Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RfP8uL_g20nB_luoKvD2UCX0tzQ.roa
File: RfP8uL_g20nB_luoKvD2UCX0tzQ.roa (raw, json)
Hash identifier: hg8ZFVCf9FY7OT6yxSMASXH5xKstt4lkl4JvmcV0Ros=
Subject key identifier: 45:F3:FC:B8:BF:E0:DB:49:C1:FE:5B:A8:2A:F0:F6:50:25:F4:B7:34
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A085719245F36BCEED914D5B20D1DD4CEB
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RfP8uL_g20nB_luoKvD2UCX0tzQ.roa
Signing time: Wed 09 Sep 2026 09:13:27 +0000
ROA not before: Wed 09 Sep 2026 09:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 109.64.210.0/24 maxlen: 24
109.66.12.0/24 maxlen: 24
109.66.13.0/24 maxlen: 24
109.66.42.0/24 maxlen: 24
109.66.52.0/24 maxlen: 24
109.66.53.0/24 maxlen: 24
109.66.57.0/24 maxlen: 24
109.66.129.0/24 maxlen: 24
109.66.134.0/24 maxlen: 24
109.66.165.0/24 maxlen: 24
109.66.167.0/24 maxlen: 24
109.66.177.0/24 maxlen: 24
109.66.198.0/24 maxlen: 24
109.66.207.0/24 maxlen: 24
109.66.210.0/24 maxlen: 24
109.66.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:71:92:45:f3:6b:ce:ed:91:4d:5b:20:d1:dd:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 9 09:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45f3fcb8bfe0db49c1fe5ba82af0f65025f4b734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:52:8d:bb:ff:b1:38:45:77:99:58:2f:82:
23:75:46:39:c7:63:e1:0c:ba:79:48:f8:9a:77:09:
f5:6f:12:bc:70:db:10:b5:6e:8e:64:54:c1:1f:9a:
67:b1:99:c6:79:c7:36:e8:e1:60:95:2a:6d:83:45:
09:5b:85:b3:2b:46:b4:ac:6e:8e:18:be:bf:d0:83:
fe:85:e8:89:3c:54:dd:53:db:e7:27:24:b3:98:1a:
37:14:29:93:54:65:d8:26:8f:ae:0f:e8:17:d4:e4:
a4:37:df:60:4d:cd:d3:01:55:88:35:8e:d6:3e:fd:
34:ad:cb:82:a3:7b:28:96:51:90:eb:18:0e:39:ee:
78:82:83:eb:60:c0:e9:82:61:dd:2d:ee:4f:89:04:
0b:79:1e:18:6a:ad:15:db:c4:88:91:f8:4f:c7:b4:
61:93:16:39:6b:a9:b2:03:fe:13:70:5a:bf:36:83:
1f:ff:e7:61:df:31:1b:f9:5e:50:dd:ec:59:e9:f6:
d6:c3:8e:78:46:e5:6a:95:0b:91:16:a0:26:94:3b:
1b:1c:fb:45:d0:e4:79:19:05:b0:e1:35:89:30:ca:
6b:11:15:bb:86:6c:2b:56:8c:81:11:e4:cc:7a:28:
cb:76:53:c6:da:95:57:3b:01:2a:1f:7a:e5:75:1b:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:FC:B8:BF:E0:DB:49:C1:FE:5B:A8:2A:F0:F6:50:25:F4:B7:34
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/RfP8uL_g20nB_luoKvD2UCX0tzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.210.0/24
109.66.12.0/23
109.66.42.0/24
109.66.52.0/23
109.66.57.0/24
