Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcxe-eCOqPTkfkjClKPCsXSlWmA.roa
File: pcxe-eCOqPTkfkjClKPCsXSlWmA.roa (raw, json)
Hash identifier: /TByX4eBiC3NlYm7ILWKXE1nqFQ6qx46eYx62WABI+A=
Subject key identifier: A5:CC:5E:F9:E0:8E:A8:F4:E4:7E:48:C2:94:A3:C2:B1:74:A5:5A:60
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019C567C9E32DB8FFEFF2B2DA16A49175DC2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcxe-eCOqPTkfkjClKPCsXSlWmA.roa
Signing time: Fri 13 Feb 2026 10:12:13 +0000
ROA not before: Fri 13 Feb 2026 10:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 89.34.228.0/24 maxlen: 24
89.34.231.0/24 maxlen: 24
89.38.228.0/24 maxlen: 24
89.40.82.0/24 maxlen: 24
89.42.80.0/24 maxlen: 24
89.42.81.0/24 maxlen: 24
89.42.82.0/24 maxlen: 24
89.42.86.0/24 maxlen: 24
89.43.140.0/24 maxlen: 24
89.43.143.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.47.125.0/24 maxlen: 24
89.47.126.0/24 maxlen: 24
93.113.181.0/24 maxlen: 24
93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:7c:9e:32:db:8f:fe:ff:2b:2d:a1:6a:49:17:5d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 13 10:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5cc5ef9e08ea8f4e47e48c294a3c2b174a55a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:9b:9b:f1:f1:9d:20:01:01:01:4e:7f:8e:
c0:68:90:98:e0:23:aa:b8:94:ed:5e:5c:61:0f:b9:
59:d8:9c:78:2e:f7:a1:ba:d8:be:d2:85:0a:9a:f9:
e3:9e:2b:e3:87:75:bd:fe:8b:33:ec:05:71:15:03:
e8:64:1a:77:d3:0b:af:bf:21:d3:05:ff:4d:a7:28:
d4:59:de:59:ff:1f:ae:df:e3:8f:a2:04:5d:c0:3e:
f3:55:8c:ae:c7:22:a5:45:59:71:2c:2b:36:4f:55:
74:9b:02:e1:90:3b:df:d9:af:a1:c6:9e:8c:2d:d4:
a5:61:7f:1d:d7:23:80:86:f0:0e:d7:c5:f4:ce:2d:
33:f8:88:9c:bd:6c:1a:eb:17:3b:14:3a:56:73:5e:
e8:2c:1e:29:fb:1b:09:ed:35:42:f6:5c:ec:8d:b7:
ba:54:4d:f9:f8:14:39:d9:89:60:5e:cb:a6:ad:9e:
97:7a:57:29:d5:6e:94:04:bf:6d:e4:63:d5:b3:af:
d0:5f:81:ad:d9:17:50:64:b9:92:c8:9d:e1:5b:f1:
60:3f:ee:e0:11:6a:ff:c9:18:a4:3d:09:bd:97:21:
80:fc:80:dd:bd:36:d3:e1:89:a0:ff:d7:4b:df:b5:
e2:e4:28:f2:6f:80:6f:4b:d4:ba:82:56:5e:99:d5:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:5E:F9:E0:8E:A8:F4:E4:7E:48:C2:94:A3:C2:B1:74:A5:5A:60
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/pcxe-eCOqPTkfkjClKPCsXSlWmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.228.0/24
89.34.231.0/24
89.38.228.0/24
89.40.82.0/24
89.42.80.0-89.42.82.255
89.42.86.0/24
89.43.140.0/24
89.43.143.0/24
89.46.3.0/24
89.47.99.0/24
89.47.115.0/24
89.47.117.0/24
89.47.119.0/24
89.47.125.0-89.47.126.255
93.113.181.0/24
93.114.74.0-93.114.79.255
185.101.105.0/24
Signature Algorithm: sha256WithRSAEncryption
31:05:12:0b:81:61:74:0b:2f:0f:77:ce:c6:03:60:78:16:a8:
e4:ba:51:a9:a3:bf:16:99:08:4b:a8:d0:0d:4d:f7:65:53:2c:
fb:fa:84:c9:1a:92:87:1b:92:2d:52:ff:b3:e1:ed:02:35:0c:
46:2d:c3:94:87:ac:04:59:3a:83:67:82:ea:9a:bd:de:af:df:
80:61:51:17:6e:3a:55:bc:d2:6c:fb:67:72:36:8c:f2:c3:75:
9b:ac:d8:9b:46:21:1e:6e:1c:cc:54:87:1a:81:0e:13:43:69:
02:1c:87:1d:ce:71:a4:fb:ee:14:0c:26:d5:f9:c8:d5:07:c0:
69:44:21:de:9f:30:2b:c8:d5:7a:65:9d:96:d3:f0:24:87:7c:
47:8d:33:4f:de:9f:59:f3:95:7b:c1:ab:d3:dc:57:82:35:d2:
85:2e:34:d0:db:b6:9e:57:07:7a:75:c6:5c:55:0b:52:6b:32:
11:f9:b0:ab:50:ba:f9:05:aa:c7:bc:a0:62:67:b4:8b:41:8f:
bd:64:21:4f:b8:7d:7a:5b:1b:39:53:fc:3d:f4:f0:4b:f9:0a:
31:c3:16:eb:45:43:bb:13:44:21:19:e4:d0:39:70:00:0f:01:
6b:77:b8:cf:13:24:db:6c:75:ca:c4:f2:fb:c0:78:02:18:ca:
fe:8f:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:16 2026 by rpki-client