Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PFVc5BAK70p3Vmf86UTReTfUHsA.roa
File: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (raw, json)
Hash identifier: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=
Subject key identifier: 3C:55:5C:E4:10:0A:EF:4A:77:56:67:FC:E9:44:D1:79:37:D4:1E:C0
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01A0A5095520D7FF1E13E45B4975E57692D6
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PFVc5BAK70p3Vmf86UTReTfUHsA.roa
Signing time: Tue 15 Sep 2026 12:27:27 +0000
ROA not before: Tue 15 Sep 2026 12:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216210
IP address blocks: 31.169.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:09:55:20:d7:ff:1e:13:e4:5b:49:75:e5:76:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Sep 15 12:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c555ce4100aef4a775667fce944d17937d41ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:93:82:ab:48:2a:be:6c:db:45:fc:89:8f:
e3:9d:40:aa:1a:f3:92:3f:71:7c:7b:79:e3:de:d4:
19:b0:e9:a7:29:71:e4:98:4f:62:73:60:56:80:d0:
09:e9:44:6f:36:a2:89:30:28:ee:75:34:b4:bd:d2:
03:84:43:bb:df:b1:92:31:8b:de:2b:96:4d:01:5a:
b7:43:18:6f:ce:8b:df:44:47:b0:10:cb:58:39:38:
a5:94:98:0d:05:72:0e:5b:06:c0:dc:02:58:82:92:
50:3b:39:6d:22:fb:60:a1:6a:f9:ab:6e:31:5c:6b:
e8:aa:96:19:6f:cc:74:33:10:18:5c:6f:82:10:d5:
ee:1f:77:98:18:d6:a2:40:c4:3a:10:ae:d1:ea:f7:
f6:97:70:cb:b3:75:32:59:32:ee:d2:99:32:68:b5:
60:03:57:a2:06:a2:59:20:44:36:eb:5c:17:b6:34:
6f:ed:01:29:54:6b:c5:6a:98:f2:c8:cd:ef:bd:a9:
d7:1b:3e:96:0b:ea:75:03:3b:b0:3b:74:ef:0e:58:
33:b0:60:17:4f:f0:2d:8b:44:09:63:bb:2e:a2:7a:
9e:dc:3f:82:cf:cb:35:bd:cd:57:f4:72:6f:61:36:
fa:a7:b6:c3:aa:5f:78:ca:ef:34:bc:38:a9:da:15:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:5C:E4:10:0A:EF:4A:77:56:67:FC:E9:44:D1:79:37:D4:1E:C0
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/PFVc5BAK70p3Vmf86UTReTfUHsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.83.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8a:95:32:19:b7:66:13:a0:d3:04:d8:64:7c:dd:d7:4b:d9:
79:74:ab:be:ff:ee:8b:2a:2f:72:2a:c6:bc:99:40:8d:4e:54:
6c:bc:41:25:af:aa:71:ee:d5:06:86:04:bb:9a:6b:dc:40:21:
e9:3c:b3:f2:e5:13:cc:b1:58:3f:f5:8f:0b:90:76:89:3f:fd:
49:68:6f:9f:a0:af:6a:b4:12:73:4e:02:16:4a:f7:55:61:5e:
50:6f:7c:71:94:02:0d:b0:7c:51:e5:e3:61:2e:44:30:a2:24:
cb:4b:1f:0c:a6:0c:69:1f:7d:ab:78:fb:aa:0e:29:11:23:c6:
77:d0:1c:fb:01:3a:fd:04:8d:39:c7:74:81:a8:b4:48:59:b3:
9a:6f:b4:35:21:f5:ec:38:eb:72:de:7d:26:22:00:18:e3:45:
d5:b4:69:b4:c8:94:8d:03:c4:55:65:3a:12:17:f1:7e:1e:7c:
8b:fd:5a:5a:fb:8d:8e:dc:04:67:17:73:d0:1f:52:ba:ca:f1:
d2:a4:82:53:60:fb:ad:e3:40:f4:37:e8:37:61:1a:9a:64:ca:
eb:30:e8:ce:f1:99:60:0b:f8:c4:64:45:00:95:cc:bd:ee:7f:
96:74:6b:51:14:40:51:50:90:00:38:ab:56:fc:6e:22:8d:7e:
7c:16:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:54:12 2026 by rpki-client