Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i8Z44zhBvboLjZ85fkwuIWZTEZw.roa
File: i8Z44zhBvboLjZ85fkwuIWZTEZw.roa (raw, json)
Hash identifier: y3/7winMNpDplFycqGvmIRs3/sZmaj1CTtVSbqseSy8=
Subject key identifier: 8B:C6:78:E3:38:41:BD:BA:0B:8D:9F:39:7E:4C:2E:21:66:53:11:9C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A04755072938A7472EBD42CA6317C0F946
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i8Z44zhBvboLjZ85fkwuIWZTEZw.roa
Signing time: Fri 28 Aug 2026 07:45:49 +0000
ROA not before: Fri 28 Aug 2026 07:45:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 109.66.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:55:07:29:38:a7:47:2e:bd:42:ca:63:17:c0:f9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 28 07:45:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bc678e33841bdba0b8d9f397e4c2e216653119c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:ae:d6:9d:a6:1a:6a:f1:4f:b0:2d:3c:30:
1f:43:16:96:ee:5d:4d:22:6a:f2:62:b0:95:ef:f9:
f8:3e:9c:73:67:84:c8:81:ff:7a:f0:3f:30:7d:f3:
36:29:44:70:82:82:35:2a:de:43:23:ef:77:3d:c3:
6c:ad:5f:28:44:6f:14:d2:bf:63:15:2b:e6:59:4e:
77:4a:b6:18:1b:22:eb:18:88:99:9a:c9:86:94:0f:
a1:ca:bd:f2:c7:4f:ef:56:c4:e0:6c:0d:a1:23:eb:
8b:e9:f1:b4:6c:58:80:29:a1:3a:9d:44:ff:30:f0:
0b:d4:a0:53:3b:28:5b:bd:ba:da:fc:8b:8a:4c:1b:
14:fd:be:51:ff:7c:98:29:61:bb:6f:41:b2:f3:34:
db:b5:16:41:35:c3:e0:94:4d:93:35:1c:76:57:c0:
cc:57:cc:27:82:05:df:00:3c:95:00:36:6a:9d:99:
7e:ea:c6:f1:fc:4c:3d:85:97:23:14:d6:2a:b2:cc:
0c:82:21:33:c6:5c:eb:9d:71:ff:6f:f4:f9:bc:eb:
c7:49:7f:5f:53:f0:69:1e:54:c3:52:df:7c:95:13:
16:d4:f3:26:a1:5d:c9:3a:ba:14:67:e8:9e:d6:85:
18:64:00:34:34:22:8c:f7:49:f0:3d:a8:cb:4c:a0:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C6:78:E3:38:41:BD:BA:0B:8D:9F:39:7E:4C:2E:21:66:53:11:9C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/i8Z44zhBvboLjZ85fkwuIWZTEZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.138.0/24
Signature Algorithm: sha256WithRSAEncryption
31:ea:25:01:79:0c:d2:10:19:df:8e:c3:b5:dd:41:d6:43:e6:
9b:70:2d:c1:bf:6c:ab:1b:cb:68:a3:a2:49:fd:a3:f3:57:ee:
05:98:78:97:30:4f:28:5d:39:38:95:27:8b:44:5a:a1:d6:ec:
2a:6f:a6:59:fb:61:37:6b:cc:d2:b0:12:7b:89:e3:53:fb:18:
a8:93:26:13:2c:b9:f8:b0:56:ec:e5:52:07:fe:bc:b8:6f:2e:
03:20:ee:d7:df:8d:eb:4a:c8:48:1e:cc:f8:68:e4:e2:da:0e:
d1:72:a4:0a:22:4d:a7:9e:f7:20:ce:16:c1:41:36:21:46:50:
84:2c:04:35:6e:84:5d:30:77:0c:15:db:46:66:c2:75:0d:b0:
de:48:85:54:94:1f:2f:68:0b:e1:a4:80:c3:5b:00:7d:3d:ef:
db:26:4d:09:0d:86:c2:5b:3f:e3:f9:b9:d5:19:9a:42:23:0a:
51:40:a6:bf:17:ca:f7:12:bb:e4:73:d5:a2:81:71:a2:13:31:
89:7e:ac:db:87:23:6f:ae:7a:05:d4:3f:8d:ca:70:6f:3d:17:
0b:c6:14:8b:54:e9:64:cf:f4:5a:82:32:a1:06:f5:a7:87:01:
65:42:ba:23:9d:04:7d:ed:e5:17:8b:a1:16:75:82:12:b4:97:
89:1c:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:23 2026 by rpki-client