Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l3hUkDdh2rjguupH7Mi48ykgI3I.roa
File: l3hUkDdh2rjguupH7Mi48ykgI3I.roa (raw, json)
Hash identifier: V+mYCMNNTdVYNLe5e6Ogdu60cH6dSTIr0DDOFCAhGsI=
Subject key identifier: 97:78:54:90:37:61:DA:B8:E0:BA:EA:47:EC:C8:B8:F3:29:20:23:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A13AC46C0F2E3AED1D84312050BA2172CF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l3hUkDdh2rjguupH7Mi48ykgI3I.roa
Signing time: Wed 14 Oct 2026 14:15:13 +0000
ROA not before: Wed 14 Oct 2026 14:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 195.58.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c4:6c:0f:2e:3a:ed:1d:84:31:20:50:ba:21:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 14:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=977854903761dab8e0baea47ecc8b8f329202372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:93:1a:80:9f:fc:89:1d:a0:89:1a:b9:53:
6f:f0:ee:60:75:7d:4f:65:2b:e1:9a:f5:97:33:5f:
04:65:cd:f4:e5:bd:e0:b4:55:c3:e5:37:77:f6:6a:
55:c9:96:82:7b:9e:64:5d:69:ab:52:67:46:ea:97:
95:9c:4c:cb:2c:1a:97:39:58:86:35:80:47:d0:3e:
9e:04:cc:e8:f7:04:43:ee:16:64:33:75:26:83:57:
83:5c:d1:ed:93:1f:b9:cc:46:14:ef:1c:ee:1f:95:
bb:be:1b:0b:d6:0f:6e:64:e6:9b:0d:e2:f6:75:95:
73:8a:b7:73:18:82:79:64:42:d9:1d:ac:b6:7d:b1:
0c:d4:5c:46:61:ee:19:f2:5e:bb:d6:41:80:5b:57:
8e:48:10:42:f7:2d:a2:92:a6:d7:c5:56:c5:9b:10:
cd:4b:c6:6c:6a:4b:74:17:a4:de:6c:b8:40:67:b2:
d9:c2:ef:71:8f:07:f4:ed:5f:33:53:64:92:66:bc:
42:8c:cb:79:fd:aa:93:fc:2f:f0:df:77:cc:db:f9:
46:e9:20:d3:6d:f4:08:73:b8:b5:19:0d:50:ab:68:
f0:db:bb:18:a7:4c:04:ff:bd:e3:32:c3:98:a9:ac:
ae:d7:10:6c:87:79:95:7f:e3:e0:75:d8:1a:80:f7:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:54:90:37:61:DA:B8:E0:BA:EA:47:EC:C8:B8:F3:29:20:23:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/l3hUkDdh2rjguupH7Mi48ykgI3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.40.0/22
Signature Algorithm: sha256WithRSAEncryption
16:b3:e8:55:d7:78:6f:91:24:15:4f:f5:59:2d:d0:d8:4b:2a:
9f:6f:07:81:6d:46:31:66:e0:c8:82:eb:10:cb:ad:90:77:b4:
75:45:9c:dd:61:77:0f:10:1b:8a:32:b3:35:45:a4:44:c1:9c:
aa:8d:f9:fd:be:76:4a:25:e2:51:b0:49:a6:1e:dc:db:d5:18:
14:6d:52:94:11:42:93:25:d8:63:12:a2:0e:37:ec:c5:8f:b0:
29:c3:26:4a:62:f0:f1:b5:92:92:c9:7d:82:a5:db:fb:30:99:
50:b2:13:6a:b1:e5:08:4a:0c:db:96:ae:af:8a:be:80:1d:98:
c1:bb:72:cb:4f:d3:77:1d:98:3f:28:61:aa:b8:24:77:31:ed:
4f:8d:fb:a5:2e:a9:8b:f4:10:c0:c7:cd:d5:d2:1a:70:9e:38:
10:69:2f:c8:a6:52:8d:1d:8e:f8:ef:7d:39:18:cb:a9:39:4a:
db:5f:4f:39:6f:9a:27:9b:48:1f:32:7d:f0:ff:e3:a2:6a:0e:
36:9c:fc:1c:13:fc:e7:c4:e7:e7:fd:7c:52:dd:df:21:3f:d3:
28:cd:b2:7f:5c:8d:a5:09:9e:4e:98:8b:b8:6f:2e:68:15:3d:
da:ae:09:08:d9:d3:a4:a3:86:9d:1f:9d:42:20:05:e9:ee:f1:
9d:e0:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:22 2026 by rpki-client