Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-9w3XxJOJNsXFySSI40_TXX0RI0.roa
File: 1-9w3XxJOJNsXFySSI40_TXX0RI0.roa (raw, json)
Hash identifier: 8gsyy5OXXBT8Jeg4A1D6UZvnEVzcsDeZ4wXPUo83svk=
Subject key identifier: FB:DC:37:5F:12:4E:24:DB:17:17:24:92:23:8D:3F:4D:75:F4:44:8D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A085DCAF7C3551A97FEA7008251ACD86D2
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-9w3XxJOJNsXFySSI40_TXX0RI0.roa
Signing time: Wed 09 Sep 2026 11:10:27 +0000
ROA not before: Wed 09 Sep 2026 11:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 109.64.229.0/24 maxlen: 24
109.66.16.0/24 maxlen: 24
109.66.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:dc:af:7c:35:51:a9:7f:ea:70:08:25:1a:cd:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 9 11:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbdc375f124e24db17172492238d3f4d75f4448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fa:ec:7b:c1:9a:16:50:ba:36:df:fa:ba:f6:
8b:35:41:f0:93:3f:49:51:d1:21:f3:11:49:c1:50:
77:cd:5d:5a:b5:ac:da:76:cb:fb:89:7d:c5:fd:43:
53:6f:b9:09:6f:1b:53:b7:d1:20:b3:10:fe:14:ef:
59:51:6a:ca:24:72:0c:da:6b:b2:fc:ae:82:d4:5e:
ec:00:11:59:e5:97:80:12:5f:76:d6:31:d3:4f:17:
83:28:c6:a5:e4:e1:62:b9:cd:4c:d6:8f:db:1f:20:
bb:e9:75:d4:30:4d:b5:49:1c:04:51:74:e2:61:d0:
bf:cf:cb:24:9e:09:ab:59:4c:02:fb:e4:82:71:41:
b4:c2:d7:82:9a:ff:38:89:22:18:ca:ab:78:5e:30:
a5:a2:b1:0e:14:3c:c7:37:35:1a:22:be:12:68:b5:
7b:e5:c4:c4:f7:d5:41:db:e9:91:e3:4d:4c:84:dc:
81:c2:2d:2c:93:ad:5f:b5:93:72:23:b3:33:28:a1:
29:15:9a:4f:30:df:23:25:e7:26:c0:fe:5f:29:9a:
c4:5d:7e:1e:46:76:86:aa:d4:71:b8:27:0b:c7:cd:
69:02:55:da:d2:8c:48:20:b9:59:49:5f:a3:23:4a:
e8:38:3b:6d:c3:30:31:ed:fd:92:5e:f5:f8:11:10:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:37:5F:12:4E:24:DB:17:17:24:92:23:8D:3F:4D:75:F4:44:8D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-9w3XxJOJNsXFySSI40_TXX0RI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.229.0/24
109.66.16.0/24
109.66.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:01:8e:74:e3:c9:0e:2c:28:be:1e:9c:70:1a:0a:45:33:13:
cd:3b:b5:c7:5c:d4:0e:13:97:83:45:3f:aa:f9:d3:25:41:6f:
dd:12:d2:de:ab:35:b2:2e:97:c6:67:63:9f:ea:dd:e7:df:0c:
ec:09:bc:58:94:b5:38:d0:69:9b:7a:22:da:a2:87:2e:05:ed:
35:f8:84:26:65:ed:1c:ec:d2:ff:6d:ef:24:84:dc:45:ab:fd:
c9:b8:54:7a:16:eb:1c:c9:6b:70:9e:47:46:b7:bc:24:d2:49:
41:f3:4c:55:73:f5:f6:af:37:11:4e:13:b4:98:b0:b7:7f:87:
4c:71:45:e0:92:17:0c:5f:37:04:1d:80:22:1c:9b:6e:0c:03:
91:2f:7c:60:58:17:cf:e1:38:58:85:a9:be:4a:12:9b:d2:57:
c7:d6:ae:fc:fd:03:10:ec:72:7e:9c:4a:ef:04:ac:1b:a3:f5:
38:eb:c2:03:03:4a:93:43:ca:28:a3:2b:aa:f9:4a:b1:24:6c:
22:e2:34:6b:6d:30:0b:a4:5a:73:73:80:76:d0:3f:68:a9:cc:
ce:26:73:c5:04:66:5e:37:ca:d6:84:ff:71:96:ba:11:6d:d3:
de:cc:0a:51:4f:4a:ea:74:43:f4:79:ce:9e:1f:9c:4a:ed:32:
70:d9:bb:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:22 2026 by rpki-client