Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/PygRDMaEgXvgyKAEePuEoN_NztY.roa
File: PygRDMaEgXvgyKAEePuEoN_NztY.roa (raw, json)
Hash identifier: W4mQSmac8L1zvb5djZ/uYoHmVInKJKL8/ENtPUuMeGY=
Subject key identifier: 3F:28:11:0C:C6:84:81:7B:E0:C8:A0:04:78:FB:84:A0:DF:CD:CE:D6
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 01A02BA6822A6A2EE8500A4460A2113B2596
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/PygRDMaEgXvgyKAEePuEoN_NztY.roa
Signing time: Sat 22 Aug 2026 22:45:27 +0000
ROA not before: Sat 22 Aug 2026 22:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216038
IP address blocks: 94.45.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2b:a6:82:2a:6a:2e:e8:50:0a:44:60:a2:11:3b:25:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Aug 22 22:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f28110cc684817be0c8a00478fb84a0dfcdced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:19:eb:4c:8c:67:9b:a2:5e:cb:c5:85:19:
fc:5b:cb:d9:f1:91:ef:26:43:e6:2d:38:f8:2c:fc:
82:44:5a:18:a9:e9:a6:4b:2c:d3:91:67:84:84:3f:
90:94:c4:f8:4d:c2:68:e7:ab:69:6a:f8:f9:64:4d:
12:4e:d9:02:8c:7f:85:95:1d:e0:3b:6f:9e:f4:a4:
fc:3c:e8:80:99:67:76:55:57:58:e7:90:7c:b3:ea:
8d:5c:a1:95:02:ec:03:ec:d3:25:c5:06:aa:f0:ca:
cc:96:f7:63:bc:12:31:24:90:fe:fb:93:2a:c1:3e:
77:40:49:d9:3d:98:2a:5f:96:a8:cb:26:0a:1d:e8:
37:41:24:64:97:8c:75:34:ea:93:00:80:20:37:0a:
b6:06:07:d2:1d:dd:78:a2:7b:75:d4:fe:81:c2:60:
5f:d4:fb:6e:85:43:6a:ee:ca:42:57:22:74:64:12:
95:74:cd:57:10:e7:94:fe:39:bb:01:2b:53:06:38:
d9:96:c7:a9:3a:0f:a2:81:bc:32:c6:d0:c1:cc:4c:
ba:5b:25:52:d7:16:d8:63:57:a6:10:9f:b5:34:33:
41:e7:ea:17:cb:b5:d7:32:aa:77:70:b7:f9:30:50:
0b:df:ad:8d:e4:1f:38:48:f4:0a:ed:2c:1e:7f:27:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:28:11:0C:C6:84:81:7B:E0:C8:A0:04:78:FB:84:A0:DF:CD:CE:D6
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/PygRDMaEgXvgyKAEePuEoN_NztY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
20:60:06:2c:92:73:d3:7d:53:9f:d4:86:25:d1:0f:05:6c:e0:
ae:4c:fb:54:63:4d:6e:70:3f:db:f5:a1:92:3a:48:4e:2e:f4:
0d:3c:a9:a7:b1:43:e6:32:fb:d0:ed:44:1c:4e:9b:97:7f:13:
50:f8:37:58:1b:97:78:56:ac:e8:ca:45:43:80:6a:96:b8:fb:
bc:f9:5f:ab:59:ed:68:3c:0b:1a:e0:e5:16:97:5d:d4:91:19:
4c:b8:f7:3b:79:55:27:b6:13:21:26:6a:db:02:02:4c:8c:23:
56:13:b2:32:97:6d:eb:19:1f:9b:73:2a:98:3a:18:df:01:22:
2e:94:63:3f:8d:26:54:f9:90:72:c6:5b:f5:08:a9:0f:2a:69:
b4:cd:0e:90:10:80:c8:ad:7f:24:36:b7:12:f2:20:60:50:6d:
55:0b:3f:8e:a1:e9:33:cd:22:da:f5:e1:51:5f:50:f9:93:6d:
8c:e3:52:92:cf:3e:71:82:7e:a3:77:ad:0e:0f:5f:b3:2a:97:
b8:5d:f6:a2:9b:75:c9:0e:3c:e9:ae:d6:74:7b:94:35:59:c3:
ec:6f:b1:42:67:16:28:1f:09:e6:ad:14:97:3b:79:d4:cb:3f:
8c:6a:2a:bb:f4:e1:cd:20:27:00:c2:00:2f:7f:9e:4c:36:49:
83:a6:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:26 2026 by rpki-client