Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/PDGpMhI2hhzaEunrKmCMvh1sj_o.roa
File: PDGpMhI2hhzaEunrKmCMvh1sj_o.roa (raw, json)
Hash identifier: QUb67JZzKC8hODXF/OgGrllY6z+k5+rpZer5JCC+7YA=
Subject key identifier: 3C:31:A9:32:12:36:86:1C:DA:12:E9:EB:2A:60:8C:BE:1D:6C:8F:FA
Certificate issuer: /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial: 019D86D243E908EB58A3CC775527C76CAA4C
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/PDGpMhI2hhzaEunrKmCMvh1sj_o.roa
Signing time: Mon 13 Apr 2026 12:30:20 +0000
ROA not before: Mon 13 Apr 2026 12:30:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201023
IP address blocks: 147.78.231.0/24 maxlen: 32
185.32.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:d2:43:e9:08:eb:58:a3:cc:77:55:27:c7:6c:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Validity
Not Before: Apr 13 12:30:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c31a9321236861cda12e9eb2a608cbe1d6c8ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:fb:87:0b:db:8f:52:a6:d5:82:7b:14:db:
73:43:31:68:a9:4b:2f:8a:44:ba:f4:e6:ba:dd:8f:
1a:61:36:85:74:11:35:5d:a1:0c:30:aa:93:5f:3d:
72:47:4a:ad:3d:39:5f:42:4f:b7:06:35:5a:06:64:
da:06:44:a3:be:97:44:9b:f5:57:28:68:c3:ad:39:
37:8f:4c:2a:d0:75:06:20:3f:8f:00:0b:75:8c:fe:
0f:53:ed:91:a7:d5:96:23:41:11:e9:e1:59:ad:da:
f6:42:71:d6:4a:b8:f4:ef:3a:8c:60:cc:76:37:68:
b0:9f:42:5d:ed:8b:11:b9:9d:93:9a:8a:e9:15:1a:
65:bb:3a:1b:55:d6:66:50:3a:18:ac:9c:25:a9:58:
94:d2:d2:80:04:c7:36:22:9a:32:dd:cd:ae:9e:d0:
86:ba:77:97:34:0d:c6:99:cc:50:e7:c7:e3:ec:d5:
1b:b6:2a:83:99:22:e7:6c:ea:a1:08:f0:c5:28:e0:
68:d3:bf:14:d6:2a:2f:48:5d:70:91:43:c8:60:dd:
16:f1:dd:6c:90:67:ad:be:be:01:ee:35:53:eb:e4:
8a:b9:d8:50:6b:7a:1e:c4:c2:d9:ab:12:d8:81:9d:
c0:93:9c:a8:82:36:65:5b:c1:35:84:e5:91:37:b9:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:A9:32:12:36:86:1C:DA:12:E9:EB:2A:60:8C:BE:1D:6C:8F:FA
X509v3 Authority Key Identifier:
keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/PDGpMhI2hhzaEunrKmCMvh1sj_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.231.0/24
185.32.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:00:ca:3e:3b:da:53:4c:57:33:1a:c0:3a:6f:f8:e4:ea:
28:82:e2:e8:6e:28:f5:fa:ae:bc:78:2c:de:11:7a:f3:cf:c8:
63:68:8b:6d:69:87:69:97:5b:d9:2c:ef:8c:3a:e5:92:66:dd:
3e:95:bb:48:68:73:9d:17:fd:73:86:3d:ef:01:f0:eb:b1:e2:
4d:31:ac:1a:88:68:5b:ab:9f:f7:79:2c:03:28:85:51:8f:15:
f1:ae:64:90:1e:be:e0:6a:a3:29:a2:a7:eb:a0:0b:7e:9b:46:
4c:ae:aa:99:27:1c:f1:ce:88:45:db:d5:e8:3f:43:bb:d2:42:
d2:94:9d:fb:80:ec:2d:76:fb:10:63:d2:44:85:17:44:12:f0:
78:4e:03:cd:72:7c:21:56:8e:c0:ec:e3:75:78:d3:1e:47:07:
7a:66:0f:04:0f:64:aa:58:1f:c6:f1:bf:e6:ee:7f:1a:c7:77:
38:01:68:6f:7b:69:b4:b7:18:79:b0:c8:66:9c:8b:cb:ef:82:
59:1f:32:54:2c:9f:8a:65:14:6d:41:ca:40:97:0e:91:22:a7:
8a:df:54:0b:41:4b:bf:8f:1e:df:c4:9f:a9:5a:30:93:09:be:
d3:85:5f:98:c1:20:f9:18:1d:0d:80:89:f9:38:10:bb:a8:4e:
09:1c:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:33 2026 by rpki-client