Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_a-fjO6GUtPdhvnxfJ7vRip7LS0.roa
File: _a-fjO6GUtPdhvnxfJ7vRip7LS0.roa (raw, json)
Hash identifier: 1neQPyG33izEXSqHLU6q7KOWioUVpplu/5ptseKzyqk=
Subject key identifier: FD:AF:9F:8C:EE:86:52:D3:DD:86:F9:F1:7C:9E:EF:46:2A:7B:2D:2D
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A01DA464DD1724FE397259E564AEE8CAD3
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_a-fjO6GUtPdhvnxfJ7vRip7LS0.roa
Signing time: Thu 20 Aug 2026 05:28:28 +0000
ROA not before: Thu 20 Aug 2026 05:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 109.66.20.0/23 maxlen: 24
109.66.40.0/23 maxlen: 24
109.66.96.0/23 maxlen: 24
109.66.110.0/23 maxlen: 24
109.66.152.0/23 maxlen: 24
109.66.204.0/23 maxlen: 24
109.66.220.0/23 maxlen: 24
109.66.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:a4:64:dd:17:24:fe:39:72:59:e5:64:ae:e8:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 20 05:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdaf9f8cee8652d3dd86f9f17c9eef462a7b2d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:74:91:05:19:b5:89:c2:ba:72:df:5b:f9:96:
21:74:ed:d7:bc:fa:2d:58:37:94:53:1b:2b:43:b8:
83:ce:0d:00:b3:46:c5:ea:f2:2a:b4:6f:36:23:fb:
82:7d:a2:ca:9f:c9:f1:f3:fc:68:79:2f:7d:a3:87:
35:c1:29:06:8e:79:25:69:3b:85:4c:36:2f:7e:e0:
9b:f6:87:06:82:d7:ee:66:b4:80:73:0d:d8:6d:8a:
68:4a:29:86:c9:08:c5:aa:8c:90:88:a3:73:76:92:
fd:79:53:49:b5:a4:51:84:f8:67:ee:62:8b:04:18:
26:e9:5a:8f:d4:f3:ad:bd:43:c0:f7:97:f0:5f:10:
52:81:42:0b:9d:e2:d8:90:55:ff:d7:5d:73:f7:81:
cc:58:15:5a:c1:8f:90:0c:fd:95:c4:3f:3b:bc:57:
c9:4c:e1:99:8f:7d:f7:c9:96:10:0e:d9:7f:a8:11:
79:4c:e6:63:22:c3:fb:6b:67:60:2a:5b:0d:0f:60:
3b:b3:c9:f5:d3:b9:e3:5a:3e:59:c7:4a:4f:c1:cb:
5f:29:33:f3:c2:9a:9e:85:c7:78:ea:03:e3:cd:2d:
5a:e0:f9:19:68:df:d3:ed:2a:63:05:2d:ee:6c:c8:
51:58:76:cc:56:e4:02:3d:1c:5e:ea:9b:8a:9d:18:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:9F:8C:EE:86:52:D3:DD:86:F9:F1:7C:9E:EF:46:2A:7B:2D:2D
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_a-fjO6GUtPdhvnxfJ7vRip7LS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.20.0/23
109.66.40.0/23
109.66.96.0/23
109.66.110.0/23
109.66.152.0/23
109.66.204.0/23
109.66.220.0/23
109.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:c1:5e:c2:2e:0a:8e:bc:7d:27:f8:16:5c:f2:c5:b3:be:71:
e5:02:b8:b2:13:fc:a6:bb:33:7f:29:0e:b4:71:d1:29:72:48:
31:59:19:fc:03:84:bf:80:0c:8d:4d:a6:a7:08:61:81:07:4f:
9d:61:5e:32:02:34:1f:7c:04:65:ba:41:91:d9:32:77:5f:c4:
96:a8:77:4f:2d:2f:89:7c:19:68:ca:99:fd:56:ac:62:7e:98:
1f:cc:84:b6:8c:ed:98:dc:58:cf:c4:f4:a0:27:d8:c5:df:37:
43:65:41:c4:97:88:1f:18:64:f0:3a:de:18:e2:23:87:6f:05:
6a:40:18:90:db:67:33:89:12:59:2b:39:62:72:b4:4b:52:92:
df:46:93:e6:ef:34:b2:64:56:d6:11:97:0d:19:af:9d:f1:1e:
e4:5d:43:61:45:e5:fe:bd:29:51:16:81:eb:c7:33:b0:21:42:
66:6e:85:8d:f3:f4:e2:f6:b5:6b:55:2d:9d:48:42:34:cd:e0:
33:b7:98:1a:20:5d:45:22:b5:bc:ea:85:46:22:fe:c3:05:21:
2d:09:ee:e6:a9:de:c1:21:81:d4:ab:fc:30:9d:77:db:40:47:
a1:c1:e2:2d:f2:39:55:47:79:ee:ec:73:fb:76:8e:18:69:8f:
6c:46:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 03:29:59 2026 by rpki-client