Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PcjpdASxy-PXfpCa5Iw44jGBNsA.roa
File: PcjpdASxy-PXfpCa5Iw44jGBNsA.roa (raw, json)
Hash identifier: YkrM5S70bQAB+8z8kfrVv3FtxoEmblF4mv21GJCizA4=
Subject key identifier: 3D:C8:E9:74:04:B1:CB:E3:D7:7E:90:9A:E4:8C:38:E2:31:81:36:C0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F9345627DAE1CDBF6312B7FF3411A810D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PcjpdASxy-PXfpCa5Iw44jGBNsA.roa
Signing time: Fri 24 Jul 2026 08:37:05 +0000
ROA not before: Fri 24 Jul 2026 08:37:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 81.168.96.0/24 maxlen: 24
82.152.9.0/24 maxlen: 24
82.152.65.0/24 maxlen: 24
82.152.118.0/24 maxlen: 24
82.152.219.0/24 maxlen: 24
82.152.244.0/24 maxlen: 24
82.153.105.0/24 maxlen: 24
82.153.106.0/24 maxlen: 24
82.153.107.0/24 maxlen: 24
82.153.108.0/24 maxlen: 24
82.153.124.0/24 maxlen: 24
82.153.230.0/24 maxlen: 24
82.153.237.0/24 maxlen: 24
212.38.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:45:62:7d:ae:1c:db:f6:31:2b:7f:f3:41:1a:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 24 08:37:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dc8e97404b1cbe3d77e909ae48c38e2318136c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:e7:9e:fa:6e:64:0e:76:01:32:b2:59:fc:
d1:3e:87:86:e2:3b:ed:e2:4f:8e:b3:74:34:e5:ec:
01:af:87:71:c5:08:07:a4:36:21:22:59:41:52:00:
eb:56:00:59:c9:a0:e3:b0:16:04:7d:e9:04:ad:fd:
e1:73:80:3d:b1:df:02:ee:d4:23:be:49:40:9b:4a:
bc:7c:e3:fe:aa:f4:3e:fd:b3:11:0b:38:a2:1b:7e:
5c:a0:c4:9a:2f:15:dc:ca:90:21:ee:07:f6:32:8c:
8f:b0:56:14:4a:73:d0:29:93:49:04:2b:25:b1:a3:
d2:60:a6:56:ec:2f:09:f1:5e:f3:4e:c5:d3:df:f0:
0f:8b:61:7d:44:78:e0:da:70:a9:d4:28:1d:59:6d:
6a:63:1f:26:4a:a8:04:3e:86:06:3a:8e:94:54:44:
40:78:61:99:de:94:4e:ff:5e:41:8b:45:a0:c2:3b:
e5:2f:50:ce:d0:cd:e3:e9:a8:f9:fe:5d:62:5c:e7:
33:0f:56:e3:44:b4:a8:9a:33:5e:38:a7:47:42:4e:
a3:cf:ac:50:64:79:2d:74:48:7e:ae:37:ab:2c:d8:
fe:4b:1d:c1:b6:50:64:1b:9b:4d:66:1a:85:ac:66:
db:f5:79:17:98:35:c2:19:e3:79:b0:5e:cb:14:45:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:E9:74:04:B1:CB:E3:D7:7E:90:9A:E4:8C:38:E2:31:81:36:C0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PcjpdASxy-PXfpCa5Iw44jGBNsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.96.0/24
82.152.9.0/24
82.152.65.0/24
82.152.118.0/24
82.152.219.0/24
82.152.244.0/24
82.153.105.0-82.153.108.255
82.153.124.0/24
82.153.230.0/24
82.153.237.0/24
212.38.79.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f7:c0:e4:38:c8:f8:40:7d:81:9e:3c:60:72:50:5c:dc:bf:
b3:11:87:53:d9:6b:f5:f6:b5:70:3a:55:b2:25:77:93:90:02:
4b:2e:79:50:11:ad:13:dc:b3:4d:3f:32:c2:04:f5:9e:05:23:
30:3d:56:ea:14:8a:35:d4:97:47:a4:14:55:5a:65:0b:65:8b:
ef:9c:33:9b:24:28:8d:e1:12:6a:de:4c:0a:31:af:12:59:0b:
01:80:5f:a5:39:0d:a2:73:ca:df:c6:cd:bc:9a:35:61:96:b9:
1c:16:7d:cd:69:f1:84:a8:e4:df:23:02:04:17:03:b3:38:46:
65:49:ab:95:a5:94:1c:b1:37:dd:04:10:6b:a9:5d:30:60:ce:
ad:bf:08:86:f8:e0:20:ea:72:6d:f8:96:1d:b4:ad:6b:71:03:
2a:c9:ae:e9:4b:85:a2:42:d2:24:f2:e5:a6:da:31:97:b1:dc:
ba:62:dc:79:3c:59:a1:6f:7a:f2:f0:ea:29:99:04:5b:25:c7:
7c:0f:2a:7c:45:0a:91:d3:f2:e7:7a:c0:80:ee:0e:2c:26:6a:
9c:dd:42:89:89:a7:a7:81:11:20:ee:a9:c3:a8:39:3f:55:09:
5f:b5:78:f9:f9:b8:a3:19:e9:0c:07:23:1c:b5:ee:4c:1f:3e:
58:8f:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:40:11 2026 by rpki-client