Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3yxbtyPDtU49jZVNkGvnozmgd14.roa
File: 3yxbtyPDtU49jZVNkGvnozmgd14.roa (raw, json)
Hash identifier: y6sDWolJWzbitCNJ7V6tjwzuA0A+jAwchVui0GmW/20=
Subject key identifier: DF:2C:5B:B7:23:C3:B5:4E:3D:8D:95:4D:90:6B:E7:A3:39:A0:77:5E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A01A34924DAC2956FC18F3ADCD15CA0FA4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3yxbtyPDtU49jZVNkGvnozmgd14.roa
Signing time: Wed 19 Aug 2026 13:27:27 +0000
ROA not before: Wed 19 Aug 2026 13:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 45.138.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:34:92:4d:ac:29:56:fc:18:f3:ad:cd:15:ca:0f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 19 13:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df2c5bb723c3b54e3d8d954d906be7a339a0775e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:6a:59:fc:6e:a5:a7:d3:cf:3b:e0:9a:15:
9c:4d:2e:87:6b:f5:82:d6:c4:d8:6e:58:52:8e:f7:
b4:d4:7c:11:15:65:22:5f:d9:d2:cc:83:98:30:9c:
fe:31:65:3c:68:0b:7b:9b:df:0c:3e:35:f1:e7:89:
3f:99:e5:e1:45:a6:2a:19:fb:b9:1b:da:eb:cc:3e:
82:8c:5c:32:43:4b:24:01:90:bd:a1:aa:15:30:17:
9e:c7:07:c1:ff:c0:58:58:83:a2:64:19:47:0a:48:
25:35:aa:5c:b5:1f:9d:a6:f0:4f:ac:77:00:9c:59:
0e:58:04:c3:bb:25:83:e8:75:52:df:13:3f:04:3c:
96:c5:2b:2e:94:56:77:2c:b7:fd:fc:80:2c:41:fe:
4c:bf:a2:70:d0:96:c5:47:eb:50:18:23:58:0d:00:
95:98:7b:39:b0:d6:e9:cf:21:46:dc:3b:8a:00:bb:
1f:08:9f:71:c5:21:9b:0f:58:31:0f:6e:46:a3:d5:
20:de:05:b1:90:92:3c:20:58:28:16:4e:cb:9d:dd:
b1:d8:c8:86:83:4e:6d:c4:ef:11:a3:29:9f:c9:92:
88:e9:f2:23:78:c0:90:ac:cb:7a:54:ed:d1:e8:bc:
90:6c:df:61:5e:eb:f1:d8:04:9f:45:b2:e7:93:d3:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2C:5B:B7:23:C3:B5:4E:3D:8D:95:4D:90:6B:E7:A3:39:A0:77:5E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3yxbtyPDtU49jZVNkGvnozmgd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2f:78:7b:21:cb:b2:1d:9f:e2:ec:d4:ba:31:57:44:3f:0b:
aa:aa:68:25:a6:d4:af:4b:6a:fc:72:07:90:f4:62:f2:66:c9:
3a:e7:7c:2f:87:74:3f:cb:9b:eb:97:42:90:28:48:0f:b6:74:
3f:fb:78:f5:e7:8f:91:16:c1:3b:7c:20:22:72:f0:07:95:4f:
39:80:25:ee:d2:2f:74:0e:0e:f4:95:ce:fc:c3:51:53:d3:b3:
2e:62:3b:bc:61:80:93:1a:d8:45:be:c2:32:0c:9b:08:20:cd:
c2:c7:78:a6:55:f0:1c:9a:29:03:5d:aa:af:bb:cd:06:df:af:
8f:62:26:d2:c2:e4:ef:fe:41:74:77:e6:f2:5d:7d:f2:32:95:
63:55:95:bb:05:bb:24:b8:77:04:5a:0f:5c:f5:cc:f1:65:da:
ff:c4:06:86:93:5a:d8:6a:1d:eb:50:da:66:39:0a:8d:a8:e1:
b0:ee:3c:a1:09:00:c8:ba:44:0b:72:c7:b6:4a:3c:21:78:3f:
80:e8:b7:d0:42:ee:f8:8e:ab:4a:8f:9f:01:c9:00:28:28:1a:
19:b4:91:e1:1c:c4:e1:14:dd:67:5a:07:78:d0:0a:82:18:00:
f1:63:10:fe:86:88:e7:f0:a9:44:60:15:db:9e:25:fc:01:52:
e2:41:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:35:40 2026 by rpki-client