Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l-D7Y4UvBFynRu6DJHNROWJwAkY.roa
File: l-D7Y4UvBFynRu6DJHNROWJwAkY.roa (raw, json)
Hash identifier: Fn4WFrie5587/2AW4QcH3X1t3QPC7khzP+3THfYrmtI=
Subject key identifier: 97:E0:FB:63:85:2F:04:5C:A7:46:EE:83:24:73:51:39:62:70:02:46
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019CB3F50E33DAF61F226ED22F7D8A57AEB5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l-D7Y4UvBFynRu6DJHNROWJwAkY.roa
Signing time: Tue 03 Mar 2026 13:48:27 +0000
ROA not before: Tue 03 Mar 2026 13:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 94.249.174.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:f5:0e:33:da:f6:1f:22:6e:d2:2f:7d:8a:57:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 3 13:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97e0fb63852f045ca746ee832473513962700246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:52:b2:4a:66:16:f4:b5:34:6f:5a:02:77:
47:12:c3:54:3b:e0:a6:e6:2c:4f:b0:e3:18:61:43:
e7:44:41:7a:37:f9:0d:3c:3c:85:c2:0b:38:14:d4:
e6:bf:26:55:5f:6b:30:2c:e7:a8:b7:6b:80:2d:74:
8d:a4:33:79:30:27:e4:0a:0c:53:2c:f4:af:4b:7d:
56:8f:a9:7f:d4:e2:4e:b0:69:50:2b:f3:1f:f9:16:
5d:17:2d:1c:e1:f8:ea:6d:a8:43:b8:6b:b2:18:d8:
ff:57:94:45:02:b8:dd:69:6f:bc:95:24:2b:9b:f4:
42:41:5f:4f:eb:99:d8:a1:f6:1f:ef:87:14:de:2c:
a6:88:db:99:65:b4:7f:ab:c1:75:5f:80:a4:30:ea:
45:d0:63:34:f9:4a:4e:3c:f8:ec:53:14:35:10:47:
5e:46:6e:87:c1:00:b2:c4:09:b6:5d:9f:54:79:27:
e7:d6:22:8e:22:25:49:3e:27:b2:ca:14:41:fd:fc:
76:74:8a:0f:69:2d:15:f3:86:fc:f8:eb:98:4b:36:
d6:ad:b6:af:62:c4:d1:90:89:45:82:ae:2f:35:3a:
3d:db:a3:6c:8a:cc:7c:36:46:06:47:1c:ea:29:ce:
7b:2f:65:7e:e3:71:74:9f:59:33:cb:50:87:f0:6d:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:FB:63:85:2F:04:5C:A7:46:EE:83:24:73:51:39:62:70:02:46
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l-D7Y4UvBFynRu6DJHNROWJwAkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.174.0/24
95.215.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:ce:85:db:c1:3b:24:e0:38:e5:86:94:5a:e8:f6:3f:ad:
b4:26:02:9b:c7:a9:9a:fd:00:17:29:58:8b:58:f4:bd:7d:38:
42:14:82:cf:6b:d5:a4:d3:e8:be:99:f8:9a:c3:fa:d4:46:d4:
50:d9:ce:bf:1b:f2:71:f5:b1:4d:55:07:f3:d5:6c:f4:d0:2e:
f1:ba:07:fd:8d:b7:18:95:2b:13:c4:2d:ed:dd:ea:ad:c0:84:
ba:bc:d7:43:85:d0:75:46:58:23:6b:22:2d:0c:0b:34:3a:8f:
f0:80:54:60:9f:0e:8f:18:79:87:21:f8:ee:13:26:dd:6e:ec:
af:7c:1c:c0:e8:08:02:bc:ab:0f:d6:a1:7d:45:8c:e7:7a:53:
68:43:19:6a:4e:27:66:f8:e5:be:29:b5:08:c2:da:53:0a:f7:
b5:3f:1e:aa:64:a0:2c:86:dd:3c:c1:89:3f:80:35:8a:5c:26:
e7:12:42:47:d1:f6:90:c4:13:c2:da:43:14:9a:0e:94:b1:17:
6c:1c:08:be:b5:85:2d:8c:75:3d:7d:b4:20:6a:14:54:99:41:
ff:63:87:30:c5:7c:bc:b2:10:76:f1:21:5b:85:9a:0d:64:69:
d5:52:52:f8:a6:b2:ce:e0:db:05:97:d8:02:a3:13:15:28:64:
e3:02:ba:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:04 2026 by rpki-client