Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PFUFE0gzwnYRzY10fQzC1xYcbeg.roa
File: PFUFE0gzwnYRzY10fQzC1xYcbeg.roa (raw, json)
Hash identifier: DynTjsvzBuXfJt1NROLp7wMH90TQRbhEuuvnJdUmzyA=
Subject key identifier: 3C:55:05:13:48:33:C2:76:11:CD:8D:74:7D:0C:C2:D7:16:1C:6D:E8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D692450B183D9CEF0793E842047CAA363
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PFUFE0gzwnYRzY10fQzC1xYcbeg.roa
Signing time: Tue 07 Apr 2026 18:11:20 +0000
ROA not before: Tue 07 Apr 2026 18:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 193.168.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:24:50:b1:83:d9:ce:f0:79:3e:84:20:47:ca:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 7 18:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c5505134833c27611cd8d747d0cc2d7161c6de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:d2:da:0c:2a:a9:80:a9:54:96:cf:f4:71:
ca:7b:6a:60:d9:73:81:05:04:2b:ee:9b:8a:c5:40:
ba:38:6a:b0:e2:18:1c:a7:b1:ff:5a:91:b5:1a:44:
fd:cc:1a:54:c2:34:99:59:48:78:02:f6:7c:ab:d4:
11:3e:b4:f1:d6:61:51:14:b3:fa:89:fd:1e:d3:09:
19:18:a9:ab:ae:64:8a:57:43:dd:4f:07:ed:f1:1a:
06:ef:90:8e:63:b5:7f:4e:38:82:47:ba:53:97:6f:
95:c1:b5:67:88:13:96:82:e1:5d:11:83:be:52:f8:
6c:40:03:9e:2b:9b:97:19:a4:1b:d2:f4:dc:ef:b6:
1b:a6:38:90:d6:b0:73:bf:9f:5a:ce:8b:3f:ea:ec:
30:70:73:44:98:ae:8a:91:75:f1:6c:cb:30:d3:aa:
b6:3f:57:1b:71:c6:ea:97:dd:df:1e:a1:d2:5f:e2:
b2:3f:59:f1:ea:82:6f:eb:cc:d6:dc:13:16:b7:a8:
d6:36:6a:54:3a:ed:d5:b7:31:83:da:45:97:83:0a:
d0:7b:de:9c:07:63:4e:ad:47:10:e8:37:cd:23:1c:
be:69:24:da:76:7d:c3:99:30:3e:62:a3:9e:fd:14:
3b:36:e4:00:f0:7a:db:1d:34:ca:39:75:ac:5a:ff:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:05:13:48:33:C2:76:11:CD:8D:74:7D:0C:C2:D7:16:1C:6D:E8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PFUFE0gzwnYRzY10fQzC1xYcbeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c6:d1:52:47:38:8c:2f:31:0f:a0:c6:08:4f:8a:a2:0d:d9:
23:c5:89:28:18:17:c3:4f:a1:c7:ed:96:51:08:29:ab:92:f3:
fe:14:a6:11:a2:de:34:79:9e:01:06:70:9b:a9:95:d4:9e:2a:
6d:f0:a9:0a:0b:8a:6c:2f:8c:30:5c:58:fe:ab:65:1c:d1:a6:
8d:2c:9b:dd:df:ca:c0:31:02:14:97:8d:c9:eb:d6:bb:38:40:
80:f8:9d:ef:67:47:d5:42:29:80:7a:f2:72:cc:b6:a4:4d:89:
52:80:5e:08:81:1d:f1:16:29:6b:ec:bf:65:5c:04:ee:40:27:
cd:2a:c1:8b:34:aa:77:af:c4:ba:33:89:7e:7c:61:22:83:b0:
4a:ee:5c:04:64:04:92:d0:a8:a2:00:4f:a0:52:fc:43:f6:6a:
8a:e6:30:08:9b:c2:3f:c7:f3:4d:01:58:b2:8d:78:2c:8d:75:
66:c2:f3:b8:75:69:eb:01:2d:78:bb:88:e2:7a:5a:ed:de:f9:
45:74:11:36:b0:36:f3:a8:c3:c7:fa:6e:3f:44:fe:fb:85:27:
9a:c2:34:f6:c4:d0:62:57:35:47:98:d1:ee:ae:09:e5:c4:34:
c3:3a:4b:50:db:af:41:eb:a7:8d:a7:25:99:e5:d4:3d:f4:e9:
85:75:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:05 2026 by rpki-client