Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PcPZTyxQolEMrwcPO2Ar1v2v7jA.roa
File: PcPZTyxQolEMrwcPO2Ar1v2v7jA.roa (raw, json)
Hash identifier: 8/hn+fV0NhhWY+DwhU4setIzYpfKelcK0vbKngBWSSE=
Subject key identifier: 3D:C3:D9:4F:2C:50:A2:51:0C:AF:07:0F:3B:60:2B:D6:FD:AF:EE:30
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 019D7609B25F686C096E86ED26CA059A3472
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PcPZTyxQolEMrwcPO2Ar1v2v7jA.roa
Signing time: Fri 10 Apr 2026 06:17:20 +0000
ROA not before: Fri 10 Apr 2026 06:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 185.63.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:09:b2:5f:68:6c:09:6e:86:ed:26:ca:05:9a:34:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Apr 10 06:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dc3d94f2c50a2510caf070f3b602bd6fdafee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:67:ca:ae:0a:72:74:c8:09:78:7f:bf:79:
2d:db:95:2f:7d:25:7a:e4:da:ed:31:c0:23:53:2d:
e6:ba:0e:f1:a0:ed:58:87:30:35:ea:54:3f:8d:f8:
1a:ec:e0:67:59:03:77:09:ff:04:12:59:9d:7b:f6:
1a:2a:c0:75:0f:ae:4b:d6:11:8a:b8:ed:76:61:cf:
76:9f:87:6b:45:9d:09:f8:83:82:13:cd:c2:62:d2:
80:1a:90:28:bd:b8:19:ef:dc:49:0b:f8:5f:2a:02:
09:fd:2f:47:be:f7:f9:35:17:20:f3:ae:53:c0:29:
bb:19:f9:68:9b:f8:69:cd:8c:f0:8e:aa:f9:32:45:
d5:12:ef:87:b9:93:40:22:b2:cb:48:9d:8b:54:18:
c8:61:d7:5f:a6:7e:6c:f0:f1:fc:0c:66:12:88:30:
0c:bb:12:c4:23:41:4d:cc:5c:5a:9e:7e:02:75:33:
ac:f3:8c:97:3c:fe:15:65:6e:c0:4c:70:4d:ec:75:
94:59:4d:c2:d4:ca:89:01:a8:e6:92:c0:79:7e:f0:
22:d7:84:3f:ee:d6:49:f4:ee:9c:22:98:74:3c:cf:
82:4e:28:09:df:41:30:b0:16:ae:8c:8a:30:55:78:
b8:33:28:5e:18:d5:8f:50:88:3e:0e:c4:24:eb:2e:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C3:D9:4F:2C:50:A2:51:0C:AF:07:0F:3B:60:2B:D6:FD:AF:EE:30
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/PcPZTyxQolEMrwcPO2Ar1v2v7jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:09:9f:dd:72:c1:05:66:c1:e0:6c:0a:3f:37:03:34:13:10:
3e:55:f9:5c:42:9f:d9:9f:dc:11:34:6b:20:e3:48:2c:c4:37:
7e:9c:75:33:65:fa:d0:a8:0b:45:4c:b8:38:7d:ff:ea:2a:7a:
bd:b1:ee:56:a3:5c:ce:94:cd:e6:5b:3b:ed:02:a0:2b:ce:85:
45:17:44:5a:34:99:84:2f:10:cb:89:64:f0:60:fa:60:dc:24:
32:80:ea:25:76:39:bc:ba:a2:6c:c0:0b:50:60:cd:b0:07:bd:
28:c9:9a:b0:23:91:da:0f:db:cb:7f:31:ac:c9:e3:ac:a7:c2:
cf:b9:76:82:37:67:21:87:75:37:ec:a5:79:e5:9f:08:94:ce:
96:a5:a9:e4:86:87:bc:28:25:0c:65:81:c2:a1:58:34:3b:c6:
c3:ef:bf:3b:2d:1f:47:84:eb:8a:58:ff:74:35:9b:aa:28:26:
78:3e:4a:b6:1f:ea:70:63:5a:a3:04:5e:49:31:2d:90:54:c8:
b9:8e:dd:a4:17:dc:be:21:d6:6e:fd:11:7f:3a:d4:13:17:c5:
71:17:18:5a:a9:5e:9d:50:8e:92:9f:50:eb:3c:2f:14:b1:3d:
0d:82:87:18:f4:04:59:36:46:4c:97:20:29:bc:b2:03:b1:98:
3d:63:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:55 2026 by rpki-client