Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ctCcTcmoTT1j7ERR260acW1vFwI.roa
File: ctCcTcmoTT1j7ERR260acW1vFwI.roa (raw, json)
Hash identifier: 86urgGh06EssWAznngCT54UINmj+dsaaUuUM3sRWKPg=
Subject key identifier: 72:D0:9C:4D:C9:A8:4D:3D:63:EC:44:51:DB:AD:1A:71:6D:6F:17:02
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F136405895903315043EB04E07C2B1766
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ctCcTcmoTT1j7ERR260acW1vFwI.roa
Signing time: Mon 29 Jun 2026 12:39:09 +0000
ROA not before: Mon 29 Jun 2026 12:39:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209557
IP address blocks: 109.66.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:64:05:89:59:03:31:50:43:eb:04:e0:7c:2b:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 29 12:39:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72d09c4dc9a84d3d63ec4451dbad1a716d6f1702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:0b:16:ba:21:ab:15:72:c2:7c:e4:02:42:
af:37:08:6d:1d:df:c3:2e:e6:88:3e:15:a6:0f:7c:
ca:af:8a:87:5c:39:71:ee:35:5b:2e:57:6a:a9:c5:
9d:02:0f:e5:85:97:5f:da:41:bd:de:e4:da:98:e4:
d1:00:b4:e9:e7:71:80:29:47:5e:9e:0d:11:1c:55:
65:fd:38:fe:c1:2f:6a:bf:f3:84:9d:5d:07:93:72:
d0:2f:96:76:8c:d2:ba:1b:9b:25:d2:ae:cb:1e:82:
41:3a:40:4c:58:eb:42:4b:d0:18:cc:b3:5e:63:fd:
d4:6a:8e:09:3e:a7:a8:49:52:15:cd:07:aa:d1:07:
80:02:3f:c5:fc:fa:f0:93:d6:39:fe:6f:f7:6f:b4:
8e:ad:53:4d:20:6d:fa:28:18:66:f3:bb:dd:9e:61:
92:1d:b3:07:96:4f:79:68:9c:d7:c6:06:56:d8:84:
ed:dc:8b:33:ee:9e:61:47:3f:b1:fd:4a:cc:a8:1d:
63:4e:ae:f4:c0:1b:cf:fa:6a:c3:c4:c7:a0:03:d5:
ad:24:06:7c:6c:d8:51:09:78:0a:26:17:dd:7b:35:
f5:4e:01:01:89:bc:69:fe:0e:8f:eb:ee:6a:30:6d:
42:e8:47:b7:58:10:89:4a:02:d4:ea:b9:bc:06:e5:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:9C:4D:C9:A8:4D:3D:63:EC:44:51:DB:AD:1A:71:6D:6F:17:02
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ctCcTcmoTT1j7ERR260acW1vFwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.88.0/23
Signature Algorithm: sha256WithRSAEncryption
78:4e:fb:03:2d:38:da:0a:b7:00:07:bc:5a:e1:67:80:16:8e:
d6:82:95:d9:5a:e8:4e:6c:39:ae:59:4d:99:e3:11:e6:79:a9:
6c:69:0b:36:df:bd:8f:ed:86:6c:07:80:aa:99:a7:7c:01:5a:
ae:51:e1:88:a3:ec:3b:3a:a9:8f:85:e5:d6:c1:e3:43:19:0f:
ab:55:5f:3c:6d:d6:15:25:52:46:67:81:cf:3d:a8:7f:24:37:
b3:25:a7:f0:14:d1:09:f8:29:c8:b2:bc:51:f7:93:5c:51:91:
2f:83:0e:e4:46:46:65:44:20:00:41:2d:d1:25:b2:dc:36:f4:
83:ef:1a:6b:15:b5:99:ca:21:32:aa:ef:e7:7f:83:2d:5f:b9:
6e:dc:e6:cc:0d:7c:26:8a:63:b1:ff:31:10:27:92:11:c6:f7:
5b:87:54:c0:de:09:5f:61:af:1d:1b:3d:96:62:7e:4d:4a:ba:
6b:8d:dc:50:f3:f1:26:c0:42:44:76:30:a0:29:92:23:20:34:
43:49:80:8a:32:db:bb:95:4d:b7:89:07:0e:ee:dc:e8:68:e9:
b1:80:9b:04:c5:a8:29:af:c0:64:59:5f:c1:ed:9a:ba:6c:48:
dd:1f:c1:33:4b:a8:5e:65:1d:6d:99:c8:16:90:d1:7d:4e:4f:
ae:fd:b5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:18 2026 by rpki-client