Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/3VepSlTmHW_eB_Bv0piRDBKJiXM.roa
File: 3VepSlTmHW_eB_Bv0piRDBKJiXM.roa (raw, json)
Hash identifier: yYBlQM1YxZbkDK0oXPrCDNvZvoz198amgzf5Vvtfbu0=
Subject key identifier: DD:57:A9:4A:54:E6:1D:6F:DE:07:F0:6F:D2:98:91:0C:12:89:89:73
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A12A96E8A3DDE8B19EC9B53FA7C3E9DE9B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/3VepSlTmHW_eB_Bv0piRDBKJiXM.roa
Signing time: Sun 11 Oct 2026 10:51:35 +0000
ROA not before: Sun 11 Oct 2026 10:51:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 185.254.55.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:96:e8:a3:dd:e8:b1:9e:c9:b5:3f:a7:c3:e9:de:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 11 10:51:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd57a94a54e61d6fde07f06fd298910c12898973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:73:c7:ee:90:43:9c:e4:4e:7b:2c:d6:69:
cb:8c:4b:fa:9e:86:37:19:8a:f4:bd:25:87:0a:07:
7c:28:bd:52:7a:dd:07:3d:8c:0d:7e:c3:72:f5:39:
f4:33:72:fb:56:6b:e7:8a:a5:83:b9:00:a8:ce:41:
2a:2d:d5:9c:3b:43:f8:d6:af:07:47:dd:a4:a5:94:
e4:af:b1:57:4c:ce:67:ab:d5:e7:79:aa:e1:a8:02:
99:14:66:61:40:7e:e5:c8:a6:ee:d8:04:68:ae:b6:
7d:52:75:58:34:dc:d6:0e:f8:6f:0d:60:f6:5b:ec:
69:a8:f4:20:e9:f9:6b:40:18:e3:9a:5c:fa:fc:bd:
dc:f0:91:69:79:8b:a4:75:11:a9:7a:f9:ac:08:98:
a7:03:ae:14:a9:c2:09:0d:86:93:88:38:17:45:0c:
e8:20:08:1a:21:17:07:60:3a:e7:bb:74:f9:47:9b:
c2:24:58:98:23:7d:2f:20:e6:aa:24:76:a4:53:57:
5e:7d:9b:2e:fb:8c:d9:e1:e0:7e:98:c7:a2:80:f6:
d8:97:92:2a:8c:02:b7:15:f0:66:b4:99:ba:f4:8b:
16:a4:39:02:a0:a0:da:00:7e:e1:47:e5:54:8f:42:
56:e1:ae:e6:b2:95:20:11:cf:f3:81:73:00:5c:f6:
e6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:57:A9:4A:54:E6:1D:6F:DE:07:F0:6F:D2:98:91:0C:12:89:89:73
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/3VepSlTmHW_eB_Bv0piRDBKJiXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.55.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f2:09:bf:14:b9:f3:e0:d2:03:e8:76:87:cf:54:88:17:31:
ba:4a:37:3e:bd:6a:2e:a3:4d:4c:99:e5:2f:88:e5:3f:eb:20:
c7:70:fa:47:9b:a2:d3:65:d3:67:8d:4d:05:c1:a2:0d:57:27:
37:2a:39:64:bd:aa:1c:44:72:b2:cc:52:e4:1a:98:a0:ed:5e:
0d:f8:79:07:71:b1:1d:18:73:98:73:65:ce:8a:64:74:d6:eb:
ba:e1:d9:33:48:b8:30:d2:8a:83:78:d3:b3:17:77:94:ef:3f:
b5:10:af:a4:7e:75:e1:43:87:47:94:c8:41:fb:35:7f:5f:ee:
f0:58:8c:cd:54:70:60:29:f7:ac:fe:10:2b:43:a7:78:84:68:
d6:60:59:9f:5e:0f:83:ec:f7:e7:39:19:de:0f:71:e6:1f:1a:
e1:e1:66:27:9b:24:53:8c:77:4e:ff:27:f2:63:59:47:33:38:
0b:0e:73:77:6f:46:0b:9d:df:ee:1e:d2:04:33:03:68:3f:5a:
45:dc:6d:26:3c:be:e8:89:d6:8f:24:7c:eb:8e:eb:3d:d3:11:
23:44:10:76:48:8d:8f:b0:40:0c:4c:5e:b0:4a:04:c3:8b:6f:
6d:e8:56:fc:5b:25:ae:3d:6e:dc:80:53:b8:fe:e7:28:34:aa:
ef:60:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:45:13 2026 by rpki-client