Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa
File: UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa (raw, json)
Hash identifier: arnQa5+zyWRNt4ppru9EEoPbLcDB2HcooQOj4l8fQFM=
Subject key identifier: 52:81:55:DF:95:7B:49:9C:2F:BC:D0:49:02:07:A8:E8:6B:FB:AF:7A
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019EFF10914BEAB6AB4A965B5B03D93E5D93
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa
Signing time: Thu 25 Jun 2026 13:55:36 +0000
ROA not before: Thu 25 Jun 2026 13:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 109.66.12.0/23 maxlen: 24
109.66.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:10:91:4b:ea:b6:ab:4a:96:5b:5b:03:d9:3e:5d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 25 13:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=528155df957b499c2fbcd0490207a8e86bfbaf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:65:0a:bd:97:ce:82:89:bd:66:88:8c:e5:
9b:02:80:7c:51:9b:d1:cb:e9:02:93:af:8d:0a:da:
86:e4:d9:4a:c1:09:ee:4e:a2:42:b1:52:88:87:80:
fe:51:31:80:ec:c6:ad:e2:73:db:62:39:8d:06:bb:
ac:4c:2b:20:b9:19:fd:47:6c:58:33:18:19:08:b0:
11:99:7d:f2:3b:b6:80:5b:de:f4:8a:c9:dc:b5:c5:
27:c8:06:41:51:e1:dc:38:21:89:66:57:e8:3e:4b:
80:ee:80:00:98:41:d7:13:03:31:88:cf:f3:bb:68:
a5:26:fe:1f:11:ca:71:08:ce:ef:0d:0d:20:fe:81:
dc:d9:c6:ca:29:35:85:07:7d:d0:71:8c:de:d0:5e:
24:0a:45:b5:3e:3e:dd:88:96:2b:00:b3:78:cf:27:
fa:9e:1f:c2:eb:44:7a:d6:7b:b9:61:55:33:09:ed:
6f:79:9a:ff:60:29:d5:7c:47:40:8e:9b:51:f2:ed:
a6:b0:16:93:a4:ce:4d:87:3f:95:92:11:ad:18:36:
d7:29:2f:c0:a7:90:12:ff:1d:3a:97:38:f9:bf:65:
ff:8d:c6:e4:25:22:b8:7a:64:49:fc:6c:fa:02:5a:
42:fb:15:50:ea:82:c7:21:04:aa:a8:8e:fe:4e:c0:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:55:DF:95:7B:49:9C:2F:BC:D0:49:02:07:A8:E8:6B:FB:AF:7A
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/UoFV35V7SZwvvNBJAgeo6Gv7r3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.12.0/23
109.66.128.0/23
Signature Algorithm: sha256WithRSAEncryption
75:19:d7:d6:db:b8:10:5d:1a:f1:c8:16:8e:5e:25:31:bb:70:
9a:f2:8a:e5:6d:7f:18:3c:38:e5:56:07:7e:ba:2d:7f:27:28:
78:aa:88:99:a9:de:7a:44:83:ec:c0:bf:e4:6f:e3:00:65:14:
1e:75:62:c5:76:1d:f9:28:7a:89:02:bf:b3:51:7e:74:48:eb:
f9:0b:1c:ba:7f:4c:a9:87:0e:63:aa:44:a0:07:d3:72:a9:59:
89:cc:eb:83:df:a5:3c:f2:0e:12:82:9b:36:a9:f9:e7:5e:b2:
80:bc:c2:bb:d8:7d:91:b2:ee:a8:3d:21:72:7f:02:ef:34:c9:
fd:f0:03:eb:8d:38:51:57:03:a3:b5:56:14:54:de:27:39:d0:
36:fa:da:ae:e3:d8:b6:38:d9:64:17:bf:0b:86:b9:fb:ce:bd:
c4:47:32:a1:c5:3e:78:76:ee:fe:f0:b9:2f:8a:9c:99:37:c0:
5c:70:00:fd:0b:35:0c:9b:09:27:60:a0:55:05:48:4b:82:c2:
bf:ed:6b:9d:7e:73:8c:98:cb:e3:90:fc:b2:96:da:86:13:64:
8a:c8:56:be:c8:57:27:ec:1f:be:cb:ad:c9:26:ba:1c:d0:a4:
45:b1:52:1b:cb:3b:10:d8:16:7e:14:10:2a:94:c5:59:1f:2d:
2b:9a:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:27 2026 by rpki-client