Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/PeGCfBu4U_0leg0PT3cvtLOw8cU.roa
File: PeGCfBu4U_0leg0PT3cvtLOw8cU.roa (raw, json)
Hash identifier: PnzYVi0/ykMAruKMxz9QIBD+EVR2KjgqqO1u0FSfGOg=
Subject key identifier: 3D:E1:82:7C:1B:B8:53:FD:25:7A:0D:0F:4F:77:2F:B4:B3:B0:F1:C5
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 019C8AE989CE34D01C537367EAE79F45F62D
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/PeGCfBu4U_0leg0PT3cvtLOw8cU.roa
Signing time: Mon 23 Feb 2026 14:31:26 +0000
ROA not before: Mon 23 Feb 2026 14:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43009
IP address blocks: 81.23.248.0/24 maxlen: 24
81.23.249.0/24 maxlen: 24
81.23.250.0/24 maxlen: 24
81.23.251.0/24 maxlen: 24
81.23.252.0/24 maxlen: 24
81.23.253.0/24 maxlen: 24
81.23.254.0/24 maxlen: 24
81.23.255.0/24 maxlen: 24
185.255.8.0/24 maxlen: 24
185.255.9.0/24 maxlen: 24
185.255.10.0/24 maxlen: 24
185.255.11.0/24 maxlen: 24
193.105.74.0/24 maxlen: 24
202.22.160.0/24 maxlen: 24
202.22.161.0/24 maxlen: 24
202.22.162.0/24 maxlen: 24
202.22.163.0/24 maxlen: 24
202.22.164.0/24 maxlen: 24
202.22.165.0/24 maxlen: 24
202.22.166.0/24 maxlen: 24
202.22.168.0/24 maxlen: 24
202.22.169.0/24 maxlen: 24
202.22.170.0/24 maxlen: 24
202.22.171.0/24 maxlen: 24
202.22.172.0/24 maxlen: 24
202.22.173.0/24 maxlen: 24
202.22.174.0/24 maxlen: 24
202.22.175.0/24 maxlen: 24
2a0c:55c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:e9:89:ce:34:d0:1c:53:73:67:ea:e7:9f:45:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Feb 23 14:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3de1827c1bb853fd257a0d0f4f772fb4b3b0f1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:f7:68:f7:7b:ca:30:e7:35:5b:f8:47:5f:
f3:28:d1:68:f5:d0:09:37:e6:09:39:e0:7f:cb:bb:
64:87:bb:66:9e:75:e9:c5:15:2c:b8:ed:86:75:36:
0c:a8:af:13:6f:7a:bf:9e:ea:22:61:c9:20:0b:4d:
b9:b6:8c:2b:15:d4:14:1a:e8:db:fe:ad:cd:f5:91:
b5:3a:c1:d0:89:9c:5d:62:55:8d:9c:1c:ce:c7:35:
fd:a1:98:9f:d9:86:30:70:10:43:28:f8:d1:88:bf:
f3:61:bb:ad:8a:d9:eb:3e:0b:5a:15:eb:dd:fd:0e:
0e:62:1a:4e:aa:43:2b:49:2e:3e:21:aa:31:f9:6e:
fc:7d:e9:f1:01:55:ea:30:cd:90:b8:4f:e4:aa:90:
bf:16:e4:45:3c:92:ae:67:f1:7b:32:97:3b:ba:7d:
fc:75:38:94:8d:d8:f4:d1:b8:c5:71:6f:30:88:91:
ce:10:01:0e:02:e8:0a:30:b9:6c:f5:34:a1:16:a4:
fa:54:a9:0e:6e:fa:51:24:46:b0:f7:c2:17:36:42:
9b:bc:ee:f1:3f:4a:d8:a6:29:82:a0:95:0d:0e:1d:
47:60:cf:1e:6f:69:40:ec:67:27:7e:a2:8e:66:7d:
bf:b1:ad:54:2c:02:e0:2a:9c:0d:9e:9c:4d:b7:74:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E1:82:7C:1B:B8:53:FD:25:7A:0D:0F:4F:77:2F:B4:B3:B0:F1:C5
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/PeGCfBu4U_0leg0PT3cvtLOw8cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.248.0/21
185.255.8.0/22
193.105.74.0/24
202.22.160.0-202.22.166.255
202.22.168.0/21
IPv6:
2a0c:55c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
62:a8:8f:28:da:f5:13:5e:87:90:aa:5e:6e:f1:5a:df:24:c4:
a9:aa:a0:87:6d:71:c3:62:f8:f4:1d:98:29:56:76:38:7b:6a:
f9:a3:fb:79:95:b6:32:82:f6:38:4f:14:55:57:ce:a1:19:e5:
71:6a:64:9d:25:61:53:a3:c8:98:bd:9b:59:51:5b:80:86:b8:
fc:40:76:29:b0:e2:4c:e0:85:1d:19:aa:04:28:9d:ba:6a:0b:
00:7b:b8:4c:29:f3:ac:31:aa:6e:08:26:d0:35:30:fb:9b:7a:
5d:11:db:a5:87:53:5b:f5:1c:10:80:29:d1:f9:78:ea:18:ee:
d7:ed:c4:31:28:b8:f1:cb:cb:b2:b8:8b:de:02:b7:d1:bf:35:
49:a1:b0:56:cb:38:0f:c7:0e:26:69:7b:38:73:b0:18:bb:28:
ba:38:c4:f4:69:7a:db:c9:4e:44:59:12:d5:50:ce:8f:c4:e7:
80:23:d2:5e:c3:bb:a1:9a:17:6c:6d:04:11:52:15:b9:48:93:
00:2a:3d:f9:47:c2:e2:cc:5a:f6:66:fb:21:7b:09:ae:c9:be:
06:08:50:46:13:0e:4d:88:f7:0f:6b:be:6d:8f:b0:e5:1c:6d:
63:c3:31:d1:2b:ca:33:76:b5:c8:c8:8c:19:c7:a4:f7:4e:d3:
a8:4f:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:46 2026 by rpki-client