Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/PG_mj7isjB910_5qft90gpkrSFw.roa
File: PG_mj7isjB910_5qft90gpkrSFw.roa (raw, json)
Hash identifier: Bnsv31XpCbZ6YlZT0KCPGtgHY8X949Ui1tJL10JOEO4=
Subject key identifier: 3C:6F:E6:8F:B8:AC:8C:1F:75:D3:FE:6A:7E:DF:74:82:99:2B:48:5C
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 01A08A6EBA4B7B59C9790BFE5480FD4FF63C
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/PG_mj7isjB910_5qft90gpkrSFw.roa
Signing time: Thu 10 Sep 2026 08:28:27 +0000
ROA not before: Thu 10 Sep 2026 08:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
129.101.88.0/21 maxlen: 21
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:6e:ba:4b:7b:59:c9:79:0b:fe:54:80:fd:4f:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Sep 10 08:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c6fe68fb8ac8c1f75d3fe6a7edf7482992b485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:8d:bb:e3:c8:1f:ce:85:cd:09:00:57:f4:
cb:fd:a2:d6:46:e4:65:62:ef:85:7a:07:a1:04:3c:
24:d0:17:30:0c:13:c2:de:62:6f:4a:18:84:9d:ad:
eb:a5:9c:4a:22:0a:fa:4f:b0:3f:83:bd:45:89:af:
b0:fa:88:12:d4:9a:ee:e0:ba:1a:1e:c4:a0:f1:00:
f7:92:f7:cf:ed:72:db:07:b9:80:99:9a:91:95:48:
a6:1b:d5:66:9f:44:40:f4:8c:56:0a:81:84:6c:db:
9d:fe:a8:1a:b7:35:e7:61:03:17:77:05:dc:d5:bf:
c9:45:cf:be:f8:4f:1c:2d:10:30:47:3f:82:3f:68:
28:1a:16:5f:f6:f2:55:d7:33:32:de:48:3b:97:25:
46:76:06:2b:53:ca:9b:0b:f4:13:0f:87:1f:eb:b7:
7b:ed:c7:09:70:f9:d6:79:eb:5f:40:72:fa:ae:fa:
a6:2c:14:a1:ff:65:8e:e5:4a:50:5a:32:2d:2a:5c:
0d:c2:7c:7f:b4:3d:74:83:67:30:51:f0:81:9a:46:
c9:22:20:90:70:b6:8a:2e:82:aa:70:f9:c1:dc:ac:
82:27:f3:07:17:89:c4:04:3d:a0:50:cb:e6:d1:cc:
01:ee:fc:bf:7e:03:f1:68:66:66:59:82:b8:a6:ac:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:E6:8F:B8:AC:8C:1F:75:D3:FE:6A:7E:DF:74:82:99:2B:48:5C
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/PG_mj7isjB910_5qft90gpkrSFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
129.101.88.0/21
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
40:dc:8a:63:65:89:76:dd:98:9c:17:dc:4c:74:15:60:a9:4a:
11:13:5e:81:58:5b:b4:81:43:a9:09:4f:6c:7b:43:37:60:b8:
6a:b5:13:f6:98:4c:34:c7:f1:a2:1d:b8:68:cb:48:48:16:68:
90:4e:c8:2a:d0:f7:d6:2b:ce:48:be:69:92:2e:c4:d1:a1:a7:
d7:83:4c:d1:83:1d:56:92:6f:b6:d2:0a:9e:cc:10:1e:67:2e:
b9:60:c5:6b:58:a3:1f:58:f0:d9:8e:82:d1:be:0f:27:91:d5:
de:bb:68:3a:3a:66:d9:d7:7d:19:b7:bd:db:bd:19:a7:f1:43:
2f:de:9d:0d:38:63:a1:52:e4:e3:a9:2f:46:fd:fa:15:58:4f:
43:de:02:92:ac:dd:78:67:d6:d2:16:ae:ee:49:a5:c8:8d:12:
b2:2b:95:90:aa:4a:99:b9:47:1d:a1:41:71:a1:f2:64:68:5f:
44:af:1b:72:41:62:48:0f:38:08:dd:29:2f:d2:9a:72:d5:49:
29:83:0c:ab:fd:ca:16:2a:55:89:3d:23:ce:1e:c6:79:a9:52:
4b:6c:a9:a1:b4:e6:1c:74:7d:96:14:c8:6e:da:4a:f2:68:02:
4e:fc:70:09:18:8d:fc:94:07:db:48:e0:a3:15:0a:48:3a:29:
82:b3:3b:65
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAaCKbrpLe1nJeQv+VID9T/Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTMyNzhlYmY0ZjQ5YjQyNGZiZDRhOWM3MDA3ZDI3NDc2
ZWQzMDcwHhcNMjYwOTEwMDgyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzZmZTY4ZmI4YWM4YzFmNzVkM2ZlNmE3ZWRmNzQ4Mjk5MmI0ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8WNu+PIH86FzQkAV/TL/aLWRuRl
Yu+FegehBDwk0BcwDBPC3mJvShiEna3rpZxKIgr6T7A/g71Fia+w+ogS1Jru4Loa
HsSg8QD3kvfP7XLbB7mAmZqRlUimG9Vmn0RA9IxWCoGEbNud/qgatzXnYQMXdwXc
1b/JRc+++E8cLRAwRz+CP2goGhZf9vJV1zMy3kg7lyVGdgYrU8qbC/QTD4cf67d7
7ccJcPnWeetfQHL6rvqmLBSh/2WO5UpQWjItKlwNwnx/tD10g2cwUfCBmkbJIiCQ
cLaKLoKqcPnB3KyCJ/MHF4nEBD2gUMvm0cwB7vy/fgPxaGZmWYK4pqyflwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFDxv5o+4rIwfddP+an7fdIKZK0hcMB8GA1UdIwQY
MBaAFM0TJ46/T0m0JPvUqccAfSdHbtMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvUEdfbWo3aXNqQjkxMF81cWZ0OTBncGtyU0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvelJNbmpyOVBTYlFrLTlTcHh3QjlKMGR1MHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwQAW+lYAwQD
gWVYAwQCwWpEMAwDBAXZDCADBADZDCQDBADZDCcwDAMEAdkMKgMEBNkMIAMEA9ms
EDANBAIAAjAHAwUAKgBG4DANBgkqhkiG9w0BAQsFAAOCAQEAQNyKY2WJdt2YnBfc
THQVYKlKERNegVhbtIFDqQlPbHtDN2C4arUT9phMNMfxoh24aMtISBZokE7IKtD3
1ivOSL5pki7E0aGn14NM0YMdVpJvttIKnswQHmcuuWDFa1ijH1jw2Y6C0b4PJ5HV
3rtoOjpm2dd9Gbe9270Zp/FDL96dDThjoVLk46kvRv36FVhPQ94CkqzdeGfW0hau
7kmlyI0SsiuVkKpKmblHHaFBcaHyZGhfRK8bckFiSA84CN0pL9KactVJKYMMq/3K
FipViT0jzh7GealSS2ypobTmHHR9lhTIbtpK8mgCTvxwCRiN/JQH20jgoxUKSDop
grM7ZQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:43 2026 by rpki-client