Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1DKu0c_sLZxaStiE0BXfwHqXiI4.roa
File: 1DKu0c_sLZxaStiE0BXfwHqXiI4.roa (raw, json)
Hash identifier: WM7+35GuNKGYntQ4c1Db4irHzKHE7NeDcFtMUHStVS0=
Subject key identifier: D4:32:AE:D1:CF:EC:2D:9C:5A:4A:D8:84:D0:15:DF:C0:7A:97:88:8E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF4CB98EA7012AA221D11CECC1D065157
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1DKu0c_sLZxaStiE0BXfwHqXiI4.roa
Signing time: Wed 12 Aug 2026 07:06:51 +0000
ROA not before: Wed 12 Aug 2026 07:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 109.66.44.0/24 maxlen: 24
109.66.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:12:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:cb:98:ea:70:12:aa:22:1d:11:ce:cc:1d:06:51:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 12 07:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d432aed1cfec2d9c5a4ad884d015dfc07a97888e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:2a:35:cd:80:45:ef:18:ce:96:05:20:51:
b9:37:2d:d3:cb:bd:80:84:86:4c:49:61:87:7c:d8:
cc:b1:13:1c:81:81:e3:6c:b2:8b:f2:fe:46:60:ef:
e6:34:1c:5b:c4:d5:ca:28:cf:9a:65:0e:08:21:85:
b3:eb:d3:5f:35:44:e4:61:7f:da:32:38:af:eb:f6:
7b:e5:c7:f6:c1:93:2e:82:1f:6f:60:d3:7f:76:17:
6f:7a:c0:fc:99:cc:e2:95:a4:8e:bc:7e:cc:1d:f9:
98:47:29:24:3c:61:3b:4d:e5:8c:8e:df:4b:bf:38:
d3:33:fd:f9:25:01:a1:06:c1:a0:d9:b7:c8:72:66:
84:42:87:e0:37:d0:03:61:c3:5e:cd:50:03:e0:61:
53:65:a3:ce:6c:36:8b:76:36:8f:37:40:db:f3:88:
ad:2b:96:d5:e3:a7:e4:78:27:cd:81:38:1f:3a:96:
19:18:7f:31:d0:b8:44:8d:45:2f:36:b3:89:05:b2:
1a:f5:e0:55:a7:0d:da:d6:46:4c:61:cf:e7:73:c4:
0b:f1:d2:47:ed:74:58:1b:e9:3e:79:0d:fc:f8:23:
b8:e4:4f:32:e9:5d:81:49:99:60:e4:72:a2:01:a7:
e4:99:01:5a:70:9a:36:12:53:f6:04:8d:0d:dd:2b:
17:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:AE:D1:CF:EC:2D:9C:5A:4A:D8:84:D0:15:DF:C0:7A:97:88:8E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/1DKu0c_sLZxaStiE0BXfwHqXiI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.44.0/24
109.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:72:77:20:4a:5a:c2:c0:44:22:51:8d:a6:f2:16:d4:31:1f:
1b:2d:61:a9:ea:e8:cf:a0:eb:61:e9:85:70:c5:7a:c1:1e:d4:
bb:82:1a:b4:23:2f:50:81:bf:3a:a1:51:e3:a5:c3:23:fe:2d:
44:4d:54:82:d0:f8:95:2a:52:13:54:08:fe:0a:d8:a2:e7:43:
9e:8e:d5:45:86:cb:b8:a7:0f:08:66:1e:c4:55:2c:74:e5:4e:
20:76:64:a2:c4:a2:e2:0e:2a:7b:a0:86:3c:2e:67:57:6f:b0:
85:d5:1e:58:e6:bc:a3:f7:cd:67:a9:f6:e3:04:6f:ea:b7:e8:
2f:b1:61:2c:bd:7a:f7:95:f1:bc:54:00:2d:cc:bc:18:5d:76:
50:2e:ad:f1:ae:5d:8e:0b:d3:b2:7b:79:60:e4:a7:89:48:16:
cd:5a:bd:63:18:ee:f2:62:ab:73:8b:83:6a:cc:3e:07:66:61:
23:45:40:82:ca:b6:c0:ea:e1:ef:7e:18:77:6e:b9:70:a9:c0:
34:3b:a0:1d:2d:25:60:0b:4c:e8:cf:59:4e:b0:ba:84:f9:3b:
08:98:e6:87:9b:c2:15:b2:e0:66:83:fd:7d:16:0b:30:86:02:
80:9e:fd:28:c7:c3:15:dd:d2:d0:d2:7c:04:43:5d:83:06:b9:
83:5b:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:08 2026 by rpki-client