Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa
File: 1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa (raw, json)
Hash identifier: JVBp0Qb89/mhP12xiMfYCu073UdqTnLDo0xQ4I+RS08=
Subject key identifier: FA:D2:DA:DE:E4:25:2A:A6:0F:50:35:E2:A3:38:C7:86:71:84:B6:85
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F09E3DFCF52FB16570F8A6230C511C55B
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa
Signing time: Sat 27 Jun 2026 16:22:36 +0000
ROA not before: Sat 27 Jun 2026 16:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 109.66.20.0/22 maxlen: 24
109.66.20.0/24 maxlen: 24
109.66.21.0/24 maxlen: 24
109.66.22.0/24 maxlen: 24
109.66.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:e3:df:cf:52:fb:16:57:0f:8a:62:30:c5:11:c5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 27 16:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fad2dadee4252aa60f5035e2a338c7867184b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:4c:9a:a0:c9:94:f4:22:73:d1:24:ed:18:
85:da:a4:6e:e8:66:3e:b5:c8:71:66:00:cd:03:8a:
dd:5b:37:ce:4e:17:82:67:d6:c8:1a:07:ce:77:83:
e3:44:44:7a:19:39:22:e8:b0:de:2b:43:b9:b9:9c:
74:c9:ce:99:d1:54:1a:a2:0f:a0:33:ef:5d:f9:d5:
f1:c4:00:98:08:9b:56:dd:08:6d:ad:96:3c:5b:fa:
e7:56:f1:a8:62:3b:c3:57:fd:b6:30:cd:be:51:3d:
70:ca:02:da:3f:0a:12:eb:63:a2:12:08:6e:43:a6:
23:33:3c:63:57:e8:85:c2:0e:ef:b5:44:2d:80:63:
c1:b8:0c:6f:1f:d0:ca:b8:cc:3a:de:11:93:bc:4f:
95:48:e9:ed:8c:46:ff:3c:4b:c3:ff:62:73:e6:4b:
5e:9e:82:ea:f6:34:fe:53:27:30:5c:b6:37:a5:cc:
70:55:ba:df:0e:3a:ee:57:60:f2:49:6a:ab:31:43:
2f:d5:d1:ad:92:d7:a2:18:87:75:9c:ca:22:d6:50:
88:0d:3b:e5:7c:14:27:cd:58:5c:dd:86:9a:19:b7:
84:d1:50:3f:4b:ac:d6:53:0a:cd:90:71:ce:3b:45:
0d:a7:31:f9:66:ad:ce:65:b2:5e:24:f7:99:b7:d6:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:DA:DE:E4:25:2A:A6:0F:50:35:E2:A3:38:C7:86:71:84:B6:85
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-tLa3uQlKqYPUDXiozjHhnGEtoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:d9:38:aa:82:3b:2f:60:2a:88:2d:18:0b:ab:47:71:d3:55:
3c:f0:49:39:74:e0:9b:2f:0c:fe:4c:8a:68:3c:4d:07:33:0f:
14:a3:34:8f:20:77:61:b9:21:79:28:99:61:b4:aa:b3:99:c4:
4c:6e:cd:59:93:13:72:85:d4:08:34:b5:43:cd:69:00:a3:46:
2b:a8:64:e3:34:65:6a:f8:7f:12:a6:8f:17:5c:c1:eb:0f:35:
87:1b:5f:ac:e5:56:ba:a4:a1:0b:76:15:af:2d:9d:f3:aa:e5:
40:41:c0:64:20:34:d2:0e:42:f4:5c:a4:6a:65:49:f5:8d:6f:
1e:da:8e:17:d8:53:13:54:32:e9:cc:69:b9:51:fa:95:f5:bd:
c7:04:33:28:3c:c2:72:86:86:f4:65:3c:9a:e2:54:e8:c3:29:
95:c7:64:fd:4f:8c:ed:34:52:47:b5:bd:75:7f:58:dc:37:0f:
b2:04:e7:be:3a:57:7e:d1:da:d1:d3:6c:bb:17:ab:69:47:a2:
b3:9d:3d:3a:07:b9:43:6f:e4:23:37:98:c2:72:4e:75:2a:2c:
a4:94:3c:12:c2:e0:9e:95:87:94:29:47:ce:1f:71:7d:ee:e3:
64:1c:5d:d7:7d:88:46:9b:9e:4f:e4:06:90:50:25:c6:bd:1d:
c1:82:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:28:08 2026 by rpki-client