Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dM3WwQzpVW08I5uHKRm2QTHP5uc.roa
File: dM3WwQzpVW08I5uHKRm2QTHP5uc.roa (raw, json)
Hash identifier: 06hf8IEDWZt7VIp0hMalWlKoNhgel2VQrZXP7NNNmPE=
Subject key identifier: 74:CD:D6:C1:0C:E9:55:6D:3C:23:9B:87:29:19:B6:41:31:CF:E6:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F59A7EB6EAF25436E360F80781CDB193F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dM3WwQzpVW08I5uHKRm2QTHP5uc.roa
Signing time: Mon 13 Jul 2026 04:06:44 +0000
ROA not before: Mon 13 Jul 2026 04:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 185.47.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:a7:eb:6e:af:25:43:6e:36:0f:80:78:1c:db:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 13 04:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74cdd6c10ce9556d3c239b872919b64131cfe6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:2c:56:9e:0c:b3:b9:cd:17:af:d0:d1:c4:
97:53:49:70:73:7e:94:e2:9d:59:36:00:39:9c:c3:
07:1e:0b:26:c2:9d:14:8e:12:73:f3:39:9d:7b:62:
39:c4:d7:de:f1:a6:b9:5b:59:18:18:0d:3e:a9:b9:
dc:c9:76:b0:d2:c3:ac:da:b7:42:6c:03:0f:d8:9e:
88:66:57:a4:b1:2a:84:8d:36:b2:30:f0:ce:3a:54:
40:fe:35:4c:55:e6:79:db:16:a2:8e:fc:06:af:79:
0a:f8:02:a2:cc:ea:07:b0:92:1e:f7:96:19:57:75:
f5:89:07:3e:e3:a0:42:03:50:af:80:3b:33:a0:72:
cb:bc:ba:dc:71:fd:67:27:75:58:2e:d3:66:61:af:
e1:f7:85:d7:83:5e:c9:31:31:6b:a0:39:38:c8:6f:
70:70:42:93:4b:56:0a:5b:86:41:b6:07:cc:76:b6:
00:0a:51:c0:25:5c:29:2b:86:16:9b:10:a7:6f:de:
da:9b:f1:63:b9:2e:d9:29:cf:69:4d:c0:26:13:6a:
43:bb:a2:3e:d1:69:4f:f7:06:2a:06:9e:ef:e2:f2:
64:2c:29:35:07:4c:74:b8:42:80:99:b2:70:c6:fe:
d0:3a:1e:86:40:2e:b3:7f:22:ec:60:b9:8f:23:00:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:D6:C1:0C:E9:55:6D:3C:23:9B:87:29:19:B6:41:31:CF:E6:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dM3WwQzpVW08I5uHKRm2QTHP5uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1f:bd:a3:6b:c7:61:89:78:9d:34:57:86:89:2c:ec:1f:76:
68:b0:5b:90:0b:3e:ce:aa:18:43:a3:8c:94:b2:b3:c2:0c:f0:
01:10:fd:15:18:0d:5f:7f:83:a4:b2:44:9e:4c:36:64:2f:c8:
4d:29:53:d9:19:7e:fb:43:12:e3:c1:61:91:d1:62:2d:47:fe:
14:8d:6a:a8:8d:14:2e:52:a4:ca:0b:40:29:be:2f:22:8b:49:
e1:54:9b:66:f3:77:13:5c:49:c7:a4:d8:cf:56:06:7f:5a:e5:
09:24:b4:52:db:6f:2b:77:0f:dd:71:d9:8e:d1:57:a2:dd:8e:
80:fe:cb:d9:89:d6:c3:6d:20:1d:4c:cc:92:8c:5c:5c:39:04:
1f:57:15:f5:d0:0d:dd:18:d8:a6:8a:c7:b5:59:45:d4:35:3f:
dc:15:61:cb:f2:ef:8a:0e:67:cb:fd:c3:91:4e:19:7a:d2:98:
1a:73:d8:c1:3b:62:7b:17:3c:84:ae:61:91:f9:52:18:30:4f:
6f:98:f7:93:fb:9f:0f:19:7a:63:e6:81:e4:73:f7:68:40:a2:
21:be:b5:c3:99:51:69:4a:5e:96:9a:56:50:31:8c:d1:c9:47:
6d:9f:fa:1f:4b:56:e9:45:de:8e:56:9f:a6:8d:5d:7a:7a:b1:
5f:e4:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:16 2026 by rpki-client