:13 +0000
ROA not before: Thu 19 Feb 2026 07:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205104
IP address blocks: 188.255.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:74:e0:c4:ed:2e:70:3c:da:7a:5b:b5:4e:f4:6b:86:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 19 07:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a64a7f517160b4864f8ad33be3559401f9d50b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:2f:5a:42:b0:46:9c:92:75:4e:c6:7d:ad:
e6:2b:f6:8d:f7:64:95:5e:d8:94:12:99:0b:09:e4:
cc:4c:6e:09:39:a6:6c:63:f0:73:98:32:cd:c4:20:
d3:50:a9:4a:7b:cf:01:17:c6:82:d7:87:d0:0f:47:
57:3b:d4:e7:87:33:26:1b:98:fd:7d:bb:16:63:33:
bf:48:72:8c:c5:98:47:14:00:1a:0c:db:83:5e:f0:
66:cf:0c:b3:36:5c:72:1e:af:ed:41:61:57:c1:45:
b1:81:9d:01:3b:ea:64:7d:91:68:8c:28:b9:9b:f4:
4b:ad:37:0e:0c:db:c8:e4:5c:c5:c3:bd:8a:1b:f3:
d5:5e:fc:33:1e:39:38:d2:ae:5a:94:29:dc:cf:79:
6e:a0:3e:26:49:a5:67:7a:40:e8:8a:6f:9e:10:8c:
3d:dc:16:05:dd:16:89:13:64:0e:62:78:08:05:b9:
3e:8a:2c:f0:a7:f0:04:69:b9:39:23:ce:db:70:8e:
72:fa:08:bc:28:c7:d1:24:6b:04:0d:46:f5:f0:66:
39:4c:1f:22:82:4c:16:64:09:82:49:51:a5:14:32:
18:e0:6f:d4:43:0c:40:51:0c:66:25:9b:77:c8:5c:
de:56:e0:41:f0:18:2a:ff:c3:4f:4d:38:1f:9e:43:
0c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4A:7F:51:71:60:B4:86:4F:8A:D3:3B:E3:55:94:01:F9:D5:0B:2E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/pkp_UXFgtIZPitM741WUAfnVCy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.162.0/24
Signature Algorithm: sha256WithRSAEncryption
37:85:12:8a:43:71:62:b0:a8:17:86:9a:63:5a:86:69:a2:c7:
73:d9:69:a1:bc:20:ee:24:72:f5:41:d8:0b:3d:1c:28:85:0b:
60:74:3f:1a:4a:0e:00:ca:c7:5e:0a:a6:55:f4:e3:cc:37:ed:
5a:44:6d:b2:8d:6d:f9:d5:c7:d7:50:1b:1c:67:8b:39:0c:48:
b3:5e:c6:36:38:7c:a4:03:86:88:1f:64:f3:bf:84:8a:c7:f2:
ee:24:ec:a3:a0:0d:db:88:a3:e0:9d:2f:c4:bf:11:60:37:86:
18:77:c3:7c:dc:24:f0:bf:56:3a:b7:37:1c:a4:1a:b4:b3:05:
2b:84:cd:e7:de:1d:26:60:78:84:fe:f8:fa:5e:db:9f:f1:67:
a6:f1:0c:bb:d4:1c:00:30:30:e8:27:02:3b:db:c6:10:d7:4f:
dd:d6:eb:16:56:70:c4:9d:ea:fb:ce:74:4c:27:e7:4d:4e:35:
05:8e:28:79:ed:4d:49:f1:a0:fd:d9:9e:78:d9:e1:ea:18:45:
a0:a3:c3:7e:f4:96:3e:09:33:be:20:df:de:9b:4f:66:10:ea:
b6:ed:aa:a3:48:9f:1b:4c:47:c7:0f:d7:4a:73:06:f9:6b:6c:
4a:13:18:70:24:b8:f9:02:db:ed:3b:a3:b1:15:9e:ac:8e:73:
ce:3e:3d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:56:08 2026 by rpki-client