Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kuQQvUHjHSkeBMocgfB1Wb278yc.roa
File: kuQQvUHjHSkeBMocgfB1Wb278yc.roa (raw, json)
Hash identifier: ettdxJJ7OPwgI/VmEH+MQp0AshDnk0n61kQ49oo0ofk=
Subject key identifier: 92:E4:10:BD:41:E3:1D:29:1E:04:CA:1C:81:F0:75:59:BD:BB:F3:27
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A02F67D077064E3EFD2EF1BCA07947917A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kuQQvUHjHSkeBMocgfB1Wb278yc.roa
Signing time: Sun 23 Aug 2026 16:15:27 +0000
ROA not before: Sun 23 Aug 2026 16:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 109.66.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2f:67:d0:77:06:4e:3e:fd:2e:f1:bc:a0:79:47:91:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 23 16:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92e410bd41e31d291e04ca1c81f07559bdbbf327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:e8:b5:c1:87:72:93:fa:6a:22:4b:77:51:
8e:93:00:12:33:73:7a:c4:61:af:12:32:7c:be:3b:
60:95:d8:1e:c7:7a:a1:97:c5:b7:7a:91:ca:cc:32:
b2:55:b2:2c:a6:a4:14:48:ab:32:74:87:35:91:7b:
98:4b:8b:f9:5f:da:1a:26:1d:df:b5:7d:52:64:95:
bc:f5:94:7b:df:0a:b9:d0:bd:ba:7a:95:8b:04:20:
79:7c:e6:4a:1d:70:80:59:2b:aa:fa:8a:23:33:7e:
eb:3f:9a:f2:72:e3:36:fb:d4:fd:b0:70:43:61:06:
d5:bb:f7:7b:15:cf:bd:4d:bf:2e:de:50:bb:04:3e:
c0:de:1e:1b:1b:a0:e5:8b:bf:fa:0e:8f:d5:0c:13:
f6:a8:cc:8b:d0:32:af:70:13:4e:b5:c9:a5:22:e8:
2b:f5:ed:7d:6f:57:0b:89:19:d3:63:b0:1d:7b:70:
a7:70:8d:31:bd:1e:cd:0b:71:10:95:5c:c1:51:66:
b6:14:ee:c9:b2:15:af:2a:b0:80:6e:74:87:2c:bd:
45:78:6f:85:10:67:6d:5b:34:06:c6:0a:6f:a1:bb:
30:d8:da:4c:ea:80:d1:ae:87:66:cf:fc:42:8f:54:
74:be:d2:4d:09:d6:43:e8:35:24:c9:b8:3f:b3:04:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:10:BD:41:E3:1D:29:1E:04:CA:1C:81:F0:75:59:BD:BB:F3:27
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/kuQQvUHjHSkeBMocgfB1Wb278yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.141.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e6:2c:58:69:84:45:b3:37:09:c1:57:bc:53:0b:37:72:98:
8b:69:92:04:87:dc:34:93:5c:fd:98:fd:6b:98:df:29:f4:dc:
0f:07:c8:b3:4b:41:07:03:eb:1a:97:44:be:1b:ee:e4:3f:84:
ee:a4:bc:63:1a:06:c9:a6:1b:01:cf:4c:fd:ad:ff:01:58:9b:
e2:b5:6f:a5:46:35:b2:79:6a:a1:03:40:b3:02:ee:b6:ce:22:
6a:07:43:67:bd:fd:cf:00:b4:b6:2e:93:06:f0:0c:d9:03:64:
90:45:97:62:56:eb:85:06:93:ea:a6:f5:a0:78:a3:1b:46:87:
83:0b:9b:3c:c0:29:72:c3:ca:a2:92:21:1b:9d:76:06:31:f3:
c1:82:5b:38:e6:3b:21:7b:75:ee:1b:aa:18:6e:27:46:5f:31:
ea:52:38:73:2b:f3:8c:4e:6e:eb:2f:28:68:a5:d3:32:1d:8e:
8d:04:94:ee:79:61:62:ee:ac:58:7e:b1:1e:6a:ed:8f:a2:a0:
d6:be:f4:d9:c1:6f:e8:11:66:38:9e:e3:06:c4:54:60:a3:35:
de:2e:8b:7a:3d:f9:ac:d7:13:e3:4d:ec:bb:de:a1:97:3a:15:
a2:6e:9f:ff:a2:0a:16:2c:71:06:a3:60:cb:fc:81:aa:26:e9:
13:55:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:23 2026 by rpki-client