Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa
File: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (raw, json)
Hash identifier: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=
Subject key identifier: 3D:43:D9:E4:F0:DA:FD:39:E7:34:AE:42:2A:B0:1A:9A:46:C0:F6:A8
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 019D43B91ACF99143CF4B42E7F4F26D1A035
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa
Signing time: Tue 31 Mar 2026 11:48:17 +0000
ROA not before: Tue 31 Mar 2026 11:48:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21150
IP address blocks: 194.8.100.0/24 maxlen: 24
2a01:8180:1000::/36 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:43:b9:1a:cf:99:14:3c:f4:b4:2e:7f:4f:26:d1:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Mar 31 11:48:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d43d9e4f0dafd39e734ae422ab01a9a46c0f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:02:ec:a4:e6:ae:fc:22:e3:08:8e:59:81:
78:10:5b:a7:23:2f:7d:5e:d4:cd:e9:c3:0f:ba:a9:
cb:1a:c1:98:bf:79:ea:6a:e7:97:29:a2:78:6e:60:
43:a4:01:d4:9b:25:e0:3a:3e:20:f2:8c:de:70:1b:
09:64:86:2c:9d:35:b1:c4:f9:f4:6b:d4:72:d1:36:
e4:ae:f0:96:19:cb:85:3a:2d:88:98:83:6e:10:9b:
8f:ea:c4:97:6f:41:ab:4d:84:af:37:fe:38:ae:c0:
c4:a1:f3:40:c3:95:7f:c6:0f:de:b6:88:17:48:6b:
19:d6:c0:04:3a:2e:4d:2c:7e:60:93:e6:45:ce:23:
3e:4f:20:d2:75:d6:3a:d9:b9:f0:41:ea:84:0f:73:
4c:4d:de:35:b4:a3:6f:e1:4a:13:20:d2:37:b0:18:
2f:e7:e7:8e:99:1c:e7:c9:06:30:57:e5:08:43:6e:
da:3b:96:18:cb:b2:89:12:e1:ad:38:35:a8:00:e4:
bc:06:6c:b6:cd:8f:b7:eb:ba:59:4f:12:b4:da:37:
98:f6:ed:1d:d9:50:a5:4d:36:a3:27:58:6f:fb:23:
a5:47:b3:50:8a:f0:b3:5a:65:f4:4e:4a:96:f9:bc:
e7:c6:b2:8e:21:8c:0d:79:35:15:ec:c5:c7:01:0d:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:D9:E4:F0:DA:FD:39:E7:34:AE:42:2A:B0:1A:9A:46:C0:F6:A8
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.100.0/24
IPv6:
2a01:8180:1000::/36
Signature Algorithm: sha256WithRSAEncryption
16:95:b9:22:73:60:6f:bc:5a:9c:d6:c5:b4:78:89:a1:db:9c:
bb:cc:89:dc:9a:8f:b3:b3:67:91:1c:65:ae:50:a8:65:b0:ac:
33:7b:50:43:6b:c0:de:7e:96:d9:58:06:66:d4:18:55:97:f7:
f8:ac:0d:c8:c5:ab:24:28:93:ee:7d:15:83:1a:c7:97:87:8e:
ab:75:4c:81:aa:0b:8c:46:cf:d9:db:2f:3b:9a:52:1b:cd:26:
f2:e2:6e:59:db:d5:49:f6:2f:d3:08:28:35:a7:13:7a:61:1e:
29:ed:51:1b:84:49:b5:c2:29:01:14:42:3a:d3:80:ea:ea:57:
69:be:29:00:c1:53:4c:77:25:7b:ea:45:f1:4e:11:ab:ca:79:
6c:3d:0d:71:b0:88:8c:5e:49:a8:cd:58:34:a8:84:8e:fe:1b:
23:1e:e1:9b:14:15:cb:be:63:9c:f6:68:40:33:7c:30:8a:65:
3d:d6:5b:e6:27:b9:b1:c1:12:c7:f0:85:1e:73:42:03:c2:ea:
c5:ff:65:96:aa:c4:e9:b6:38:32:19:21:e2:c6:dc:a2:fd:e4:
15:d6:60:92:f6:3f:c2:70:1a:6d:c9:f3:ea:64:c5:aa:57:15:
ff:f1:59:65:a7:3b:60:d5:ce:24:79:74:ef:59:a4:54:71:da:
7e:56:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:45 2026 by rpki-client