Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/PhRLEQ5RmagEHDmVoUljrjsLsVk.roa
File: PhRLEQ5RmagEHDmVoUljrjsLsVk.roa (raw, json)
Hash identifier: s2VtpPFk7/5RUbGC4ShrAyXhlBKbrG9OC8BtEAOOjmc=
Subject key identifier: 3E:14:4B:11:0E:51:99:A8:04:1C:39:95:A1:49:63:AE:3B:0B:B1:59
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 01A0D4C71E3D0504E6714F0EAC5EA3B8FA71
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/PhRLEQ5RmagEHDmVoUljrjsLsVk.roa
Signing time: Thu 24 Sep 2026 18:56:54 +0000
ROA not before: Thu 24 Sep 2026 18:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34700
IP address blocks: 5.255.160.0/20 maxlen: 20
31.202.0.0/16 maxlen: 20
46.160.64.0/18 maxlen: 21
79.171.120.0/21 maxlen: 22
82.117.247.0/24 maxlen: 24
82.117.248.0/22 maxlen: 23
85.90.222.0/24 maxlen: 24
178.165.0.0/17 maxlen: 20
185.147.96.0/22 maxlen: 22
2a00:1210::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:c7:1e:3d:05:04:e6:71:4f:0e:ac:5e:a3:b8:fa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Sep 24 18:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e144b110e5199a8041c3995a14963ae3b0bb159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:75:0d:50:30:bb:fa:2e:b8:bd:db:65:41:
43:9b:01:b3:fe:84:51:aa:f8:9f:b4:4a:1d:8d:ec:
57:17:78:02:6e:88:2f:80:81:44:2d:61:39:36:26:
6c:6e:73:c7:de:8b:75:ee:9f:0d:aa:e5:f1:b9:16:
ff:cb:45:c1:b9:1e:e0:1d:91:9f:46:97:30:d0:c1:
37:6c:1c:15:77:fe:d7:e6:eb:b9:83:cc:0f:a6:1b:
2c:f3:09:39:fc:08:12:93:1f:5d:e7:81:d8:25:26:
f7:b6:dd:9c:a2:6c:a4:84:a2:06:84:36:52:d3:9a:
1e:a5:78:f6:6c:22:48:2b:5d:d4:42:96:85:97:77:
0f:14:bf:65:b3:04:df:5c:58:79:fe:e3:23:11:e1:
14:55:05:f5:57:28:2b:22:79:6c:5d:b4:4e:eb:33:
85:85:49:1c:d0:57:bf:bd:97:29:b7:cd:eb:29:7b:
05:81:43:cb:01:f9:a6:af:90:53:be:e1:94:8b:e5:
7b:7f:53:4d:cd:64:52:fe:99:23:e1:6a:f1:ec:84:
fe:9c:78:ba:18:b0:5a:26:88:0e:0c:91:80:eb:9a:
d2:44:8c:95:68:19:11:ac:d5:4f:12:a9:e1:e9:aa:
06:01:37:39:40:a0:f4:a2:78:26:03:45:4d:fd:3f:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:4B:11:0E:51:99:A8:04:1C:39:95:A1:49:63:AE:3B:0B:B1:59
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/PhRLEQ5RmagEHDmVoUljrjsLsVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.160.0/20
31.202.0.0/16
46.160.64.0/18
79.171.120.0/21
82.117.247.0-82.117.251.255
85.90.222.0/24
178.165.0.0/17
185.147.96.0/22
IPv6:
2a00:1210::/32
Signature Algorithm: sha256WithRSAEncryption
11:2c:45:0f:7e:4e:1b:0c:97:8f:71:db:f6:1d:94:1a:e2:9c:
a6:9e:4e:e6:cb:d4:e9:9c:4e:1d:92:8a:06:ce:67:17:d2:26:
af:ec:5f:d3:40:de:1d:d4:89:dd:a5:a7:42:fa:9f:8b:e3:63:
05:9b:9a:30:06:22:ca:a3:3b:b3:2f:d2:59:c3:fe:05:7b:cf:
92:c8:a6:2a:0c:05:c3:b9:a5:8d:7e:13:41:b5:38:0f:8b:fb:
ee:45:aa:8c:5c:75:88:97:3b:a0:cb:a7:0b:50:e3:77:a0:ee:
ad:56:4c:56:a8:5a:46:21:58:ff:8d:48:44:80:cc:fc:ae:f5:
af:69:54:14:eb:36:31:94:34:31:ac:96:2c:3a:61:23:37:67:
2e:5d:7d:60:d3:a6:8f:22:12:8b:dd:1b:a1:a7:b2:21:3b:c6:
f9:f6:e0:1c:7d:65:6f:34:b4:c4:24:42:5b:36:94:1d:1c:3d:
e1:86:5a:b8:7a:a4:bf:f3:da:d9:59:ce:bd:21:db:74:6b:14:
6a:ff:47:5d:66:f7:e4:8b:42:95:a9:24:3a:7b:86:41:63:b8:
29:0e:98:be:08:9b:a3:d1:51:a6:1b:56:97:b1:1c:31:9f:cd:
82:4c:82:f7:f1:9f:66:3e:ea:e5:08:3b:04:4c:92:df:6b:e0:
4c:75:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:42:44 2026 by rpki-client