Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa
File: 1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa (raw, json)
Hash identifier: HWSxT5ef2VgW9p6awE9gvEUJX5QnSWl9sjDiEgwfnBE=
Subject key identifier: FB:0B:73:8E:FA:CD:6D:25:C5:B6:5F:83:BB:85:69:F0:03:48:D2:A2
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F09E4C891DD1F467F7BB04392EB763A77
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa
Signing time: Sat 27 Jun 2026 16:23:36 +0000
ROA not before: Sat 27 Jun 2026 16:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 109.66.12.0/23 maxlen: 24
109.66.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:e4:c8:91:dd:1f:46:7f:7b:b0:43:92:eb:76:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 27 16:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb0b738efacd6d25c5b65f83bb8569f00348d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:13:fc:24:ee:2d:80:12:5d:db:cf:08:93:
43:c7:2e:85:f3:f6:f7:8e:9d:9f:cb:f0:de:f9:a4:
92:f3:41:34:f8:cc:c9:5b:b3:dd:88:b3:85:42:9f:
5d:80:ec:13:fc:ab:71:c0:8e:0e:ac:d6:01:6d:c0:
4b:ba:4f:48:cc:0a:9a:99:7c:4e:e4:7a:97:96:e7:
6c:1f:f4:dc:dc:dd:34:a2:e5:07:ce:69:5a:4c:79:
9d:70:8f:03:ad:c4:5a:71:dd:73:d0:7a:96:13:bb:
fe:f2:02:3f:fc:72:48:22:73:f3:db:4b:a7:be:4b:
6d:10:9e:f7:7d:c0:38:71:51:1e:90:87:13:1c:90:
56:8b:71:c3:a8:d8:e7:b5:30:67:ce:3d:39:d4:aa:
51:6f:e4:d3:a2:9a:32:6b:e6:75:43:14:ff:80:87:
80:b1:97:51:7a:21:fb:7a:24:0c:6f:03:d9:49:fb:
9f:3d:1c:68:40:5d:cf:af:da:56:fa:49:c1:74:34:
0d:44:fb:21:28:9a:b4:7c:04:53:ba:3a:f3:14:6d:
99:b0:2e:e9:2c:87:c5:7f:c1:64:6a:c4:74:9e:c3:
82:2b:73:bd:fd:b3:a9:07:70:fd:dc:87:52:2d:09:
9e:ad:85:d7:71:a3:24:8f:fb:8f:ea:f9:35:1d:67:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:73:8E:FA:CD:6D:25:C5:B6:5F:83:BB:85:69:F0:03:48:D2:A2
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1-wtzjvrNbSXFtl-Du4Vp8ANI0qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.12.0/23
109.66.128.0/23
Signature Algorithm: sha256WithRSAEncryption
21:9e:1d:d5:46:5c:bb:54:71:75:68:72:09:de:9c:5a:f4:17:
61:10:1e:0a:fa:95:39:8a:57:f8:b3:66:64:e5:c1:e2:9c:48:
15:bd:d2:ef:3a:15:b3:46:7b:74:ec:0d:64:c5:48:21:e9:90:
ef:fd:9d:e2:0d:d3:41:89:3c:ef:e6:dd:5b:3b:66:43:c4:f8:
3f:05:25:87:3a:ef:5f:10:d7:41:68:d6:d6:ed:c1:b3:ea:f7:
5f:07:dc:2a:37:27:b1:3f:16:e0:00:91:55:7c:91:62:9d:23:
85:13:d7:51:0e:6d:74:4f:bb:d8:fa:c1:23:c8:2e:95:15:c7:
59:b3:1a:c8:8d:f3:9d:75:40:4b:d9:0d:70:48:c8:99:13:fa:
d4:8c:bc:8b:73:d7:53:5a:9b:64:50:37:f7:41:fd:e8:06:8f:
5e:48:29:08:f3:23:c6:c7:ef:53:b0:19:99:5d:7d:d7:28:6e:
00:dd:9e:6c:2b:6b:c7:86:bc:02:34:03:6d:4e:7c:03:78:18:
b1:df:5e:79:c7:23:94:2c:1a:c1:95:d6:6f:e7:5d:a4:35:51:
70:a3:7b:9b:ed:84:62:94:e9:a4:0c:d4:8e:20:54:79:ab:a1:
18:f5:08:2c:ba:7f:61:14:99:15:47:b3:93:a3:15:fc:0f:15:
c9:86:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client