Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7KzeoJila2zHdtq8VZDIzEcyP9w.roa
File: 7KzeoJila2zHdtq8VZDIzEcyP9w.roa (raw, json)
Hash identifier: UeIQDK93jy+ADd6jc//TRlxFwjBgft3ozCAbtY/uL04=
Subject key identifier: EC:AC:DE:A0:98:A5:6B:6C:C7:76:DA:BC:55:90:C8:CC:47:32:3F:DC
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FEA03482D8C0128AA017E526D5B8E45BB
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7KzeoJila2zHdtq8VZDIzEcyP9w.roa
Signing time: Mon 10 Aug 2026 04:51:51 +0000
ROA not before: Mon 10 Aug 2026 04:51:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2497
IP address blocks: 109.66.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:03:48:2d:8c:01:28:aa:01:7e:52:6d:5b:8e:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 10 04:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecacdea098a56b6cc776dabc5590c8cc47323fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:75:6d:e1:6f:26:5c:e2:de:81:04:82:91:3d:
4c:f2:d1:19:a7:f9:d7:42:36:c5:a1:c3:6c:e5:9d:
dd:44:01:77:b4:7d:fb:b9:73:b5:70:d1:21:83:a7:
5d:4f:fc:5d:dd:0d:45:22:d5:23:65:22:28:bc:45:
f7:74:ba:72:0a:7d:77:b9:af:94:76:20:f0:91:2c:
43:88:1d:83:95:c7:9c:cd:b2:b9:c0:8e:97:5e:75:
94:9b:37:2a:88:9c:b0:ec:d4:d0:8e:d1:a6:ad:88:
7e:63:c8:d3:c2:c7:96:4b:4c:48:9d:ee:a1:00:47:
cf:c6:ef:2d:33:fa:fc:17:47:64:9b:20:66:1e:3d:
45:76:11:ea:d5:a9:b5:e5:f8:2a:ec:ee:62:31:a5:
e8:5f:c3:22:c6:6c:3e:fe:68:b9:d3:57:ab:f4:a6:
e8:75:f1:07:a9:0b:3d:87:11:ad:30:5b:ca:1c:70:
84:92:e3:2f:94:24:98:44:38:20:96:b5:81:8e:3d:
f3:48:45:40:0d:73:32:f3:f3:82:d0:0a:4a:fe:d9:
01:93:8c:16:a0:55:dc:14:ee:4f:a4:b3:15:34:09:
70:60:cf:bf:88:6b:e4:e4:38:6e:df:cc:00:98:d8:
b5:bf:53:f8:84:28:dc:b2:31:b6:2d:d6:de:d3:cd:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:DE:A0:98:A5:6B:6C:C7:76:DA:BC:55:90:C8:CC:47:32:3F:DC
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/7KzeoJila2zHdtq8VZDIzEcyP9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.30.0/23
Signature Algorithm: sha256WithRSAEncryption
74:ce:dd:2a:f1:e8:61:82:82:53:8d:4c:3a:ee:c9:1d:bc:44:
3a:db:f5:5a:8e:78:05:47:4b:47:a6:fa:c3:bb:4e:47:b4:32:
31:51:01:e7:b3:81:15:25:d8:85:46:48:95:b8:0a:b6:39:fc:
14:29:ee:c2:72:12:88:82:3b:2a:b5:a2:c5:53:6d:c9:fe:31:
c6:a0:84:bc:43:8f:33:37:3d:9f:c5:25:ba:7c:39:e3:07:96:
d6:ac:27:ad:37:d1:fc:9e:e4:de:16:a7:43:2b:fc:3c:fd:ff:
f5:45:5a:7f:e9:fe:33:25:f4:35:36:2d:c7:00:3e:2a:6a:7c:
e9:f8:eb:28:73:24:39:d8:79:8e:42:10:b8:bf:4e:c9:6e:8d:
9a:2c:95:94:58:36:6e:09:4e:8a:e0:4d:d6:29:91:4f:ee:7d:
19:1e:e6:8f:24:92:4e:6c:c7:15:01:72:8a:28:3a:cb:d2:d4:
a1:99:ad:b0:53:5e:34:33:ef:14:57:c8:e2:74:88:b7:a8:8a:
77:e2:ca:93:3e:6d:f0:47:d7:48:3b:41:52:5b:88:1c:5c:58:
5b:75:60:2d:3c:8a:75:fd:7a:af:d7:05:de:bb:62:31:ff:70:
fd:21:98:3b:31:14:f9:11:f7:c6:c9:49:37:d9:ca:ee:ad:62:
53:75:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:14 2026 by rpki-client