Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pmuKawxcQb_peNOMxSJR4a8d0bE.roa
File: pmuKawxcQb_peNOMxSJR4a8d0bE.roa (raw, json)
Hash identifier: sfVrDBEHdQim1z7uZzXyRt5eee41LzTspIeNKWafFgo=
Subject key identifier: A6:6B:8A:6B:0C:5C:41:BF:E9:78:D3:8C:C5:22:51:E1:AF:1D:D1:B1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A07C4AF2514472DAB28516F5BA695A2375
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pmuKawxcQb_peNOMxSJR4a8d0bE.roa
Signing time: Mon 07 Sep 2026 14:34:41 +0000
ROA not before: Mon 07 Sep 2026 14:34:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 82.108.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:4a:f2:51:44:72:da:b2:85:16:f5:ba:69:5a:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 7 14:34:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66b8a6b0c5c41bfe978d38cc52251e1af1dd1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:c6:aa:10:4f:a8:28:74:2d:14:34:9d:56:
fa:5c:08:96:14:fa:5d:0b:e5:05:21:88:ba:1d:e0:
31:4a:72:df:dc:de:0c:cd:cd:ee:4a:d2:1c:f8:f9:
86:1b:6c:c1:8d:7e:78:de:e4:1d:fd:31:bb:e0:db:
10:76:da:1e:d9:7e:97:90:88:aa:77:48:41:64:ee:
40:40:b0:52:fa:49:d0:f8:e5:1d:8b:b2:b3:0b:55:
38:f8:36:a0:87:8d:4f:85:de:d4:cb:8a:9d:95:2d:
2a:2c:c8:38:dc:21:ba:7a:47:9b:00:4c:89:e1:79:
1c:fb:a3:95:1b:25:85:6f:8e:95:a0:64:0c:1f:55:
f0:c4:fc:83:64:f6:a8:fb:36:bb:1c:06:f2:b1:11:
ba:a5:b0:0b:cc:22:73:04:31:73:d1:41:55:51:7a:
98:4f:e6:af:87:e2:9b:33:32:a8:f5:86:a5:f7:09:
82:69:61:02:02:6d:81:37:04:da:6d:bc:73:ba:05:
fd:60:10:08:97:3e:58:a6:07:34:85:6e:9d:18:63:
69:d5:e8:e0:37:1f:c7:97:37:ba:2f:09:2f:29:5e:
cd:05:69:90:e1:d4:06:fc:51:55:60:04:23:60:34:
d9:fa:b7:41:6a:5e:4e:1a:c7:8e:8a:67:c9:ad:7b:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6B:8A:6B:0C:5C:41:BF:E9:78:D3:8C:C5:22:51:E1:AF:1D:D1:B1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pmuKawxcQb_peNOMxSJR4a8d0bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.128.0/24
Signature Algorithm: sha256WithRSAEncryption
49:26:2b:93:06:ac:a3:ae:88:21:66:28:8c:9c:1a:79:11:d5:
18:fd:fc:74:65:e7:62:c4:e9:0e:07:a4:8d:22:4a:33:6b:f8:
c8:b7:47:ea:0e:b7:12:00:23:82:50:01:23:14:dd:50:f4:49:
7c:86:6b:ad:b2:ab:32:62:a3:16:fa:fb:ff:17:df:ec:c2:c0:
d5:67:2e:37:e5:b1:e3:f9:94:25:50:b9:02:dc:1a:7c:e3:1c:
8b:43:19:1a:a8:00:f9:28:46:82:b3:40:59:a9:ba:df:6a:16:
7f:15:59:7f:26:0a:40:64:61:02:46:43:7d:12:c9:10:2a:47:
f4:4f:ac:0a:4d:f3:fa:53:24:24:3e:00:e9:9e:0d:11:c4:bb:
e6:c6:99:94:eb:f5:b4:b0:75:c1:5a:33:3c:c4:fb:0e:01:a0:
0f:b2:16:b0:a9:11:e4:14:11:e0:30:1c:e0:17:47:41:f7:30:
b7:0b:b6:d5:c0:5e:54:8f:4f:d2:74:30:b9:aa:ff:43:16:1a:
fd:d8:50:c7:7f:5e:64:36:7b:94:7c:c1:7e:e9:30:da:a2:24:
81:6b:56:03:a2:d2:9f:2c:6c:2b:b4:97:c2:bb:a1:9b:2b:73:
28:98:67:98:88:d3:38:5c:e3:d1:a6:ef:27:9a:95:0f:c8:aa:
c3:57:8d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:11 2026 by rpki-client