Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/F4y91Obq7ar-IQp62tRc-yP9Ve4.roa
File: F4y91Obq7ar-IQp62tRc-yP9Ve4.roa (raw, json)
Hash identifier: 3YuG/Mik46MTvb5WMLwlYeLofRuc/bjIT3L9zmKlAJQ=
Subject key identifier: 17:8C:BD:D4:E6:EA:ED:AA:FE:21:0A:7A:DA:D4:5C:FB:23:FD:55:EE
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019FF9CC6C13A20D6EBD3A4C0A7112EB83F7
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/F4y91Obq7ar-IQp62tRc-yP9Ve4.roa
Signing time: Thu 13 Aug 2026 06:25:51 +0000
ROA not before: Thu 13 Aug 2026 06:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.66.18.0/24 maxlen: 24
109.66.68.0/22 maxlen: 24
109.66.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:cc:6c:13:a2:0d:6e:bd:3a:4c:0a:71:12:eb:83:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 13 06:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178cbdd4e6eaedaafe210a7adad45cfb23fd55ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:ca:6b:cd:b7:3f:0d:26:d2:10:14:83:da:
36:8a:51:1b:ce:e5:1b:08:85:bf:08:74:8e:5f:c0:
54:9a:7c:2d:ea:4b:c7:4a:3b:d1:37:f8:1d:2c:12:
40:42:9a:fd:f7:f7:1a:f9:c4:6b:1f:68:db:72:40:
2c:76:52:ba:b6:29:fd:fd:a4:df:c2:55:7b:5a:24:
7f:d6:07:f7:24:bb:d2:9b:63:e8:68:8a:27:ad:b0:
8a:07:3c:2f:b3:9b:22:8b:f3:6d:06:49:61:02:4d:
00:74:d7:23:15:6f:f3:d4:48:32:78:34:49:51:c3:
ee:9e:72:c1:47:04:47:35:10:7f:1d:95:db:79:5c:
48:28:4b:0e:37:c1:d2:1a:d6:63:44:df:5e:87:11:
e5:25:cc:18:92:c2:53:a5:46:c5:1b:c0:b4:1e:e4:
81:b4:d3:52:36:22:ec:0a:65:02:ad:70:ef:5b:95:
23:ee:3d:f5:34:b4:9b:3d:33:e3:af:a7:e9:4a:62:
76:bc:0f:c4:75:26:4a:dd:e7:c9:93:e3:e1:03:82:
93:a2:06:6d:34:7a:bb:87:b6:d9:b5:5b:55:c7:f7:
dd:98:f6:1a:db:ee:e8:60:1f:0c:b6:72:f7:3e:41:
2a:f3:78:7c:d8:d2:b1:99:53:6a:01:9e:15:88:14:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:BD:D4:E6:EA:ED:AA:FE:21:0A:7A:DA:D4:5C:FB:23:FD:55:EE
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/F4y91Obq7ar-IQp62tRc-yP9Ve4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.18.0/24
109.66.68.0/22
109.66.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:6b:43:40:9a:62:bc:45:85:d2:ac:b7:c7:30:8f:d7:ee:67:
62:cb:43:d0:c2:1a:3a:fb:7a:54:05:88:e8:5f:79:aa:b4:90:
e5:88:2f:e2:5e:46:a9:bb:d5:d5:7d:f1:4d:a1:30:c1:fd:74:
fa:17:96:1e:4f:30:f1:89:c6:2f:d3:c9:61:f8:fb:f9:86:2c:
69:2c:f8:5a:a5:da:30:79:ba:82:e9:1a:d3:e4:f3:30:14:81:
86:1b:d1:d5:48:6f:68:de:4c:6c:1e:2a:7b:fc:aa:ce:a8:ea:
65:f2:11:79:3c:42:26:b2:8c:4d:5c:4e:dd:57:c5:de:de:e0:
f3:5a:2e:b2:05:1a:be:90:90:e3:1a:bd:5c:0a:af:5b:75:32:
25:c5:09:18:d6:c7:00:f9:48:7f:09:99:63:bc:18:57:7f:31:
97:83:a6:f3:c5:34:52:ae:ee:e1:37:dc:6a:de:58:45:94:20:
64:fc:2f:1e:54:2a:a2:c7:8c:30:f5:96:c9:ac:cc:54:4d:c3:
66:e8:80:52:65:df:46:b5:52:ae:e1:c8:dd:88:3e:4c:94:17:
fd:30:46:3e:b9:6f:71:81:03:19:16:ba:fb:1c:7c:1a:06:10:
dd:f4:aa:87:13:81:dd:50:55:94:7b:53:4a:c1:f5:8b:2f:83:
d3:ce:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:23 2026 by rpki-client