Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/PgUrSIC9VZIEAZAbzS3jonr68QU.roa
File: PgUrSIC9VZIEAZAbzS3jonr68QU.roa (raw, json)
Hash identifier: 9aI4vQahlWjZFs2Tm+F0vRoH/2f981aEB9UaeXyLxMc=
Subject key identifier: 3E:05:2B:48:80:BD:55:92:04:01:90:1B:CD:2D:E3:A2:7A:FA:F1:05
Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial: 019E92C8BEACEA3530C81D1E392C64EA41B9
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/PgUrSIC9VZIEAZAbzS3jonr68QU.roa
Signing time: Thu 04 Jun 2026 13:18:09 +0000
ROA not before: Thu 04 Jun 2026 13:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34740
IP address blocks: 89.38.48.0/24 maxlen: 24
89.38.49.0/24 maxlen: 24
89.38.50.0/24 maxlen: 24
89.38.51.0/24 maxlen: 24
185.69.240.0/24 maxlen: 24
188.215.144.0/20 maxlen: 20
2a03:32e0::/32 maxlen: 48
2a03:32e0::/48 maxlen: 48
2a03:32e0:1::/48 maxlen: 48
2a03:32e0:2000::/38 maxlen: 48
2a03:32e0:4000::/38 maxlen: 48
2a03:32e0:6000::/38 maxlen: 48
2a03:32e0:8000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:c8:be:ac:ea:35:30:c8:1d:1e:39:2c:64:ea:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Validity
Not Before: Jun 4 13:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e052b4880bd55920401901bcd2de3a27afaf105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:d0:e5:f4:7f:cc:73:7d:80:a4:28:0b:9b:
9c:d9:51:12:84:e8:d5:55:2c:37:c7:c1:6b:39:2d:
5e:4a:06:bb:7e:7b:16:20:5f:fd:bf:35:4c:76:04:
0d:a5:be:24:49:73:fd:3b:da:db:24:0b:c9:1a:9e:
ee:82:7c:75:f5:20:0d:ad:d4:33:14:56:d7:d4:73:
e9:8c:83:8a:da:63:7f:5d:0d:63:73:75:4e:fe:9b:
a4:e4:c3:45:2d:1a:3b:97:09:81:b9:ca:33:11:5b:
1b:0c:a5:8d:6f:07:d1:f5:de:a9:7a:f8:4a:f4:4c:
e4:b6:2b:35:84:90:cc:3f:fe:ab:da:00:31:0a:28:
e0:85:a4:19:9c:92:e8:7b:45:50:22:a6:41:37:52:
48:e8:26:11:e3:59:1d:28:fa:a2:23:42:da:89:a3:
a4:98:94:b7:e2:dc:da:ab:b6:c5:6a:95:b7:2c:b8:
c6:d6:d7:33:91:19:e3:78:2e:5a:7f:d1:ff:62:f5:
09:d7:3e:91:51:d1:ee:3b:39:d7:3b:39:0f:2e:ee:
bc:df:a8:8a:c8:58:0e:f8:af:22:85:43:b9:fd:0e:
28:3a:f1:40:b0:61:b5:d4:8c:2e:36:cc:48:d9:76:
19:6a:e9:2f:7b:d8:1d:19:10:22:8a:74:8b:0d:1d:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:2B:48:80:BD:55:92:04:01:90:1B:CD:2D:E3:A2:7A:FA:F1:05
X509v3 Authority Key Identifier:
keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/PgUrSIC9VZIEAZAbzS3jonr68QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.48.0/22
185.69.240.0/24
188.215.144.0/20
IPv6:
2a03:32e0::/32
Signature Algorithm: sha256WithRSAEncryption
79:2a:41:51:3a:69:a0:ca:54:55:be:92:86:40:d1:c5:1a:b3:
5d:83:71:e0:f7:72:c4:53:06:c1:80:e9:7a:21:c5:d9:2e:0f:
64:27:0c:48:3d:d9:7c:83:f4:84:20:16:88:d4:79:af:e0:10:
ed:d0:af:80:d5:c9:55:e1:40:07:49:5d:f6:e8:ec:3e:19:14:
94:9f:a2:81:5d:26:5b:f5:07:77:fa:d3:7e:b1:c3:81:c4:44:
da:5b:78:d6:67:76:3e:c7:2d:54:3f:0a:53:ec:a3:e6:fa:d8:
d6:2d:23:03:90:07:52:e9:2b:a9:e3:d6:0a:2d:5a:51:6b:9c:
51:37:6b:66:23:e5:1e:e8:da:57:a7:97:e8:02:71:e8:e7:9f:
92:9c:f7:4e:ab:c2:e2:24:c6:f4:3c:49:0e:84:32:00:2f:8b:
b2:b1:7e:ae:25:ab:40:00:51:77:7a:71:b2:22:86:2c:eb:23:
f0:c4:f9:88:23:2d:2b:df:13:db:12:41:d3:7e:33:13:81:37:
cc:49:c3:7d:70:39:c1:b4:9f:eb:73:f7:b5:66:c7:06:ee:40:
d6:bf:81:5b:04:e9:c0:21:09:d2:eb:fd:f8:39:2d:27:a9:2d:
d3:45:82:32:bc:14:18:ed:bd:87:c7:56:2d:95:66:cb:8e:e3:
50:4e:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:05:40 2026 by rpki-client