109.66.129.0/24
109.66.134.0/24
109.66.165.0/24
109.66.167.0/24
109.66.177.0/24
109.66.198.0/24
109.66.207.0/24
109.66.210.0/24
109.66.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9d:f3:27:4c:53:07:0a:e2:e0:ba:90:73:05:20:a2:6d:06:
b2:65:8c:e6:46:b1:85:c1:4c:24:92:9c:db:e8:2b:95:7c:b0:
d0:c8:16:33:fb:17:9f:63:24:bc:c5:25:eb:44:e8:6b:36:65:
e3:24:4c:44:e5:7f:cc:4d:11:62:c6:63:3f:5f:01:a2:33:95:
ee:3f:ef:c8:75:20:3d:20:24:97:75:40:ae:17:f0:b7:bf:15:
12:93:3c:75:09:75:1d:bf:25:fe:2c:ec:83:3e:e2:7b:05:df:
58:f8:ae:eb:7e:e8:84:f1:1f:62:4f:cc:cf:14:46:88:02:af:
dc:03:39:79:c1:2d:81:c7:e1:d7:0f:95:f7:fc:cd:a6:7f:e5:
cd:db:c3:99:78:2b:21:8a:89:28:57:ef:4a:94:46:e7:0e:38:
a0:dc:91:2a:43:cd:87:41:eb:8d:be:84:50:ca:8b:80:a5:b4:
7b:75:ab:8c:ea:ca:ed:98:d3:7a:33:f2:a6:7f:9c:86:66:49:
35:3b:bd:2c:d3:b9:5d:a7:98:f1:8f:82:ed:11:c9:08:c3:5e:
00:34:79:f5:c3:18:d4:b1:2b:e7:ad:65:d0:bb:35:7f:36:e9:
48:ed:a1:cf:ef:40:0e:23:89:29:8e:1f:a3:9b:ec:5e:4f:c0:
24:05:5f:1e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaCFcZJF82vO7ZFNWyDR3UzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTA5MDkxMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWYzZmNiOGJmZTBkYjQ5YzFmZTViYTgyYWYwZjY1MDI1ZjRiNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugFSjbv/sThFd5lYL4IjdUY5x2Ph
DLp5SPiadwn1bxK8cNsQtW6OZFTBH5pnsZnGecc26OFglSptg0UJW4WzK0a0rG6O
GL6/0IP+heiJPFTdU9vnJySzmBo3FCmTVGXYJo+uD+gX1OSkN99gTc3TAVWINY7W
Pv00rcuCo3sollGQ6xgOOe54goPrYMDpgmHdLe5PiQQLeR4Yaq0V28SIkfhPx7Rh
kxY5a6myA/4TcFq/NoMf/+dh3zEb+V5Q3exZ6fbWw454RuVqlQuRFqAmlDsbHPtF
0OR5GQWw4TWJMMprERW7hmwrVoyBEeTMeijLdlPG2pVXOwEqH3rldRszSQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFEXz/Li/4NtJwf5bqCrw9lAl9Lc0MB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvUmZQOHVMX2cyMG5CX2x1b0t2RDJVQ1gwdHpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAbUDSAwQB
bUIMAwQAbUIqAwQBbUI0AwQAbUI5AwQAbUKBAwQAbUKGAwQAbUKlAwQAbUKnAwQA
bUKxAwQAbULGAwQAbULPAwQAbULSAwQAbULyMA0GCSqGSIb3DQEBCwUAA4IBAQA9
nfMnTFMHCuLgupBzBSCibQayZYzmRrGFwUwkkpzb6CuVfLDQyBYz+xefYyS8xSXr
ROhrNmXjJExE5X/MTRFixmM/XwGiM5XuP+/IdSA9ICSXdUCuF/C3vxUSkzx1CXUd
vyX+LOyDPuJ7Bd9Y+K7rfuiE8R9iT8zPFEaIAq/cAzl5wS2Bx+HXD5X3/M2mf+XN
28OZeCshiokoV+9KlEbnDjig3JEqQ82HQeuNvoRQyouApbR7dauM6srtmNN6M/Km
f5yGZkk1O70s07ldp5jxj4LtEckIw14ANHn1wxjUsSvnrWXQuzV/NulI7aHP70AO
I4kpjh+jm+xeT8AkBV8e
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:21 2026 by rpki-client