Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pmwwGyB_CXtBekAgU10E1fgTMYA.roa
File: pmwwGyB_CXtBekAgU10E1fgTMYA.roa (raw, json)
Hash identifier: ul8qCSt3yCEwlKRKBhK8QN6W7USn6jKoIZzmab7dPrc=
Subject key identifier: A6:6C:30:1B:20:7F:09:7B:41:7A:40:20:53:5D:04:D5:F8:13:31:80
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019EB62B2C73AFE02CDE8758E585BF72FA11
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pmwwGyB_CXtBekAgU10E1fgTMYA.roa
Signing time: Thu 11 Jun 2026 10:12:23 +0000
ROA not before: Thu 11 Jun 2026 10:12:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.109.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:2b:2c:73:af:e0:2c:de:87:58:e5:85:bf:72:fa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Jun 11 10:12:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a66c301b207f097b417a4020535d04d5f8133180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:38:0d:80:9c:7b:43:24:c4:07:fd:a9:9b:
91:7e:90:65:32:0c:ad:a4:59:6b:6c:aa:56:cb:33:
0f:99:b6:60:b8:b4:5c:59:1a:c2:a2:ca:1d:b0:8c:
f1:85:82:4d:0c:24:36:af:60:6f:a2:f9:7c:be:a0:
2c:75:5b:bd:40:1a:a8:23:83:5e:0e:ee:e5:fc:9f:
a4:93:8f:b7:ca:2f:73:87:94:71:a5:f6:78:e5:84:
3c:96:2b:2b:5f:50:35:e4:e0:63:32:df:8a:67:2c:
fc:e3:79:33:2f:0c:65:07:b1:1a:80:c3:d7:3e:67:
ca:93:31:3b:f0:f2:00:41:5d:32:8f:3e:0d:e7:04:
23:fb:3e:f7:c8:3c:7c:6d:83:d4:6f:3e:1e:de:dc:
f4:b6:07:a6:13:d8:07:3d:1c:46:d6:b4:fe:91:f1:
61:3e:2f:6a:46:71:b1:08:7a:3f:de:73:17:7d:03:
07:bd:66:d1:04:86:88:70:20:19:f8:7e:1f:22:63:
00:4c:70:95:86:78:0a:07:d2:36:a4:c7:4d:90:2f:
66:1d:ea:99:6f:6f:e5:c3:cd:f4:58:de:28:42:5a:
a1:65:73:94:0c:a0:9c:e3:01:e1:32:e9:70:07:a1:
34:f2:5a:85:f0:40:86:2a:d5:0d:5a:81:ef:99:2e:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:30:1B:20:7F:09:7B:41:7A:40:20:53:5D:04:D5:F8:13:31:80
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/pmwwGyB_CXtBekAgU10E1fgTMYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:17:6a:e7:42:9f:d6:ee:76:59:0b:a3:a8:bc:3b:63:eb:79:
76:29:7f:fb:2b:cd:4d:5b:e3:9e:05:6b:ae:47:63:11:9e:c6:
ff:1c:2f:f6:22:6f:e4:ff:ea:ea:0f:66:78:85:46:f8:b3:fa:
29:88:13:30:a1:2e:7d:22:f5:47:a3:81:0c:3a:35:e8:41:1c:
e0:b4:a4:5a:54:cf:dd:e2:83:bc:e3:92:e1:58:9f:6d:ef:76:
93:e0:3e:c9:bb:88:fd:2a:dc:b6:c5:e7:99:fd:38:f4:f5:99:
9b:d2:b9:e0:2c:c2:f6:2e:53:9a:bb:8c:29:48:f8:fa:b7:8c:
f1:dd:b9:47:7f:50:26:09:e9:8a:69:ab:27:84:54:f0:83:ea:
c3:99:90:7a:ef:45:7d:c1:3e:49:d8:59:85:66:3c:28:d7:fc:
5d:1c:5d:c8:6c:bd:0a:5a:7d:6e:dd:79:97:ff:67:71:fc:ec:
1e:1f:dd:24:b0:fe:1c:00:7f:c4:99:5f:a9:00:2b:b1:89:b7:
1b:e9:e9:55:4c:5d:12:d0:58:6f:dc:f0:5d:34:2f:c3:38:4e:
85:2a:f9:ff:0a:33:04:c7:bb:e3:14:aa:ce:a4:d6:86:cf:c8:
12:65:e9:c0:b7:11:fe:eb:82:e2:30:ce:e8:14:ec:6e:a6:cb:
98:30:a8:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ62Kyxzr+As3odY5YW/cvoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx
ZDlkNjQwHhcNMjYwNjExMTAxMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjZjMzAxYjIwN2YwOTdiNDE3YTQwMjA1MzVkMDRkNWY4MTMzMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE04DYCce0MkxAf9qZuRfpBlMgyt
pFlrbKpWyzMPmbZguLRcWRrCosodsIzxhYJNDCQ2r2Bvovl8vqAsdVu9QBqoI4Ne
Du7l/J+kk4+3yi9zh5RxpfZ45YQ8lisrX1A15OBjMt+KZyz843kzLwxlB7EagMPX
PmfKkzE78PIAQV0yjz4N5wQj+z73yDx8bYPUbz4e3tz0tgemE9gHPRxG1rT+kfFh
Pi9qRnGxCHo/3nMXfQMHvWbRBIaIcCAZ+H4fImMATHCVhngKB9I2pMdNkC9mHeqZ
b2/lw830WN4oQlqhZXOUDKCc4wHhMulwB6E08lqF8ECGKtUNWoHvmS6JQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZsMBsgfwl7QXpAIFNdBNX4EzGAMB8GA1UdIwQY
MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut
NDIyNTIzYzRlNjhiLzEvcG13d0d5Ql9DWHRCZWtBZ1UxMEUxZmdUTVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi
LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm1MMA0G
CSqGSIb3DQEBCwUAA4IBAQBLF2rnQp/W7nZZC6OovDtj63l2KX/7K81NW+OeBWuu
R2MRnsb/HC/2Im/k/+rqD2Z4hUb4s/opiBMwoS59IvVHo4EMOjXoQRzgtKRaVM/d
4oO845LhWJ9t73aT4D7Ju4j9Kty2xeeZ/Tj09Zmb0rngLML2LlOau4wpSPj6t4zx
3blHf1AmCemKaasnhFTwg+rDmZB670V9wT5J2FmFZjwo1/xdHF3IbL0KWn1u3XmX
/2dx/OweH90ksP4cAH/EmV+pACuxibcb6elVTF0S0Fhv3PBdNC/DOE6FKvn/CjME
x7vjFKrOpNaGz8gSZenAtxH+64LiMM7oFOxupsuYMKjC
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:36 2026 by rpki-client