Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa
File: 3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa (raw, json)
Hash identifier: 3ZrLLG5oIpjvCZLR27J2YMVw+al6VtK2RFAJCZ4jGnc=
Subject key identifier: DE:86:88:E0:12:75:3D:F6:54:E5:3A:00:80:B5:AD:BE:5E:4D:C2:15
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019F1CE961243494F5E2682C23012BF2316D
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa
Signing time: Wed 01 Jul 2026 09:01:24 +0000
ROA not before: Wed 01 Jul 2026 09:01:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 109.94.102.0/24 maxlen: 24
109.94.103.0/24 maxlen: 24
193.201.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e9:61:24:34:94:f5:e2:68:2c:23:01:2b:f2:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jul 1 09:01:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de8688e012753df654e53a0080b5adbe5e4dc215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:96:6d:5c:dc:56:50:b3:72:ca:8e:88:2c:
e5:8f:ff:76:27:cd:d0:ba:02:49:31:bc:12:35:26:
36:4f:2b:3a:9a:1c:b1:ba:d9:e4:7e:cc:a4:e7:94:
73:ef:1f:ce:59:18:66:61:56:a7:e7:6b:ae:3f:cf:
44:08:2a:45:b7:ae:a1:ff:05:00:fe:c4:a1:bf:16:
15:85:b4:a3:19:6b:19:8b:0d:a2:f9:1d:e1:4f:c3:
f8:e6:41:23:5f:ff:ff:02:34:9c:ab:c9:a4:05:82:
12:fe:69:1b:ca:96:1e:81:0d:b1:2a:95:a3:df:12:
ba:c8:5b:d6:88:53:86:0e:c8:e0:05:bd:ed:96:eb:
69:af:9e:3e:51:c2:12:c4:b2:38:29:55:91:5a:ee:
64:90:ce:8f:62:ed:b5:ae:7a:5d:b0:ea:12:df:33:
48:76:6e:da:a6:2c:d8:d8:a1:4f:63:50:39:88:06:
5e:83:62:b6:cc:b0:d1:4f:31:f7:d6:46:e4:66:6e:
66:e2:28:44:88:d7:75:80:e4:1e:3f:de:38:34:75:
af:aa:e7:a3:e9:0e:68:0b:b3:1f:61:b6:56:e7:4e:
79:09:3d:2d:7b:f6:cb:51:28:12:d5:f9:90:b3:6e:
70:3c:9a:18:e0:02:58:e5:ab:b8:58:39:2d:8c:c1:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:86:88:E0:12:75:3D:F6:54:E5:3A:00:80:B5:AD:BE:5E:4D:C2:15
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.102.0/23
193.201.207.0/24
Signature Algorithm: sha256WithRSAEncryption
90:55:44:2d:86:3e:86:fb:10:24:5a:31:ea:7b:60:08:af:e4:
4a:94:56:8e:d2:71:9d:fd:bf:bc:e5:b0:a2:93:28:68:9d:87:
ed:7d:29:a4:96:e4:a5:4a:37:f5:8b:48:ba:1c:fa:21:ad:99:
72:15:cd:f5:0b:f6:fa:1c:76:2d:c0:f3:44:b9:fd:6b:6a:92:
bd:87:8b:d6:6a:96:6e:3e:07:71:70:f9:08:67:da:11:df:d4:
df:4f:20:f0:e6:80:d1:a8:c4:93:52:aa:3b:0b:59:59:b9:19:
97:c1:04:53:06:8d:2a:5c:63:88:92:7f:75:76:7d:84:a6:fa:
c0:6e:b7:e2:29:5b:6f:45:1b:4b:96:7b:0c:fd:51:58:57:59:
d8:0b:41:a5:a7:5a:54:e4:dc:33:91:d0:f6:78:d1:c3:2d:cf:
cf:36:7e:27:73:75:08:4d:aa:1b:fc:2a:c3:8f:b0:b3:64:fb:
3b:f5:2b:99:65:aa:28:6e:f3:4b:ce:ce:c7:cd:4f:e6:da:ec:
26:c2:e3:8a:4e:b9:f0:26:17:e2:33:21:34:9c:22:96:30:8e:
31:24:e5:8d:74:80:59:55:28:0f:72:2f:0a:d8:e4:07:4e:e6:
3d:03:6b:d3:94:85:31:05:8a:d4:ce:89:50:c4:25:24:17:f7:
a0:37:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:46 2026 by rpki-client