Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PJqQOsiLgJpBTNtEIXIzADvxDUY.roa
File: PJqQOsiLgJpBTNtEIXIzADvxDUY.roa (raw, json)
Hash identifier: BexP3j7XfBxWmDzuyrg//sFpVDsAMkl0xxF/49mSdTQ=
Subject key identifier: 3C:9A:90:3A:C8:8B:80:9A:41:4C:DB:44:21:72:33:00:3B:F1:0D:46
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019EB1652A5A461759480837459105275EAC
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PJqQOsiLgJpBTNtEIXIzADvxDUY.roa
Signing time: Wed 10 Jun 2026 11:57:37 +0000
ROA not before: Wed 10 Jun 2026 11:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 86.109.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:65:2a:5a:46:17:59:48:08:37:45:91:05:27:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Jun 10 11:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c9a903ac88b809a414cdb44217233003bf10d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:df:56:8b:d5:ec:86:16:97:d9:de:d2:d8:
87:fe:3b:c6:06:00:57:a7:1b:3e:f9:2a:d2:ad:fc:
5c:4e:b7:d9:97:33:4a:9d:6e:65:fc:80:40:fa:d8:
33:20:72:58:f0:db:5f:80:74:af:cd:b0:07:85:18:
17:79:80:64:de:5a:e6:4b:b3:7d:e4:a1:f5:8e:72:
c6:64:84:c4:a4:43:ec:2d:06:ca:22:b1:4b:c8:1b:
70:7f:f2:6d:3d:6e:bf:8c:6f:31:30:3a:23:8f:e6:
43:a3:82:44:e0:9f:fc:9b:66:6c:17:6f:5f:f2:31:
1f:15:63:af:7a:b1:09:18:68:b6:9e:9b:08:91:49:
e6:f3:2c:45:25:a8:80:00:75:05:13:83:b5:bd:b1:
06:ab:fd:ed:c1:e1:0f:29:ca:4d:ee:b3:dd:5f:86:
a1:dd:3f:c0:90:82:5f:5c:44:1e:b8:10:d4:c5:64:
eb:32:9f:4e:d7:e8:28:85:79:03:66:65:4d:c3:e0:
43:a5:d5:ce:37:cf:89:24:3b:cb:22:8d:66:0c:07:
8e:79:0f:f7:e9:9a:41:8e:c5:0c:76:7a:41:22:1c:
0a:eb:43:8a:20:a7:8f:c6:6a:ff:61:fa:6a:ec:69:
24:b9:e7:9d:db:0d:9f:31:67:a8:fa:c9:03:ab:9c:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:90:3A:C8:8B:80:9A:41:4C:DB:44:21:72:33:00:3B:F1:0D:46
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PJqQOsiLgJpBTNtEIXIzADvxDUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.74.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:52:5b:49:99:2c:e0:5e:de:b1:83:cf:5f:16:d7:b2:06:35:
b9:f7:40:0a:b2:14:3d:05:12:92:37:f4:7e:e0:fc:41:1f:b3:
af:c9:56:72:30:96:9d:df:ec:98:76:24:3b:00:a9:c2:0d:4f:
f3:c2:e1:00:01:ec:a5:a4:fc:13:ec:75:17:54:ac:86:c6:c7:
6e:d7:72:80:44:6a:c0:6f:1a:db:83:c7:74:3c:9f:78:35:2c:
8a:0c:55:3c:40:81:8b:fa:88:52:80:8e:3c:9d:f6:aa:f4:89:
97:b7:ca:53:33:1a:b3:90:52:29:2f:86:ec:09:ac:f5:e5:ee:
d8:77:55:df:ac:dd:56:7f:3d:05:f8:4c:23:f9:41:0f:2e:9c:
a6:e3:72:47:6e:8d:c5:1f:e8:ff:8b:b1:01:01:68:0a:1e:ae:
13:66:2d:45:dc:5b:0b:ca:e8:24:c6:fe:27:43:9d:39:0a:73:
89:47:e5:3f:d5:87:59:b2:70:4f:de:77:e1:cf:ae:0c:d6:f1:
fc:39:9d:84:17:6c:62:d5:37:69:f0:03:b5:c2:86:1b:8e:43:
58:88:dc:f3:00:cf:f1:e0:61:5b:96:88:dc:c5:ee:91:8b:a2:
db:49:db:17:3f:ab:98:0d:55:dd:a4:64:74:f5:29:12:81:46:
68:4c:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:45 2026 by rpki-client