Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3N9DHRZ0e1vIKzHCestRWH7k61U.roa
File: 3N9DHRZ0e1vIKzHCestRWH7k61U.roa (raw, json)
Hash identifier: U/mUVYEWelDcj+b4hMYMFSFZYA+SAcJhiLsNOxVANXk=
Subject key identifier: DC:DF:43:1D:16:74:7B:5B:C8:2B:31:C2:7A:CB:51:58:7E:E4:EB:55
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A048DA7945D7DF35321FF005E6DF552C9D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3N9DHRZ0e1vIKzHCestRWH7k61U.roa
Signing time: Fri 28 Aug 2026 14:51:12 +0000
ROA not before: Fri 28 Aug 2026 14:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.201.87.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
160.19.94.0/24 maxlen: 24
2a0b:ac00::/29 maxlen: 29
2a10:3c83::/32 maxlen: 32
2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 14:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:da:79:45:d7:df:35:32:1f:f0:05:e6:df:55:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 28 14:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcdf431d16747b5bc82b31c27acb51587ee4eb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:e3:e4:39:85:93:5d:8d:43:4a:e5:1b:f0:
6d:3c:e1:87:d0:41:da:ff:56:4e:58:78:f0:57:48:
6c:ad:ce:b0:3d:3d:94:7b:02:39:4d:b0:45:63:ef:
b8:be:77:d0:2f:c1:30:dd:90:44:8f:1d:ce:8f:c6:
5a:e6:10:a6:2e:cc:24:c4:de:04:3a:b8:c4:7e:1d:
1c:6f:14:87:2c:7e:22:04:98:8e:2b:08:8a:0d:68:
f6:b1:71:1e:5e:51:2f:1c:5c:c6:72:03:13:b6:24:
7d:c0:89:b1:17:19:2e:28:8e:11:9e:42:73:d3:ef:
19:9f:01:71:de:ca:fc:06:09:f2:7d:a7:03:71:0d:
23:62:22:43:86:85:37:3c:68:f7:0d:91:c9:4a:a6:
22:68:55:f2:bb:9b:3d:6d:8b:a4:f8:53:b7:ec:29:
78:ab:fd:39:23:22:0a:e3:e7:d5:a0:87:d5:44:43:
0c:7d:63:e2:b7:94:e8:dd:60:b7:f4:a0:e2:f9:5f:
67:d3:9e:70:1f:aa:53:29:78:bd:fc:3b:c8:9a:9a:
bc:5e:1c:67:53:30:8b:3e:a8:f8:99:9c:a0:a1:9b:
be:96:96:8e:2a:db:1b:3b:30:ae:8a:7f:0f:a6:96:
b0:a3:30:a4:b7:f9:89:b3:80:9d:a9:f5:70:e5:64:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DF:43:1D:16:74:7B:5B:C8:2B:31:C2:7A:CB:51:58:7E:E4:EB:55
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3N9DHRZ0e1vIKzHCestRWH7k61U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.87.0/24
91.227.114.0/24
160.19.94.0/24
IPv6:
2a0b:ac00::/29
2a10:3c83::/32
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:bb40::/29
2a14:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:cf:8e:a9:8d:5e:13:79:ee:c2:ae:3c:8a:e2:92:ef:9b:55:
7b:6b:d3:8a:ed:cf:4f:5c:f9:fb:b5:87:8b:4b:ef:93:3d:92:
64:68:b0:e6:4b:e6:25:fc:6b:30:1b:fc:0c:9b:d4:7a:40:5e:
d2:15:4d:10:a3:b7:3e:9d:9f:55:70:9c:97:c5:dd:35:2c:7a:
cb:0b:d5:ee:2e:2e:fe:e0:e9:de:d5:98:e5:37:fd:a3:50:da:
5e:b9:4a:81:09:ef:f5:09:1b:02:1f:15:94:ea:54:2b:05:c2:
dd:08:bd:26:2b:32:24:f9:00:af:9c:48:29:2d:4b:33:15:46:
30:68:86:3c:cf:c0:46:39:f3:d6:7a:1b:fb:9a:7a:d7:2a:94:
34:b8:33:42:60:5d:ae:c2:39:09:ed:64:bb:1f:c4:25:33:49:
14:0b:49:e8:d3:cb:62:a5:72:b5:8a:76:4e:91:44:87:03:43:
18:36:08:1c:49:c1:d9:64:e2:51:e4:35:3a:27:17:17:de:b5:
99:2d:57:55:33:85:d8:6b:96:ad:06:57:81:66:4d:3c:7c:13:
54:b9:b2:14:33:f8:13:a9:f4:3d:c6:b8:e1:30:f9:3c:78:5f:
46:3e:46:69:91:aa:0a:f8:3e:a1:95:ec:74:cc:46:06:8a:33:
2a:8e:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:42:07 2026 by rpki-client