Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/m2HPrEV8_Ot5aWSYre0qUZKu69k.roa
File: m2HPrEV8_Ot5aWSYre0qUZKu69k.roa (raw, json)
Hash identifier: WRVrWt5tFXtaARftCrT5koqkNm2D3UGFdy17vd0KmG4=
Subject key identifier: 9B:61:CF:AC:45:7C:FC:EB:79:69:64:98:AD:ED:2A:51:92:AE:EB:D9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A00FAF17FA965D4C83FD4C57EC0D8CE1ED
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/m2HPrEV8_Ot5aWSYre0qUZKu69k.roa
Signing time: Mon 17 Aug 2026 12:25:28 +0000
ROA not before: Mon 17 Aug 2026 12:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402840
IP address blocks: 109.66.139.0/24 maxlen: 24
109.66.154.0/24 maxlen: 24
109.66.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:af:17:fa:96:5d:4c:83:fd:4c:57:ec:0d:8c:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 17 12:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b61cfac457cfceb79696498aded2a5192aeebd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:d7:9b:39:a8:97:72:54:7e:98:c0:b9:ec:
fc:8e:50:d2:1d:7f:97:d0:f2:33:f1:0e:a6:73:c2:
92:d7:29:50:13:be:5d:82:7b:b9:f7:36:2f:9e:75:
6f:35:ea:b9:67:d0:a9:40:3e:7b:4e:40:b1:ce:2b:
70:2b:8d:ff:d1:1f:a6:f3:31:f4:f7:f4:37:3c:4b:
07:24:5a:a6:8f:51:49:c1:17:73:8f:6e:69:e0:f1:
a9:fe:fb:e3:95:d4:14:46:7f:be:d4:37:eb:f5:e2:
c5:24:cc:4a:3c:59:ac:af:bb:bb:0a:35:c1:47:a1:
a9:8c:fc:f2:52:c4:84:41:71:b2:f7:87:11:41:c4:
4d:2d:ed:7b:51:27:4e:4a:86:eb:2b:26:ed:4e:98:
30:c1:7c:90:21:35:9e:1f:3e:70:62:80:98:74:be:
33:fe:c0:f5:1d:9a:6c:f6:b3:f7:49:a2:5c:5e:d1:
de:d5:dc:18:4c:70:29:4c:15:46:a7:e0:69:01:b4:
5c:4b:79:cf:1d:63:4c:8f:66:57:ad:0f:3d:43:0e:
ce:fa:49:30:1f:83:b8:5e:4a:51:c2:37:89:c4:47:
d5:e0:c6:63:19:76:f1:91:3d:8b:bb:78:20:30:34:
c3:ea:b6:52:63:64:f0:4f:48:b9:a6:c5:48:81:13:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:CF:AC:45:7C:FC:EB:79:69:64:98:AD:ED:2A:51:92:AE:EB:D9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/m2HPrEV8_Ot5aWSYre0qUZKu69k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.139.0/24
109.66.154.0/24
109.66.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bc:63:0e:de:5f:64:d6:81:8e:9c:1b:e0:9a:39:a5:fb:eb:
d8:44:eb:1a:59:9b:ef:99:c6:b6:89:a4:42:6e:1d:8e:05:7b:
29:a8:61:9b:ac:4e:e9:47:79:e4:3f:75:28:41:63:82:77:5c:
e5:05:46:e1:0c:5a:49:6e:07:5d:cc:3c:a6:e4:95:68:9a:7d:
70:a7:e3:b9:10:a4:61:be:80:2f:69:d3:72:6e:23:38:c9:f7:
f7:39:e3:a1:2f:e1:73:ca:b5:98:da:3a:7f:60:e7:6c:81:75:
09:f5:e7:c4:85:65:cb:4e:c8:5a:4b:39:75:3e:c5:94:03:5d:
e8:e7:ae:94:57:ae:d3:51:52:f3:b6:41:cc:64:df:b2:ff:65:
17:87:2e:91:28:24:af:82:04:70:2a:71:9c:21:29:e7:02:19:
4d:80:37:8d:f5:aa:8e:e8:e4:68:fd:0f:5c:2f:d7:05:20:e8:
e1:3c:44:8e:36:e5:25:0a:13:ac:dc:df:e9:79:36:85:82:4b:
81:60:9e:27:9b:c2:93:91:f3:6d:64:aa:33:94:5b:95:71:9b:
46:7a:21:2b:aa:40:83:34:6a:10:4e:02:c6:95:0d:00:e6:03:
b8:5d:86:38:fc:62:e1:a8:6d:65:ac:e6:55:8e:18:b8:95:dd:
86:78:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 10:23:29 2026 by rpki-client