Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3Pv1dXG4nVHnLkgxAGQvhJEePdA.roa
File: 3Pv1dXG4nVHnLkgxAGQvhJEePdA.roa (raw, json)
Hash identifier: s8w9x0K5nQBXC3l07h+uDEeopooTGjbCs2IEfAMeu3E=
Subject key identifier: DC:FB:F5:75:71:B8:9D:51:E7:2E:48:31:00:64:2F:84:91:1E:3D:D0
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F5F428A558D6F43A371CFDBBEC9A09536
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3Pv1dXG4nVHnLkgxAGQvhJEePdA.roa
Signing time: Tue 14 Jul 2026 06:13:44 +0000
ROA not before: Tue 14 Jul 2026 06:13:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 213.189.24.0/24 maxlen: 24
213.214.105.0/24 maxlen: 24
213.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:42:8a:55:8d:6f:43:a3:71:cf:db:be:c9:a0:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 14 06:13:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfbf57571b89d51e72e483100642f84911e3dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:b3:77:11:fe:04:b1:da:65:60:86:4d:80:
06:ff:4d:c8:f6:6e:ff:e0:9b:b4:79:81:90:1a:36:
ac:51:3a:e4:77:1d:8b:a1:d1:2a:e1:9d:46:ac:44:
a2:04:08:39:7f:fb:3c:f7:5b:15:3e:07:0e:88:a6:
f3:7c:47:6d:0c:2e:48:46:31:8e:df:cd:44:64:74:
78:4a:ad:0c:42:1e:70:c5:b6:04:e1:7b:5b:01:63:
16:b1:11:0d:d4:e0:8f:9c:e9:bc:d4:d2:b8:e0:11:
9a:eb:42:38:3f:cd:bc:5b:1b:63:ca:0a:55:4c:9e:
94:9c:2b:3a:a3:46:a1:7d:89:45:8e:b1:ce:4e:8f:
8d:8b:ac:eb:11:fb:da:36:c3:ff:df:77:94:b5:ad:
af:1d:75:4f:67:a7:d6:be:12:c0:d6:dd:60:28:25:
b8:28:59:93:78:18:c3:e0:45:1f:bc:e7:a2:11:31:
93:a4:e4:de:3b:be:05:da:e0:f4:ec:0f:01:97:98:
b6:3a:1a:a3:71:32:87:84:78:0b:11:a1:0d:fa:37:
08:54:a3:20:d8:2e:4c:25:23:5e:1b:88:04:56:8e:
da:40:de:c5:41:a2:36:69:23:8f:99:5f:cd:46:83:
c3:ca:d0:90:78:90:d8:d6:94:8d:e3:fa:69:93:4c:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:F5:75:71:B8:9D:51:E7:2E:48:31:00:64:2F:84:91:1E:3D:D0
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/3Pv1dXG4nVHnLkgxAGQvhJEePdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.24.0/24
213.214.105.0/24
213.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d4:62:83:ee:62:3c:6f:c3:96:c9:0a:af:02:98:fb:f4:9d:
ad:3f:0e:1f:13:ba:65:6a:ad:cc:a6:50:99:90:ac:4d:8f:d5:
1a:f5:9f:2a:e3:19:e5:bf:6d:5f:b5:28:98:9e:19:48:25:8a:
fe:fa:0f:4a:7e:18:52:bf:3f:88:93:8a:20:48:2c:ae:73:67:
a2:39:cc:ef:39:08:bc:fa:c6:fb:a1:fa:c7:f5:ff:2f:92:38:
1b:50:97:48:cb:45:83:50:ac:83:87:95:6b:84:88:fa:a7:a9:
64:43:8f:63:9a:73:c4:2c:51:e7:be:d7:f4:2e:d7:bc:42:4c:
90:06:a7:13:ce:16:82:18:b4:93:e9:61:f2:a7:55:92:51:dd:
ff:90:21:b2:18:98:91:82:5b:61:58:aa:56:b7:51:a2:98:87:
c2:4b:b6:73:72:09:81:83:fd:0c:63:22:a2:29:38:9b:3f:fd:
59:bc:8e:86:e7:68:82:6c:fc:13:f2:7e:e6:68:69:98:de:5a:
35:ac:9d:28:e3:11:a3:da:a4:36:69:80:3e:3a:f9:90:fc:f1:
e7:d9:e7:cc:9d:d3:8c:7f:b6:72:d9:29:05:e4:0f:2c:82:4c:
70:d4:07:1d:28:90:ef:80:af:05:69:17:eb:9b:c2:df:be:a6:
1a:de:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client