Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2xRAus9ZTj-1M4qW1nWpnATSDUE.roa
File: 2xRAus9ZTj-1M4qW1nWpnATSDUE.roa (raw, json)
Hash identifier: LEdI6t9Zect4/ADMlvCUxFwxjIflnuU0tUVcP9YWgxU=
Subject key identifier: DB:14:40:BA:CF:59:4E:3F:B5:33:8A:96:D6:75:A9:9C:04:D2:0D:41
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FD5270E34FB1A35B174B8761AEE822C52
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2xRAus9ZTj-1M4qW1nWpnATSDUE.roa
Signing time: Thu 06 Aug 2026 03:38:54 +0000
ROA not before: Thu 06 Aug 2026 03:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133199
IP address blocks: 109.66.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:27:0e:34:fb:1a:35:b1:74:b8:76:1a:ee:82:2c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 6 03:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db1440bacf594e3fb5338a96d675a99c04d20d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:a1:95:fd:5a:7c:dd:6c:ef:41:80:c1:6f:
34:12:5a:9f:de:98:95:4f:57:ee:ec:36:8b:66:2b:
32:09:45:3a:02:9f:60:44:3b:b5:fd:2c:36:aa:00:
2a:00:43:2c:04:fc:12:9a:17:d1:c0:92:4e:bb:61:
9e:d0:7e:69:b3:a1:b2:44:42:c6:54:8d:c5:b6:56:
6e:e4:e8:de:8a:45:15:24:bd:98:1d:ed:bd:2a:51:
06:ed:0b:64:c2:d4:29:9f:6a:9b:ee:fe:ea:17:97:
0f:2d:84:73:1d:c2:a8:52:7c:b7:cc:3d:db:d0:1b:
c4:f4:e6:90:00:f7:78:99:68:8b:c8:fa:db:38:ea:
f8:2f:94:d7:a8:20:95:3b:90:51:44:92:d9:5c:a7:
76:1d:b3:30:ad:89:16:61:e7:ae:30:70:e5:18:50:
0b:10:52:04:89:99:98:4e:5b:ec:f5:06:4e:1e:56:
4c:a6:68:9d:97:60:28:4b:c5:d2:f4:c4:79:d1:5a:
9d:87:13:d4:80:a3:03:9f:71:e7:05:9d:8b:76:38:
65:0b:56:6d:53:33:79:a4:af:2d:67:98:0f:d3:60:
94:d3:3a:5b:33:7a:79:09:6d:72:fa:7a:31:47:44:
bd:f6:de:90:f9:53:21:c6:6e:cd:e4:b3:e0:a3:d9:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:40:BA:CF:59:4E:3F:B5:33:8A:96:D6:75:A9:9C:04:D2:0D:41
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2xRAus9ZTj-1M4qW1nWpnATSDUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.112.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:8a:07:06:19:7f:16:52:fc:4c:f0:5c:bd:da:e3:9c:a1:82:
f5:f3:e7:1d:83:ca:71:67:81:ea:4a:91:17:64:9b:5b:75:e9:
06:64:dc:bf:1a:7e:9e:71:df:cc:84:c8:74:96:2e:46:ae:5b:
33:e4:2e:fa:1b:61:6d:dd:75:fd:38:bc:bc:ef:1d:09:e0:b7:
d4:38:d0:9b:b7:21:4c:4a:b9:a7:60:bb:5d:02:5e:04:94:8b:
18:40:53:db:b7:22:db:f2:53:96:bd:4e:6a:2e:3b:a8:fa:91:
2c:5d:80:43:aa:fb:2e:bc:3d:9b:ba:39:21:c5:71:70:52:fd:
b4:b8:72:7b:26:d0:07:42:33:ca:26:29:e7:aa:e6:6e:85:c9:
ea:73:5b:44:67:ed:49:d3:a1:ce:52:14:db:ec:ea:be:09:43:
ae:70:31:e6:37:1e:a1:3d:b2:7c:f7:fe:ea:1a:82:a0:21:d8:
1d:6c:2b:85:67:f6:10:e3:87:ba:e6:5a:bb:14:b4:1b:20:d8:
cf:d6:1b:1d:47:3e:3e:84:d0:14:8f:76:60:58:8b:cb:52:1a:
e7:8f:45:eb:fd:9f:52:7f:3a:fa:50:d0:89:cb:95:24:cd:9c:
f5:86:82:19:41:58:e1:44:ad:36:f5:35:38:69:89:7b:84:97:
2d:4e:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:07:57 2026 by rpki-client