Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/O3-c_XOyTRwcf9wBQu8fIR1gSjU.roa
File: O3-c_XOyTRwcf9wBQu8fIR1gSjU.roa (raw, json)
Hash identifier: wTGsA/VH9Jls170ZqEzqHH/9TCp42eyZTHQYUB7l4Bg=
Subject key identifier: 3B:7F:9C:FD:73:B2:4D:1C:1C:7F:DC:01:42:EF:1F:21:1D:60:4A:35
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 019DA11E25DC68D38204E988E171C7F253F2
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/O3-c_XOyTRwcf9wBQu8fIR1gSjU.roa
Signing time: Sat 18 Apr 2026 15:03:20 +0000
ROA not before: Sat 18 Apr 2026 15:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 5.178.107.0/24 maxlen: 24
45.12.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1e:25:dc:68:d3:82:04:e9:88:e1:71:c7:f2:53:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Apr 18 15:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b7f9cfd73b24d1c1c7fdc0142ef1f211d604a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:0c:15:af:9b:99:2b:a7:87:35:ad:77:42:
af:dd:ad:9d:51:be:9f:2f:fe:fc:37:84:60:9c:8d:
cb:06:e3:f2:a2:8c:1f:a1:c7:44:1a:d6:79:c4:6f:
30:e2:90:da:04:69:32:bb:1b:e6:19:ea:25:d2:93:
5b:4d:07:1f:d0:2a:f0:4f:a7:3a:b5:c4:e6:71:cc:
98:0c:5d:fd:81:fb:7d:aa:de:ef:14:83:04:98:2c:
d3:0a:e1:69:38:38:cb:94:48:e0:b4:1e:1a:29:b7:
ec:d8:4b:63:b9:f6:8b:d9:8c:3f:b7:69:1e:6d:9b:
8a:94:7f:10:db:99:78:73:aa:1c:01:b9:6c:d5:80:
05:07:d5:ef:5d:e6:70:f8:97:18:20:81:3e:12:26:
5c:9f:09:35:5f:fb:e2:18:c7:07:d4:1b:17:d4:5d:
19:7a:2f:41:63:c9:a1:8c:d8:d9:5c:f8:87:42:29:
59:83:ef:a1:e3:ce:42:b9:a0:95:45:e8:a8:47:9d:
88:59:c3:d0:2b:06:bc:a7:9e:14:bd:ee:14:a6:91:
71:89:87:e1:e9:d3:2e:ff:85:99:1d:b8:1f:be:fd:
55:d5:bc:ec:7d:4f:38:9d:ef:d5:2b:1d:f4:f0:5a:
1d:31:41:39:24:33:92:6f:4e:1c:cd:d1:6d:a5:ba:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:9C:FD:73:B2:4D:1C:1C:7F:DC:01:42:EF:1F:21:1D:60:4A:35
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/O3-c_XOyTRwcf9wBQu8fIR1gSjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.107.0/24
45.12.218.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0d:b4:62:d1:99:7a:b2:ad:c8:b8:d4:f1:95:a6:5e:a5:87:
a3:3c:52:ee:e2:cf:47:61:f9:13:f7:35:d7:c0:1e:1a:38:5a:
11:f6:6e:32:23:63:2c:ec:36:f7:e0:49:d8:23:cd:fa:4b:53:
3c:75:d2:78:b1:10:a4:51:7c:c7:73:d7:dc:37:5a:06:ba:2e:
4a:c9:f9:22:2b:6a:2e:ea:25:97:77:c2:bc:5f:51:79:e9:1f:
68:ff:58:50:59:06:78:94:69:49:42:7e:bc:8a:42:bc:92:24:
aa:d5:03:83:15:dc:71:61:e3:e0:6b:db:ee:f6:e1:7e:a8:41:
07:37:28:39:72:c6:52:f1:7c:1e:b2:99:cd:d4:b8:af:18:03:
5b:2c:17:78:b4:95:bb:10:47:07:eb:c3:4c:a1:40:e4:8b:2f:
01:47:33:4a:d9:82:97:2c:d7:3e:5e:35:28:fa:19:bf:fb:4a:
fa:cf:73:bb:d7:35:db:a5:0d:8a:7e:da:c1:7f:b1:8d:64:7d:
db:ec:ec:a8:b7:11:27:f5:20:bd:e1:07:f2:02:f1:97:13:2b:
7b:50:d7:59:56:a2:d4:49:6c:48:95:d9:a5:d0:1c:f4:c1:a4:
75:57:4c:4e:63:48:7d:a3:2d:9c:7d:ec:15:85:07:3e:c4:26:
8b:66:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 11:09:22 2026 by rpki-client