Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/PIKasOAhx7NdmBsA0wIS5mvUtyQ.roa
File: PIKasOAhx7NdmBsA0wIS5mvUtyQ.roa (raw, json)
Hash identifier: HnTEiUsfOXroUWSwOqH9bLB6+O6llbryWiALYeIcjjA=
Subject key identifier: 3C:82:9A:B0:E0:21:C7:B3:5D:98:1B:00:D3:02:12:E6:6B:D4:B7:24
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01A0B412D140E91274F63AA33EDCD9A94205
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/PIKasOAhx7NdmBsA0wIS5mvUtyQ.roa
Signing time: Fri 18 Sep 2026 10:32:07 +0000
ROA not before: Fri 18 Sep 2026 10:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 2a11:69c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:12:d1:40:e9:12:74:f6:3a:a3:3e:dc:d9:a9:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Sep 18 10:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c829ab0e021c7b35d981b00d30212e66bd4b724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:c4:3b:50:d7:a2:c5:3a:92:12:56:3a:47:
cf:14:7d:03:91:3a:dd:41:54:44:57:91:e7:84:ec:
dc:09:78:bc:fd:15:83:12:7a:3f:36:ca:73:2b:66:
34:86:69:99:b8:48:73:a3:06:6a:4f:00:3e:e1:1a:
28:cc:c3:b6:6e:57:2d:c6:4c:a9:0c:76:f7:2c:06:
6e:c2:24:16:15:ef:07:ee:fd:d0:cc:2d:9e:73:7b:
d5:03:19:68:2b:5b:c7:6b:bc:9c:6e:02:1b:8d:5d:
c5:a7:42:55:35:57:70:1f:94:9f:5b:1a:26:de:4b:
5c:63:25:d4:ee:79:5c:a0:45:61:01:e6:08:ba:2f:
5a:f3:8f:e8:72:4c:22:17:48:a1:d4:42:25:e7:ee:
77:35:ce:05:41:df:60:a1:ee:60:f5:31:30:bd:92:
65:03:77:53:6a:f8:d7:eb:9a:a2:cc:46:f7:68:2d:
df:8b:e4:3b:1b:d2:ad:61:d3:f7:7a:d7:d5:ae:01:
75:5a:be:e1:b1:df:c8:e6:a9:fc:46:fe:da:61:71:
da:49:8d:47:c0:1b:f9:2c:94:26:ed:61:5f:83:bc:
7c:23:e2:1e:90:c5:9c:9e:89:a5:a7:ed:25:93:51:
90:ea:19:d5:91:60:e4:07:d4:e4:c5:29:cc:5d:64:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:82:9A:B0:E0:21:C7:B3:5D:98:1B:00:D3:02:12:E6:6B:D4:B7:24
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/PIKasOAhx7NdmBsA0wIS5mvUtyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:69c0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:46:94:7e:2b:43:a6:23:20:47:3f:5b:0d:eb:fc:6d:bc:d0:
f1:6b:f5:e0:c6:97:a2:d4:54:75:5b:28:c3:66:40:52:93:c0:
80:1d:00:00:70:b5:e3:9a:58:28:49:30:07:da:fe:fc:ae:f8:
c5:6a:49:5a:77:ba:da:1d:e8:ee:6e:7d:01:43:3e:9f:d5:3b:
aa:5e:de:ba:51:e7:6a:28:23:63:a6:bb:17:e9:78:13:14:aa:
75:98:71:b8:57:96:76:c5:c3:36:ed:61:fa:8a:94:e5:49:0e:
7d:76:6e:21:91:2f:54:f0:89:b5:6f:34:47:95:ff:1f:10:99:
09:14:bf:22:08:1f:20:db:bb:d9:3d:ad:13:a7:b4:93:c2:ba:
fc:78:aa:d8:ff:2b:4c:8c:1c:af:49:5d:33:38:23:96:47:c8:
65:32:7e:79:b7:d3:39:b5:15:9c:f5:aa:66:e5:dd:13:ee:11:
67:e4:83:0f:22:fd:1c:5c:77:d3:e0:f3:b5:94:91:75:69:73:
45:bc:63:60:6a:1a:8a:d4:73:65:5a:29:f6:35:a2:49:1f:bd:
bc:de:77:3e:87:93:85:55:54:fe:c4:d5:31:2e:1d:18:45:5a:
4e:96:96:30:0c:96:4d:86:22:5b:5b:e7:83:c0:79:96:71:83:
f7:59:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:08 2026 by rpki-client