Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3SrH-dLHHmjASjwSKzHL9KBlJTE.roa
File: 3SrH-dLHHmjASjwSKzHL9KBlJTE.roa (raw, json)
Hash identifier: 6h09Rap5+PPdwCIYFUkzq+P1ysyYytv/2blaiohlxpc=
Subject key identifier: DD:2A:C7:F9:D2:C7:1E:68:C0:4A:3C:12:2B:31:CB:F4:A0:65:25:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A03A2611D1AF31791D0EFFF73FDE8C7235
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3SrH-dLHHmjASjwSKzHL9KBlJTE.roa
Signing time: Tue 25 Aug 2026 18:19:28 +0000
ROA not before: Tue 25 Aug 2026 18:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209182
IP address blocks: 94.249.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:26:11:d1:af:31:79:1d:0e:ff:f7:3f:de:8c:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 25 18:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd2ac7f9d2c71e68c04a3c122b31cbf4a0652531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:a0:f0:f9:f6:37:8a:17:15:62:75:17:ba:
ca:d2:38:d3:7f:e8:f5:86:1c:72:28:e5:f1:4b:5d:
51:18:13:6b:db:ef:c1:9c:91:08:c9:94:df:a0:01:
47:ea:2f:ca:a8:29:68:49:6d:9e:2e:ba:a2:f8:e6:
80:78:17:08:19:b5:dc:35:86:67:48:fb:bd:a1:eb:
40:2b:43:49:ab:02:16:29:54:e6:c2:3f:8e:f2:94:
75:da:3a:f9:b4:7c:e2:a1:54:4e:98:d8:4e:33:f0:
86:8c:3c:57:dc:2f:7a:7a:84:1b:34:7c:2e:14:1b:
73:c6:67:3f:7d:10:34:ab:58:c3:cf:9a:f7:76:a5:
66:05:b9:87:94:e2:e9:16:eb:d3:e1:8d:dd:a7:64:
0a:a6:39:94:3a:47:39:a9:c8:70:99:76:7d:3b:f1:
4f:de:2b:6c:96:17:f3:9b:08:58:ab:2e:2a:c8:0a:
e7:6a:32:02:25:76:92:27:16:a9:1a:b6:77:f9:46:
0a:8a:32:74:b6:77:73:a5:1c:9c:7d:6e:9b:48:2c:
d4:cc:84:bc:d2:82:67:17:46:c6:10:d9:b8:f8:09:
a3:a3:1c:53:ae:29:81:05:6a:ed:78:db:7d:eb:f8:
3b:e5:63:cf:1d:89:d8:e4:63:0e:15:74:f6:79:ea:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:C7:F9:D2:C7:1E:68:C0:4A:3C:12:2B:31:CB:F4:A0:65:25:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3SrH-dLHHmjASjwSKzHL9KBlJTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
11:59:e7:c8:1d:80:ee:bd:ea:58:0c:07:37:be:61:47:ae:d3:
fc:cb:a9:e6:5f:70:2a:3d:0a:03:f1:9c:68:0f:56:03:c2:6b:
cd:8f:d2:71:60:47:54:e0:3a:a4:ca:54:71:63:d3:51:16:43:
b7:be:d9:ca:da:67:ce:ab:95:59:d9:a9:60:18:1f:64:e2:c5:
23:33:f7:25:32:ab:5a:46:46:51:72:f5:e8:62:81:30:95:1f:
ec:f9:1c:7c:db:b6:f2:ea:b1:4c:22:d0:fb:b1:23:9e:87:6c:
ea:78:82:15:cc:93:d5:db:0d:89:50:a2:b4:c8:3b:f2:55:6c:
64:8a:8c:d4:70:7e:a5:c5:5d:ea:5d:c1:04:2f:c6:6e:39:0f:
55:28:34:f9:8c:84:07:6a:41:e6:02:3d:35:97:dc:bc:98:f7:
7d:37:bf:82:e9:b4:21:e2:a7:ee:2c:a4:d9:01:6a:0a:94:11:
6b:5e:74:71:cb:27:76:f6:e8:19:35:25:fe:50:36:94:ac:65:
5e:f0:5e:1b:43:38:14:1e:40:91:02:20:6d:2b:14:24:bd:ff:
35:b4:f1:4c:4a:02:22:74:71:71:d4:d4:f8:83:87:f6:07:e3:
57:b3:1c:c8:05:68:e6:40:3e:c5:d7:c3:17:30:a4:f1:ba:0b:
cf:2e:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:47 2026 by rpki-client