Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa
File: PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa (raw, json)
Hash identifier: a1Y1p5Rfj50JqGUs7MR0i4IkKy2749qtvdCUmfhjfIc=
Subject key identifier: 3F:1B:C3:B4:69:0B:AD:15:1D:05:D4:92:32:4A:F2:29:84:AA:E4:34
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 01A08126613FBE9549AFC46646A168887C5E
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa
Signing time: Tue 08 Sep 2026 13:12:51 +0000
ROA not before: Tue 08 Sep 2026 13:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6775
IP address blocks: 2a12:f380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:26:61:3f:be:95:49:af:c4:66:46:a1:68:88:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Sep 8 13:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f1bc3b4690bad151d05d492324af22984aae434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:91:ca:72:39:c9:e8:91:20:00:60:f3:d3:
d0:9f:31:00:8f:f1:2f:c8:bb:21:61:2b:ee:ac:66:
bc:c5:b8:54:c3:63:57:4e:a5:d4:47:bd:26:6a:cb:
5e:ce:74:e2:42:c4:04:e1:d4:d1:13:66:74:8f:90:
25:b0:46:06:0f:ac:7f:16:1d:04:b8:92:2e:20:27:
6b:52:3a:f5:c9:17:44:f5:16:da:67:fe:86:36:34:
b3:62:9f:9b:fc:94:81:9d:e9:29:3e:c7:d3:fb:25:
e2:e1:0a:64:57:ce:4a:9c:63:aa:d7:a7:05:4f:12:
b6:ea:81:1d:64:32:6c:87:88:eb:d4:73:6f:0c:32:
89:02:5e:d2:7f:43:56:20:c1:6f:e9:80:3e:fa:11:
15:fd:59:51:a7:dc:64:59:3b:cf:42:82:70:a6:66:
58:7a:a7:1f:42:2b:c5:ef:76:dc:e9:1b:34:67:48:
c7:ed:b1:7e:77:e8:d0:cc:d1:72:f3:af:9f:81:6e:
ca:eb:a9:63:10:a4:bc:c6:fa:60:1f:9d:db:9f:85:
39:bc:cb:9d:7c:5f:d1:51:d6:39:b8:4c:ae:ca:ac:
60:0b:97:23:ab:61:29:0f:cc:aa:bb:aa:d6:cc:25:
f4:17:79:dc:54:82:6a:7b:0f:2b:7f:24:30:cc:f4:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:C3:B4:69:0B:AD:15:1D:05:D4:92:32:4A:F2:29:84:AA:E4:34
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PxvDtGkLrRUdBdSSMkryKYSq5DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f380::/29
Signature Algorithm: sha256WithRSAEncryption
16:43:b0:62:d0:cc:d3:8f:ef:a5:9a:32:be:1f:10:fa:ab:07:
c7:e9:ae:c0:1e:4b:36:b4:79:ee:fa:a7:d7:25:36:30:1f:88:
e3:6e:0d:b4:b8:3e:86:01:bb:a2:32:48:46:8e:1e:33:7d:4c:
e5:ad:df:1b:ed:3f:0f:c2:46:1b:0b:73:bc:7d:be:b2:f2:26:
1e:8b:c4:56:0f:34:b2:6c:29:d0:2a:08:34:0c:05:73:a5:05:
99:a7:9a:43:ac:28:af:9f:46:fc:02:bf:9b:15:1d:10:a9:3c:
9a:54:d2:8d:92:53:f4:71:e3:fb:73:24:b8:7e:c4:a7:08:0a:
bd:16:33:79:08:77:c7:9c:ec:2d:87:b9:db:f3:bc:4b:bb:30:
c8:90:05:80:51:70:1e:79:b4:45:6f:f7:d9:2b:c5:5e:28:ec:
f6:a1:65:95:c7:f4:3c:e8:12:99:0c:e4:60:60:23:e2:ca:30:
dc:fc:7d:9f:63:d2:f6:b2:79:76:e0:d8:ab:af:d0:6c:11:ff:
5e:34:4d:c8:7d:37:7b:b6:84:22:c3:64:1e:94:99:a8:ac:a8:
09:cd:49:18:04:fd:6c:9c:da:43:41:54:c1:57:f3:5a:2a:a8:
d7:fb:4f:a8:ae:72:6b:ab:6a:47:92:de:82:fe:e8:38:ed:0b:
23:15:9a:14
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaCBJmE/vpVJr8RmRqFoiHxeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjYwOTA4MTMxMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjFiYzNiNDY5MGJhZDE1MWQwNWQ0OTIzMjRhZjIyOTg0YWFlNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxSRynI5yeiRIABg89PQnzEAj/Ev
yLshYSvurGa8xbhUw2NXTqXUR70masteznTiQsQE4dTRE2Z0j5AlsEYGD6x/Fh0E
uJIuICdrUjr1yRdE9RbaZ/6GNjSzYp+b/JSBnekpPsfT+yXi4QpkV85KnGOq16cF
TxK26oEdZDJsh4jr1HNvDDKJAl7Sf0NWIMFv6YA++hEV/VlRp9xkWTvPQoJwpmZY
eqcfQivF73bc6Rs0Z0jH7bF+d+jQzNFy86+fgW7K66ljEKS8xvpgH53bn4U5vMud
fF/RUdY5uEyuyqxgC5cjq2EpD8yqu6rWzCX0F3ncVIJqew8rfyQwzPQOyQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFD8bw7RpC60VHQXUkjJK8imEquQ0MB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUHh2RHRHa0xyUlVkQmRTU01rcnlLWVNxNURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLzgDAN
BgkqhkiG9w0BAQsFAAOCAQEAFkOwYtDM04/vpZoyvh8Q+qsHx+muwB5LNrR57vqn
1yU2MB+I424NtLg+hgG7ojJIRo4eM31M5a3fG+0/D8JGGwtzvH2+svImHovEVg80
smwp0CoINAwFc6UFmaeaQ6wor59G/AK/mxUdEKk8mlTSjZJT9HHj+3MkuH7EpwgK
vRYzeQh3x5zsLYe52/O8S7swyJAFgFFwHnm0RW/32SvFXijs9qFllcf0POgSmQzk
YGAj4sow3Px9n2PS9rJ5duDYq6/QbBH/XjRNyH03e7aEIsNkHpSZqKyoCc1JGAT9
bJzaQ0FUwVfzWiqo1/tPqK5ya6tqR5Legv7oOO0LIxWaFA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:22:55 2026 by rpki-client