Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/3uI5lQRkJpip0g2Yf5nrOxnpcps.roa
File: 3uI5lQRkJpip0g2Yf5nrOxnpcps.roa (raw, json)
Hash identifier: Jrv7cJG1MMoAzxus2BXaB2YNBDsOS6rV68Paas64eu4=
Subject key identifier: DE:E2:39:95:04:64:26:98:A9:D2:0D:98:7F:99:EB:3B:19:E9:72:9B
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A19EBB6930FE33AE862BCF19620133E0DA
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/3uI5lQRkJpip0g2Yf5nrOxnpcps.roa
Signing time: Tue 03 Nov 2026 00:07:24 +0000
ROA not before: Tue 03 Nov 2026 00:07:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 5.182.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:bb:69:30:fe:33:ae:86:2b:cf:19:62:01:33:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Nov 3 00:07:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dee2399504642698a9d20d987f99eb3b19e9729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:f5:51:6c:62:d9:a5:59:ef:56:94:cc:48:
04:1e:67:28:d1:7d:49:2a:50:c9:52:46:dd:2c:b9:
82:02:c2:71:ce:19:bf:eb:8c:82:eb:4f:12:2c:b1:
e7:ce:c0:cf:3b:ba:7c:fd:c1:7e:47:5d:75:e4:4c:
79:b2:26:41:c5:ff:d5:66:5f:e4:66:1e:4f:21:b8:
35:30:ca:38:97:77:99:60:2f:3e:bf:85:25:3e:0e:
c0:4e:b6:ae:31:89:d4:0b:fe:66:18:42:cb:e4:7c:
8e:11:5e:e1:d2:fa:32:e3:47:98:76:b7:1a:75:10:
b6:29:de:b5:af:52:f2:6f:8e:26:04:86:eb:70:32:
34:a0:b1:76:0c:95:6f:3e:37:1a:1f:37:e3:b8:63:
26:28:f0:90:2d:1b:77:af:f9:0c:17:fe:a7:82:45:
da:5f:b9:33:84:90:d8:20:41:d1:35:31:dd:b6:90:
ce:20:c7:e4:98:4f:3c:9d:88:d8:de:36:ec:57:8d:
71:e3:1f:62:57:47:38:2d:86:d9:d1:af:bc:37:ee:
ae:3b:dc:dd:97:66:4f:b9:37:44:56:1c:26:40:ae:
6f:ef:5f:65:7e:0b:07:f9:f3:f7:5d:4f:d9:25:a9:
60:a4:e2:3e:34:35:52:3c:8b:c3:4e:b4:46:a4:00:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:39:95:04:64:26:98:A9:D2:0D:98:7F:99:EB:3B:19:E9:72:9B
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/3uI5lQRkJpip0g2Yf5nrOxnpcps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.102.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b8:95:31:44:4a:96:95:ae:2c:ad:4f:fa:5b:20:21:ba:80:
53:b8:55:4f:47:83:55:93:1f:3f:bd:ad:d5:b2:ad:3f:32:b4:
fd:b8:13:b7:f2:de:3c:c2:fb:01:3c:1e:55:d7:cb:af:c0:2d:
f7:10:49:3b:2d:0e:b4:7a:92:f3:e3:a9:51:37:d1:be:d8:d0:
43:f2:0f:e7:56:50:22:1e:0b:94:30:94:fd:e1:82:4a:58:68:
8c:7e:2f:01:67:8d:1b:9b:65:a3:94:86:e2:b6:10:fe:0a:63:
a3:52:bb:39:f7:4b:2b:7b:8f:26:b2:80:b4:3a:7d:c9:18:8d:
9c:d9:a6:d4:76:34:55:78:f0:e2:76:98:c5:ff:c3:fc:d6:1f:
81:b8:0d:f2:9f:8b:af:d3:35:93:79:47:cf:2f:56:2e:a2:c2:
08:4d:59:7a:3d:fb:6f:e6:af:43:72:45:41:92:53:e9:69:0c:
c9:9f:db:14:73:a8:1c:91:40:57:d4:a9:44:8c:37:a9:ae:9f:
c6:25:00:f0:90:73:d0:40:d8:b4:09:44:8e:94:d6:c6:dc:c9:
df:ef:72:e0:05:00:a5:60:52:39:0b:85:37:dc:59:5c:40:c5:
72:84:78:c3:2b:bf:5f:90:b7:6a:d6:7f:16:ea:ae:37:0c:02:
34:15:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:27:51 2026 by rpki-client