Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/pDrIjzZmP19TaAzRkXVsR5PgXDM.roa
File: pDrIjzZmP19TaAzRkXVsR5PgXDM.roa (raw, json)
Hash identifier: EhOVo2mVh+0JylRQJforOe474zHiA+LVqDCnvMtMlzg=
Subject key identifier: A4:3A:C8:8F:36:66:3F:5F:53:68:0C:D1:91:75:6C:47:93:E0:5C:33
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 01A06F5A91F4E90F6E746949C5BFCE266A57
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/pDrIjzZmP19TaAzRkXVsR5PgXDM.roa
Signing time: Sat 05 Sep 2026 02:16:40 +0000
ROA not before: Sat 05 Sep 2026 02:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203110
IP address blocks: 185.138.168.0/24 maxlen: 24
185.138.169.0/24 maxlen: 24
185.138.170.0/24 maxlen: 24
185.138.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:5a:91:f4:e9:0f:6e:74:69:49:c5:bf:ce:26:6a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Sep 5 02:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a43ac88f36663f5f53680cd191756c4793e05c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:4f:db:bc:91:17:b2:49:23:a0:29:d9:86:
d9:ae:89:e3:e2:3d:fb:5a:d8:01:48:b0:d4:7b:1d:
27:97:e4:4c:7c:05:db:f3:93:e5:78:85:d9:ad:ba:
9a:33:4d:fb:d8:5f:08:9f:0c:ec:14:5e:24:4e:17:
4d:5d:d6:54:04:1a:99:7b:96:2c:15:26:dd:5e:95:
3c:20:86:1d:fb:f7:3a:29:4b:19:04:7f:66:af:5f:
e5:51:d6:e4:28:b8:9a:0c:89:e0:dc:9b:0b:80:d4:
7f:9a:fc:fa:13:27:7d:53:0b:c9:03:76:07:60:49:
ab:3f:5f:ee:72:d7:7f:b7:1e:f1:fa:77:16:25:cd:
ce:c7:9c:33:74:5f:5f:55:09:3f:e7:9f:01:14:81:
a3:31:aa:fc:50:6a:56:de:cd:5e:37:7e:66:b6:a1:
42:d1:0f:92:f5:be:cb:83:6e:d3:a3:21:22:78:ba:
23:c3:b0:9a:5a:f5:14:19:c5:40:bf:a3:92:7a:89:
8f:01:34:95:f3:78:c6:f1:5c:2a:42:a4:9a:5f:3b:
58:e4:27:67:ca:6c:87:47:07:f9:8b:48:76:b7:31:
f8:9f:51:b2:d7:8b:9e:c3:c7:cb:0b:72:fa:6e:4c:
5a:f5:c6:d5:55:5f:74:cc:b5:9a:b4:17:4c:37:63:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:C8:8F:36:66:3F:5F:53:68:0C:D1:91:75:6C:47:93:E0:5C:33
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/pDrIjzZmP19TaAzRkXVsR5PgXDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.168.0/22
Signature Algorithm: sha256WithRSAEncryption
33:de:d1:ff:b5:6c:26:21:3d:da:6a:76:1f:e1:06:dd:b8:8a:
c4:16:99:65:51:b7:21:b4:59:a5:71:f1:fe:31:42:5c:17:ab:
7e:16:f3:ac:84:a1:05:e0:51:98:c4:72:fb:e5:c1:a3:9d:84:
68:d7:ca:07:4d:7d:ac:79:31:69:4d:fc:31:fa:58:24:b3:31:
45:2f:14:06:ce:61:6e:9d:6f:bf:f7:26:d3:4f:25:40:51:45:
0a:78:92:24:e3:51:2c:51:6e:f8:6e:5f:1e:76:d0:65:a5:60:
e6:26:3e:6d:0b:5b:f0:fb:5d:e1:19:f3:b0:91:b8:24:97:02:
b7:dc:22:d0:6d:e4:f1:36:01:64:70:1b:f5:d3:ba:e5:fc:87:
c0:f7:93:5f:6f:5f:ce:36:63:32:38:cd:04:41:d7:fc:5f:4c:
78:e7:d1:6a:d5:15:4e:75:ab:4f:97:06:57:66:0e:13:33:f6:
50:20:cb:8f:c0:c0:27:b2:a4:92:ee:22:bf:37:1e:e9:ce:7f:
d8:75:99:fe:c3:85:5b:d5:c7:a5:ae:9d:c2:c6:29:ab:9e:a7:
7f:29:5b:a5:43:f3:31:fd:e8:de:a9:1f:76:ad:20:41:b0:6a:
f4:92:09:25:a1:d0:ff:da:65:66:b0:d1:b6:74:17:84:4b:24:
e0:20:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:42:16 2026 by rpki-client