Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3muR5O-IyRerSE-j7hHVckSSe1E.roa
File: 3muR5O-IyRerSE-j7hHVckSSe1E.roa (raw, json)
Hash identifier: 8o7BHilPjcSUcWBknUUHkWCdhDdKn9WDOjc/nf3m94c=
Subject key identifier: DE:6B:91:E4:EF:88:C9:17:AB:48:4F:A3:EE:11:D5:72:44:92:7B:51
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691C3E42F0824A1D6297E2EB26B6F8
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3muR5O-IyRerSE-j7hHVckSSe1E.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212920
IP address blocks: 195.65.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:3e:42:f0:82:4a:1d:62:97:e2:eb:26:b6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de6b91e4ef88c917ab484fa3ee11d57244927b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:6e:f4:5b:4c:4f:7d:59:da:28:70:ec:dd:
5d:93:5c:76:4e:90:18:51:e6:8c:df:b9:d7:fa:43:
a0:f6:af:b8:72:41:fa:80:47:d2:7f:e0:3d:04:ab:
94:02:be:2e:57:59:c8:b2:fa:20:63:b1:f1:ec:19:
8d:3c:b4:50:44:34:71:ea:cb:8e:e9:73:1d:19:40:
2f:ae:75:48:37:a6:46:cf:f6:d3:67:3f:0e:af:a7:
e1:9c:2e:36:29:5a:7c:f2:bd:e1:ce:d9:98:fe:e6:
f3:6f:19:9b:29:94:eb:2e:b5:04:f9:1f:09:ee:3a:
14:b5:9d:ee:b2:e5:5f:7e:66:17:d8:00:36:7b:fb:
39:7e:42:d5:a5:ea:0a:5f:65:65:8b:7f:a7:18:bc:
a1:5c:84:14:30:14:4b:50:47:4d:f1:b0:9a:25:83:
9b:92:53:f7:ec:c6:78:57:9b:be:50:e4:4d:72:00:
38:1f:e5:96:57:bb:54:d1:a6:c1:48:74:f4:cc:a7:
2e:cd:33:ce:59:f4:ad:3d:1d:ad:b8:5a:fd:ad:35:
78:84:0e:64:8f:e2:4c:ed:6c:7b:d9:1d:13:50:68:
d9:20:ff:78:18:6c:4c:2f:05:e3:0e:1b:9a:8d:7c:
2b:47:26:fa:a7:f9:9f:c1:d2:e6:b1:3f:67:35:f8:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:91:E4:EF:88:C9:17:AB:48:4F:A3:EE:11:D5:72:44:92:7B:51
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/3muR5O-IyRerSE-j7hHVckSSe1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.91.0/24
Signature Algorithm: sha256WithRSAEncryption
43:3d:96:4d:30:f8:51:1d:51:d4:c2:f1:5d:64:03:07:ee:3e:
a7:2f:84:f2:bf:36:aa:20:87:20:00:52:84:aa:14:ae:55:e7:
40:d6:89:47:4f:9c:47:7c:ce:70:17:1e:17:c3:ec:38:64:25:
82:2d:2e:23:5d:79:15:78:1a:90:35:06:57:dd:45:01:81:d5:
5d:73:5a:f7:5e:f0:b6:07:a3:10:ad:17:87:a5:c9:2f:f8:57:
c3:ad:cf:55:c8:7c:9d:01:f8:9a:b7:f2:c9:36:04:c6:57:92:
a2:84:6f:3f:f3:3b:6a:73:ef:62:be:2c:e0:64:76:15:0c:f3:
9a:3e:4b:13:e2:16:eb:be:8e:2e:2e:86:65:a0:c1:69:84:23:
0a:e3:09:d2:2a:bd:6d:c0:a1:69:b5:4c:4d:e3:a4:d5:3d:e5:
6a:7a:3e:90:d5:1e:27:3a:e2:02:f9:89:84:1f:3f:9f:2d:b6:
b2:ad:b4:86:25:33:42:57:e1:35:fa:95:a3:83:c5:96:60:88:
5c:06:a9:b8:17:3b:89:4e:d5:30:86:ee:83:54:13:06:47:00:
60:8d:3c:03:0b:86:2b:94:f8:3e:5d:0c:1f:81:03:f1:11:3e:
44:28:9b:59:d7:51:dd:36:66:0a:80:1d:b5:a8:ec:1a:8f:5f:
4c:5b:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:26 2026 by rpki-client