Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PjzRrLFbPrpj80Dss3RroxNgaSo.roa
File: PjzRrLFbPrpj80Dss3RroxNgaSo.roa (raw, json)
Hash identifier: zdCvNpzt0QSawJl/8h0bHrVvpb5nk2D2Mnz3h9qyKWc=
Subject key identifier: 3E:3C:D1:AC:B1:5B:3E:BA:63:F3:40:EC:B3:74:6B:A3:13:60:69:2A
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D72394463036387D8B521A404BBE08C06
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PjzRrLFbPrpj80Dss3RroxNgaSo.roa
Signing time: Thu 09 Apr 2026 12:30:48 +0000
ROA not before: Thu 09 Apr 2026 12:30:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
132.243.26.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:39:44:63:03:63:87:d8:b5:21:a4:04:bb:e0:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 9 12:30:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e3cd1acb15b3eba63f340ecb3746ba31360692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:4d:aa:19:5f:19:b9:29:05:b3:3c:1b:98:
9e:2b:7f:dd:fe:d9:96:7a:83:12:e3:0c:ca:f2:99:
08:49:39:2b:6a:16:c2:e6:4d:62:cb:f3:75:38:8c:
28:aa:b3:e9:c1:cb:6e:2e:d4:35:a1:4a:ee:55:cb:
07:37:fa:20:79:b9:66:19:fb:41:5e:fb:6c:f5:42:
7e:1c:73:2f:af:a7:f8:7b:54:9d:e7:b8:2d:6e:50:
95:f8:99:73:f0:a6:6e:ee:a8:bc:8f:df:f6:29:f1:
34:12:da:78:63:82:20:e2:eb:7a:6d:79:dd:11:e7:
4c:9c:cf:e5:4f:ca:07:54:d1:2c:c0:92:47:97:2d:
f2:97:87:7f:63:83:b2:23:25:26:33:a1:b1:d7:32:
b0:21:23:9f:c3:f1:2e:b0:22:57:c5:51:cf:00:48:
c6:29:0d:89:20:4d:eb:69:e1:6e:28:0d:b6:8f:0d:
08:52:43:23:d9:50:94:6c:e8:78:0a:ed:1b:84:f9:
1b:e6:6e:b8:af:a1:7b:2c:6c:4b:df:f2:99:7c:03:
fc:68:67:b1:52:25:21:2b:e4:9b:37:1d:fd:e0:d7:
a9:54:2c:d7:e9:b5:8b:52:16:f5:8d:f1:b3:56:fb:
16:72:5c:72:68:9f:66:dc:b5:10:e1:ef:a7:82:23:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:D1:AC:B1:5B:3E:BA:63:F3:40:EC:B3:74:6B:A3:13:60:69:2A
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/PjzRrLFbPrpj80Dss3RroxNgaSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
132.243.26.0/24
185.37.195.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
53:b6:43:2b:97:8e:9f:73:b8:86:65:54:6b:4c:44:22:e5:80:
8d:8d:f8:07:35:f3:f0:8e:64:93:36:ed:1f:c6:1e:30:9e:35:
8e:7a:2b:92:71:56:38:9b:73:c9:27:26:0f:43:c0:f6:7a:70:
bf:17:83:03:63:f2:06:ad:18:ad:3c:65:af:b1:4d:e7:28:f3:
84:84:88:50:2a:72:b5:44:09:6d:7b:9b:94:b2:d2:f1:b3:51:
8d:de:ab:e2:51:b5:bf:a6:54:68:14:73:38:41:5c:39:df:35:
e3:fa:2f:97:49:05:f6:34:3d:44:59:e4:50:76:c5:61:ff:c6:
13:7d:02:ee:7c:4a:f2:15:2d:c2:0c:9b:93:93:2e:8c:b9:b3:
4a:f4:6f:05:a0:30:e4:6e:ae:d3:0c:d9:72:73:e4:d0:b0:ef:
26:b5:e0:df:38:99:3e:51:2b:59:d1:1d:2b:39:16:06:30:29:
71:7e:08:94:b1:04:77:2c:7e:93:5c:88:ba:87:a1:43:1e:76:
c0:a6:ea:3e:f8:85:f2:61:3f:05:b8:df:46:5d:b1:89:d4:80:
52:37:84:2b:3a:dd:c6:15:14:9f:c5:b5:0f:e5:f5:85:66:ef:
ea:95:b0:db:f3:9c:fe:7b:b0:d6:0a:63:1c:8c:93:38:32:fe:
8a:6f:63:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgISAZ1yOURjA2OH2LUhpAS74IwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwNDA5MTIzMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTNjZDFhY2IxNWIzZWJhNjNmMzQwZWNiMzc0NmJhMzEzNjA2OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3BNqhlfGbkpBbM8G5ieK3/d/tmW
eoMS4wzK8pkISTkrahbC5k1iy/N1OIwoqrPpwctuLtQ1oUruVcsHN/ogeblmGftB
Xvts9UJ+HHMvr6f4e1Sd57gtblCV+Jlz8KZu7qi8j9/2KfE0Etp4Y4Ig4ut6bXnd
EedMnM/lT8oHVNEswJJHly3yl4d/Y4OyIyUmM6Gx1zKwISOfw/EusCJXxVHPAEjG
KQ2JIE3raeFuKA22jw0IUkMj2VCUbOh4Cu0bhPkb5m64r6F7LGxL3/KZfAP8aGex
UiUhK+SbNx394NepVCzX6bWLUhb1jfGzVvsWclxyaJ9m3LUQ4e+ngiOVJwIDAQAB
o4ICjzCCAoswHQYDVR0OBBYEFD480ayxWz66Y/NA7LN0a6MTYGkqMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvUGp6UnJMRmJQcnBqODBEc3MzUnJveE5nYVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGkBggrBgEFBQcBBwEB/wSBlDCBkTBiBAIAATBcAwQALvMH
AwQBW8gOAwQAXD53AwQAXuj4AwQAX1FMAwQBX1FyMAwDBABfUXsDBAFfUXwDBABn
UmcDBAFogIADBABtRTwDBACE8xoDBAC5JcMDBAK5VzADBAK5dZgwKwQCAAIwJQMF
AyoG3cADBQMqC4BAAwUDKgvZAAMHACoMXQAgAQMFAyoMaYAwDQYJKoZIhvcNAQEL
BQADggEBAFO2QyuXjp9zuIZlVGtMRCLlgI2N+Ac18/COZJM27R/GHjCeNY56K5Jx
Vjibc8knJg9DwPZ6cL8XgwNj8gatGK08Za+xTeco84SEiFAqcrVECW17m5Sy0vGz
UY3eq+JRtb+mVGgUczhBXDnfNeP6L5dJBfY0PURZ5FB2xWH/xhN9Au58SvIVLcIM
m5OTLoy5s0r0bwWgMORurtMM2XJz5NCw7ya14N84mT5RK1nRHSs5FgYwKXF+CJSx
BHcsfpNciLqHoUMedsCm6j74hfJhPwW430ZdsYnUgFI3hCs63cYVFJ/FtQ/l9YVm
7+qVsNvznP57sNYKYxyMkzgy/opvY9Y=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:49 2026 by rpki-client