Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/PSCjCrxrCeT-cWttc-XrOlJtQZw.roa
File: PSCjCrxrCeT-cWttc-XrOlJtQZw.roa (raw, json)
Hash identifier: 2swSqRspsOoUJA6D3XUUWVLXclXLULrNOWbdZ6ShDg0=
Subject key identifier: 3D:20:A3:0A:BC:6B:09:E4:FE:71:6B:6D:73:E5:EB:3A:52:6D:41:9C
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019C480F5F7EB711ACE93562BFF017E9D3EC
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/PSCjCrxrCeT-cWttc-XrOlJtQZw.roa
Signing time: Tue 10 Feb 2026 14:58:12 +0000
ROA not before: Tue 10 Feb 2026 14:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201183
IP address blocks: 46.235.9.0/24 maxlen: 24
69.9.160.0/24 maxlen: 24
91.217.219.0/24 maxlen: 24
94.101.108.0/24 maxlen: 24
94.156.72.0/23 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.160.0/23 maxlen: 24
164.40.188.0/22 maxlen: 22
185.239.174.0/24 maxlen: 24
194.169.136.0/24 maxlen: 24
212.104.153.0/24 maxlen: 24
213.254.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:0f:5f:7e:b7:11:ac:e9:35:62:bf:f0:17:e9:d3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Feb 10 14:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d20a30abc6b09e4fe716b6d73e5eb3a526d419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:67:54:2f:78:36:07:3b:28:cb:66:72:d3:
e9:53:06:36:fd:5e:69:c1:31:c7:72:5f:ba:f0:60:
31:24:17:f7:3d:8b:d0:fa:e9:e5:4e:80:00:85:2d:
48:b8:0a:96:c3:ec:03:6c:ca:bd:02:d6:a9:fb:9b:
33:c9:9b:c5:3d:37:9f:79:35:21:a3:93:fe:5b:62:
08:86:1d:85:40:8b:4f:32:e7:e8:7b:dc:17:da:d9:
13:f2:f9:b7:b5:a9:68:18:89:9f:72:51:96:78:23:
ec:7b:97:cc:ea:c8:d9:a0:51:0f:63:35:8f:09:70:
18:95:70:99:7f:2f:0b:3e:30:9f:12:01:9d:0d:70:
db:5d:48:48:c1:e5:50:57:b2:e2:e0:7c:a6:b7:5b:
c9:40:e4:67:0f:c6:12:0a:f7:e4:17:09:88:e1:32:
f6:0d:22:d4:5a:81:c8:ae:5f:c7:94:73:e2:8e:1b:
c4:3f:04:4c:b7:e8:d1:db:0d:8f:f3:f5:9a:e1:44:
a0:1e:7c:96:07:dd:9b:cc:2d:b4:90:62:c1:2d:b9:
e8:0f:44:e6:69:c6:d2:ee:a8:7d:dd:87:18:08:e1:
e5:37:6f:f2:54:d3:cd:76:a5:b2:74:e6:34:33:19:
07:f9:90:d7:46:b9:b2:49:6e:e2:ad:cc:e2:f5:41:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:A3:0A:BC:6B:09:E4:FE:71:6B:6D:73:E5:EB:3A:52:6D:41:9C
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/PSCjCrxrCeT-cWttc-XrOlJtQZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.9.0/24
69.9.160.0/24
91.217.219.0/24
94.101.108.0/24
94.156.72.0/23
94.156.156.0/23
94.156.160.0/23
164.40.188.0/22
185.239.174.0/24
194.169.136.0/24
212.104.153.0/24
213.254.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d2:2f:25:2b:91:68:8b:b2:76:dc:7b:35:f1:50:10:b8:5d:
05:cc:75:aa:c8:e2:0b:27:60:70:a4:92:bb:b1:65:4d:95:0b:
34:05:08:10:26:d7:c0:28:92:07:c9:92:cc:35:4f:7e:8e:ae:
1d:86:78:eb:3b:ec:ed:89:34:54:21:1d:2c:b0:ca:94:99:c4:
5c:4c:22:8c:21:27:78:aa:99:70:d2:27:a3:d1:d7:a5:61:51:
9c:76:8e:05:fc:bf:5a:d1:d6:ce:02:e4:a6:4d:95:f6:06:be:
f1:29:a8:84:fc:a2:58:2a:95:63:93:a9:0f:d4:34:97:70:26:
1a:8b:0a:80:b8:28:48:fb:5d:5c:e9:61:d4:03:1b:7b:80:56:
4a:10:46:a0:28:08:91:80:e3:21:b0:41:a3:1b:83:2e:3c:c0:
65:4a:6c:3e:66:09:6e:fe:9f:12:6c:07:70:95:0f:32:1c:27:
d8:39:f3:5a:fd:a4:8d:11:61:0f:15:63:de:c2:8d:44:34:a2:
5d:23:92:9d:71:97:f1:6b:2e:58:b0:cc:33:53:98:04:14:9f:
83:62:ea:01:66:fb:11:17:5a:f1:a4:0b:a6:02:e0:8d:84:a3:
35:b9:a8:6b:04:a6:ce:8d:66:24:ec:6d:42:1b:5c:7f:fd:01:
cb:22:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:14 2026 by rpki-client