Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/24akyMR_PPjN-8iURmGLIi8Hhzc.roa
File: 24akyMR_PPjN-8iURmGLIi8Hhzc.roa (raw, json)
Hash identifier: liVOUJ/Ipi/txROB9UIQmB6tFXMZEqiD6/HH7+bKdHE=
Subject key identifier: DB:86:A4:C8:C4:7F:3C:F8:CD:FB:C8:94:46:61:8B:22:2F:07:87:37
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F03B3178370C17A3390CDA0E2DD3A6ECC
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/24akyMR_PPjN-8iURmGLIi8Hhzc.roa
Signing time: Fri 26 Jun 2026 11:31:36 +0000
ROA not before: Fri 26 Jun 2026 11:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 109.66.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:b3:17:83:70:c1:7a:33:90:cd:a0:e2:dd:3a:6e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 26 11:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db86a4c8c47f3cf8cdfbc89446618b222f078737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:8a:16:77:08:7e:c5:a9:f4:1a:0e:73:ae:
f4:05:e8:d6:be:55:df:1f:13:6b:29:0d:e1:0c:46:
ce:57:16:bc:af:1e:76:0c:45:70:79:70:97:c1:0f:
98:ac:82:b9:56:e3:36:5e:1f:71:91:f5:7e:f7:d5:
bf:a7:ec:b9:ec:83:ab:56:fa:a2:cb:79:7f:3d:ff:
0e:9c:1a:cf:2a:1e:b9:24:c9:ac:3c:b7:a4:cb:bb:
45:04:5e:53:5c:6b:09:bc:17:a6:c4:16:99:5f:7e:
28:b3:7b:52:e9:10:c9:83:72:a3:8c:8f:8e:b9:5b:
13:58:20:2d:0b:db:2e:1f:ad:24:9c:fd:be:6f:87:
5a:65:ad:8c:9b:d9:6f:b4:b6:60:80:7f:5f:c1:5a:
ce:8e:59:1d:93:6d:ae:cc:c0:76:de:42:a0:d2:0f:
08:50:de:f4:55:cb:f9:aa:1e:aa:cd:30:a1:fc:0f:
7a:f0:3d:63:e1:a6:20:49:ff:68:fc:9f:34:0f:b8:
a9:3e:da:b0:42:62:90:df:d4:7f:97:0f:5f:e7:69:
40:b6:23:00:67:9f:d0:b2:9d:72:8d:f4:48:ae:d0:
3f:8d:98:20:67:a3:00:df:64:6b:63:8f:b0:78:93:
78:cb:49:3c:5d:1a:22:fd:52:80:ac:1e:5c:be:cb:
e7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:A4:C8:C4:7F:3C:F8:CD:FB:C8:94:46:61:8B:22:2F:07:87:37
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/24akyMR_PPjN-8iURmGLIi8Hhzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:cd:00:a4:a5:4e:81:96:79:a4:6f:b1:48:2d:d9:57:20:a8:
74:56:bf:98:75:6a:1b:01:2d:37:24:c1:b6:c7:33:1f:fe:8d:
05:71:55:78:59:85:d2:78:97:6a:ac:56:1b:11:eb:60:db:5d:
2d:ac:c5:4f:06:5f:5a:c7:4c:6d:d1:44:c5:75:43:34:c5:79:
59:db:b0:46:91:70:2f:0e:e9:dd:b7:69:0a:07:24:e5:d3:9f:
81:2c:bc:3f:98:fb:7d:2a:bd:47:da:7d:a1:86:d0:5c:ea:da:
78:77:e8:18:e9:d7:e2:70:69:5c:84:ce:5b:48:34:bd:ed:8e:
de:fd:47:8a:05:1c:74:6d:85:c8:de:6e:77:b5:04:e2:7b:2a:
e7:86:6f:fc:91:c9:f6:e2:ff:f5:d2:aa:b5:18:8e:97:64:a0:
d5:b0:71:ec:3a:07:bb:a6:b4:d2:8a:f3:5c:88:e9:dc:ca:8f:
51:1f:d0:bf:36:5d:92:94:01:25:23:68:d8:25:f0:5a:40:61:
d4:ae:ea:d2:a3:c2:1d:df:11:39:fa:50:3d:50:01:17:5a:4f:
c1:38:51:28:ee:8c:34:cd:b7:27:d9:fa:1b:03:d4:bf:43:0c:
15:9d:11:af:7f:25:7f:5c:c1:e8:87:c9:80:88:49:2d:76:ee:
c2:4d:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:49 2026 by rpki-client