Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PxuHCqA2WZpKQGRy7qDcV8t82No.roa
File: PxuHCqA2WZpKQGRy7qDcV8t82No.roa (raw, json)
Hash identifier: 4DVgAszJKR2ydoxGsXvM6BqARW5jWJ/qTg92/Y7HLwY=
Subject key identifier: 3F:1B:87:0A:A0:36:59:9A:4A:40:64:72:EE:A0:DC:57:CB:7C:D8:DA
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 01A0AE1FB68A9B1D0832E4A8F35B1F524601
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PxuHCqA2WZpKQGRy7qDcV8t82No.roa
Signing time: Thu 17 Sep 2026 06:48:29 +0000
ROA not before: Thu 17 Sep 2026 06:48:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 80.240.88.0/21 maxlen: 24
80.240.88.0/24 maxlen: 24
80.240.90.0/24 maxlen: 24
80.240.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:1f:b6:8a:9b:1d:08:32:e4:a8:f3:5b:1f:52:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Sep 17 06:48:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f1b870aa036599a4a406472eea0dc57cb7cd8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:92:7c:67:b0:3b:5b:53:92:9a:04:51:74:
f9:2d:36:67:58:73:6c:fd:6a:f2:4d:5c:26:c2:d3:
38:3e:5a:a7:f9:69:f4:89:3d:0d:9a:aa:32:0e:b7:
be:0c:87:4d:02:d4:0a:66:51:8b:7b:00:c6:ca:51:
07:19:8c:2d:8a:e8:21:08:49:6b:8c:40:e1:0a:9a:
c1:82:ce:84:63:b4:a6:58:21:89:e2:5e:04:a1:24:
ce:28:8e:90:70:21:3e:e3:e9:7e:8d:86:96:8e:43:
33:e7:91:9d:9d:07:23:53:d1:e1:23:23:d1:e4:4b:
cf:f2:25:1c:c6:a8:f3:61:06:4f:b5:02:c3:c2:1a:
d8:d7:a0:1d:e5:19:90:05:e7:33:2d:21:a3:d1:73:
01:5f:b8:4d:da:a7:27:f0:4a:ba:f0:4a:d8:d3:a3:
7e:fb:b0:d7:f1:34:2f:bf:43:c8:3f:4c:88:0f:b0:
59:48:0c:26:7b:f5:fe:89:be:60:d2:ea:be:a1:77:
dd:f6:1c:d0:43:fa:b2:2a:46:4f:b7:8d:48:c9:fe:
f1:1d:34:06:02:75:49:1f:d3:ee:19:25:e1:3a:90:
20:8e:80:b4:04:13:7c:e9:61:9b:cb:e2:27:f7:a6:
ab:ba:16:9c:7d:4a:3b:47:78:31:dc:da:c4:52:e1:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:87:0A:A0:36:59:9A:4A:40:64:72:EE:A0:DC:57:CB:7C:D8:DA
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PxuHCqA2WZpKQGRy7qDcV8t82No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/21
Signature Algorithm: sha256WithRSAEncryption
46:dd:16:8f:4e:3a:3e:20:ea:34:33:9d:1d:70:e9:8a:ff:6c:
45:fa:39:28:28:0e:03:94:f9:46:56:b6:7f:bc:40:ae:2f:78:
97:a1:51:94:2e:4f:e8:c8:3f:a1:30:a9:ca:7e:2a:6c:23:d5:
fe:0c:d4:6d:7c:0e:6f:9b:85:c4:2c:34:22:86:9c:61:93:67:
21:37:8c:06:60:03:72:c2:9e:95:a8:7d:fc:9e:82:35:0b:95:
3d:77:b1:06:c1:62:33:35:37:6d:4a:d2:3c:1e:44:6e:ba:a7:
a1:cd:b8:96:c7:0f:a6:5a:2a:80:74:2c:14:a6:4c:ff:e6:6b:
dd:f8:e3:69:a0:39:b0:7a:6f:86:81:7b:46:6b:db:9b:2a:bd:
43:f8:81:3d:3e:a8:22:64:9b:10:72:ff:24:a7:59:a9:97:5a:
87:ef:f7:d5:86:e0:0c:5f:0b:bb:03:df:ff:4a:74:86:6c:ae:
89:6a:bd:6a:94:02:47:ce:87:24:54:62:cd:98:b3:c1:4a:61:
76:9e:c9:f7:85:e5:6c:b2:93:17:35:4b:f8:fc:23:14:92:4c:
f8:5b:3f:7e:5a:9c:c9:25:18:4c:39:c5:cd:32:25:a2:20:c4:
be:d1:85:cc:9b:7d:95:c5:fe:b1:d2:1c:65:b3:48:20:97:a7:
4a:0f:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:13:53 2026 by rpki-client