Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mQTh3seKPBZqVkWi-01JVKVYecI.roa
File: mQTh3seKPBZqVkWi-01JVKVYecI.roa (raw, json)
Hash identifier: E1tOVuFSepGlZFfOyHIfhpFbJ2hCR7/eEB7uuq+JMVY=
Subject key identifier: 99:04:E1:DE:C7:8A:3C:16:6A:56:45:A2:FB:4D:49:54:A5:58:79:C2
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08755E1F7C2FDC99EE26ECAE5F2FB24CD
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mQTh3seKPBZqVkWi-01JVKVYecI.roa
Signing time: Wed 09 Sep 2026 18:02:27 +0000
ROA not before: Wed 09 Sep 2026 18:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402866
IP address blocks: 109.64.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:55:e1:f7:c2:fd:c9:9e:e2:6e:ca:e5:f2:fb:24:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 9 18:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9904e1dec78a3c166a5645a2fb4d4954a55879c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:68:81:44:d7:10:89:80:80:ab:cb:3a:07:
a1:38:dc:49:fe:ae:6e:94:80:68:0e:8e:c5:93:b0:
2d:0b:4c:db:fe:08:f5:ec:12:15:4e:76:f6:22:91:
06:3d:85:15:72:84:a0:e4:bb:23:95:17:fa:8c:ae:
aa:1c:45:fd:7c:77:22:4c:a0:e0:2e:7f:64:a8:fa:
bd:b7:c2:f9:96:a3:5c:56:a4:39:45:bb:d3:02:63:
fa:29:14:08:75:68:82:c7:c2:c7:6b:6b:0d:c9:7a:
e1:86:a0:01:88:b6:74:5b:35:2b:22:20:59:e6:52:
f6:0a:e8:67:1d:a1:19:fb:55:84:b8:68:87:27:3f:
8b:0c:af:b4:2f:9e:27:9c:4a:a0:95:72:28:7f:d4:
b8:41:41:89:94:0a:86:16:44:17:ad:1e:49:b0:17:
5e:46:ef:1f:98:af:24:83:90:21:77:48:ab:dd:9d:
61:de:07:39:6f:2b:5b:28:e2:b7:e0:d9:fa:9d:c6:
6f:64:64:36:78:54:a8:23:bb:a9:19:35:48:8b:25:
92:63:0e:22:63:09:e6:03:0b:de:58:6f:f4:14:01:
08:5d:11:c4:b2:4e:ce:23:b4:14:07:c7:cb:4f:19:
44:9d:16:a4:6a:4e:ab:2b:e2:c5:82:78:38:46:2b:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:04:E1:DE:C7:8A:3C:16:6A:56:45:A2:FB:4D:49:54:A5:58:79:C2
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/mQTh3seKPBZqVkWi-01JVKVYecI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.159.0/24
Signature Algorithm: sha256WithRSAEncryption
06:79:2c:95:88:e1:93:da:7e:7b:59:11:61:4d:1d:ca:de:15:
f3:65:04:0d:50:9b:64:90:68:e9:9a:49:97:49:5c:d4:a3:f9:
7d:c8:ef:57:27:25:89:27:a7:33:64:e3:2a:2c:d2:a4:27:a2:
f1:26:91:55:2f:2c:2b:b7:5d:24:b0:4a:de:07:56:ae:69:ec:
19:72:36:aa:50:b1:c2:f7:58:20:2a:ef:8d:b6:da:8f:c5:4d:
2c:f1:87:e5:2c:c2:df:ad:a4:09:e8:a0:51:f4:29:68:39:cd:
47:09:95:d6:3d:9b:bc:ac:54:ca:fd:82:a0:f6:e7:29:f1:2d:
23:9b:70:89:5a:de:19:36:f3:88:ca:76:1c:dc:33:f6:bc:82:
b8:e4:c3:51:9f:54:78:77:90:2a:00:2f:1c:0c:bd:84:ee:87:
e1:75:85:c8:0f:d9:29:a1:2f:bb:88:fa:06:77:da:95:be:68:
f9:8d:06:59:bc:2b:13:2c:9b:4f:d9:08:88:aa:2f:a5:d7:23:
66:96:2d:a7:64:66:a2:a2:48:72:bf:f0:f3:6b:6f:45:bd:77:
ce:6b:b4:77:8c:58:0b:51:75:5e:11:8e:9d:51:74:44:3d:4f:
31:c5:23:e5:69:60:6e:31:59:06:31:5c:09:42:1b:d5:1b:2b:
47:cb:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:25 2026 by rpki-client