Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_3W_6KkewlTCipX-I8cKO1-LysM.roa
File: _3W_6KkewlTCipX-I8cKO1-LysM.roa (raw, json)
Hash identifier: JHXLKNwwVA0bOjN/vy4IrS/cc6QCl8TVn1ZJA5gtH+U=
Subject key identifier: FF:75:BF:E8:A9:1E:C2:54:C2:8A:95:FE:23:C7:0A:3B:5F:8B:CA:C3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EA66D5AD89D409F78356573E15244672B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_3W_6KkewlTCipX-I8cKO1-LysM.roa
Signing time: Mon 08 Jun 2026 08:50:44 +0000
ROA not before: Mon 08 Jun 2026 08:50:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:6d:5a:d8:9d:40:9f:78:35:65:73:e1:52:44:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 8 08:50:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff75bfe8a91ec254c28a95fe23c70a3b5f8bcac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:a8:9f:a7:5e:5d:44:66:5d:46:8f:77:b7:
c6:8f:75:d1:0f:df:e3:fb:7d:a2:51:29:6f:4a:0d:
40:fa:9f:c7:e3:4c:d1:e3:23:46:4e:de:9b:77:e8:
c9:f6:91:f5:9c:d5:2b:fd:37:29:42:97:e1:76:02:
0a:84:d0:be:ec:dd:9f:bc:58:3e:58:0c:a3:b8:13:
80:82:d7:dd:30:76:01:f1:44:c3:46:c0:3c:5e:d6:
8f:f1:08:8a:ec:45:6d:53:f5:b3:97:f9:28:ce:18:
9b:26:b7:61:70:bb:0c:84:5e:d4:62:09:60:fe:b3:
49:78:69:80:cb:10:43:05:87:71:d4:c9:5a:bf:c8:
61:4d:0b:e1:2a:2f:97:5e:69:47:76:71:67:c7:8e:
cf:7d:71:fe:32:49:d3:50:31:73:97:0f:72:9c:7c:
e3:18:c6:8d:7b:ef:6b:1a:5a:3e:83:c2:0a:63:9a:
7d:17:97:8c:a3:1d:41:0b:d0:87:c5:6f:75:60:07:
ba:1f:0a:6d:7e:87:9c:91:97:2c:7d:b2:e8:33:3d:
f6:f3:99:45:53:b6:d3:2b:04:4d:32:f6:5f:74:2c:
ff:82:46:e1:15:e3:fb:13:19:2a:dc:15:59:04:e5:
1f:a2:63:5f:08:bc:f5:c4:e8:93:1c:e5:15:43:3a:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:BF:E8:A9:1E:C2:54:C2:8A:95:FE:23:C7:0A:3B:5F:8B:CA:C3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_3W_6KkewlTCipX-I8cKO1-LysM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:bc:7b:e0:29:55:ce:71:f1:ae:7a:85:e5:64:f1:bc:d5:ad:
ed:27:c5:34:89:04:b0:a6:21:e6:8a:75:ab:d4:ba:e5:78:dd:
b4:44:dd:5d:96:ad:e5:c4:fc:44:2e:41:a0:bb:b8:83:41:13:
43:22:e0:98:f7:13:11:1f:3e:ef:95:7c:bc:65:95:43:7a:b6:
7d:ea:6e:33:08:3b:fd:32:27:1f:90:52:40:13:3b:be:8b:68:
25:59:16:bd:71:73:95:71:0d:b5:7d:ae:ba:c0:33:b3:e3:0d:
23:55:6b:6e:5d:40:76:76:0c:9a:52:75:de:17:dd:24:22:42:
a0:68:8c:9b:fe:21:66:28:ff:ac:18:ec:f4:27:ea:c9:60:38:
c4:92:99:8f:b5:c8:0f:c0:cf:dc:b5:ac:6e:e8:88:4f:a6:67:
d2:cb:dd:30:ba:0b:29:a2:9a:3e:25:d5:56:15:45:19:88:6e:
c2:36:af:6b:0f:7f:0f:26:15:bb:b4:46:c7:6d:45:6f:96:11:
1c:b2:e1:82:98:79:ec:dc:83:83:4d:84:3b:d2:2b:70:8f:72:
77:ab:1a:1e:d5:01:b5:df:cb:2c:09:f1:94:39:89:20:63:ae:
48:5a:41:29:3f:eb:58:97:d7:c9:42:5f:81:8f:03:13:8c:8c:
27:91:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:11 2026 by rpki-client