Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/r32mYOBGIsm-AetSbzNLVTFJ1U8.roa
File: r32mYOBGIsm-AetSbzNLVTFJ1U8.roa (raw, json)
Hash identifier: rsYZ0zxP+k+iWDRhiWNAMb7iu2/6ieysKV1kfX7RFV8=
Subject key identifier: AF:7D:A6:60:E0:46:22:C9:BE:01:EB:52:6F:33:4B:55:31:49:D5:4F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0895A3D9019EDEA05BBB24DE003845E6A
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/r32mYOBGIsm-AetSbzNLVTFJ1U8.roa
Signing time: Thu 10 Sep 2026 03:26:27 +0000
ROA not before: Thu 10 Sep 2026 03:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 109.66.14.0/24 maxlen: 24
109.66.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:5a:3d:90:19:ed:ea:05:bb:b2:4d:e0:03:84:5e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 03:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7da660e04622c9be01eb526f334b553149d54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:15:8b:73:bb:9d:b4:b6:44:cb:5d:6d:41:
5e:0e:43:94:ad:ef:e5:91:d3:3d:72:a7:b2:74:bb:
7e:4c:b0:df:37:d7:41:ec:f8:ef:98:95:92:4c:e1:
34:e3:81:b5:5d:52:56:9c:1b:61:4b:ed:34:15:05:
eb:89:15:77:eb:3f:cb:b4:0e:04:77:78:fe:e1:5f:
67:a5:6e:da:29:d9:71:5b:32:a9:82:92:63:6c:48:
f6:31:8a:45:26:e7:f9:df:82:8d:c7:68:b8:d3:0e:
0d:f6:91:cc:b2:26:86:9f:f2:a8:f6:67:ff:9d:7a:
df:63:a6:d3:e2:43:6b:59:e4:4a:b0:63:0c:cb:76:
d1:bd:37:d0:ac:92:dd:a4:e8:39:2e:c4:d3:85:6d:
dd:32:21:7e:c8:ef:b4:b0:52:31:3b:2e:21:02:0a:
34:d6:49:1a:57:f6:ef:77:90:4a:ee:c9:9c:ab:c7:
f0:24:9d:51:34:ef:da:61:05:dd:5b:28:60:87:53:
c6:a7:06:5e:c3:db:05:7b:14:11:57:c4:41:07:a6:
10:b7:6b:b7:16:64:d2:ee:7d:0d:2a:3a:1d:61:b5:
f3:6f:81:ff:17:e4:20:25:b9:82:08:b5:79:bb:59:
c1:d9:13:08:92:19:c6:ba:61:6d:37:03:5b:2d:98:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:A6:60:E0:46:22:C9:BE:01:EB:52:6F:33:4B:55:31:49:D5:4F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/r32mYOBGIsm-AetSbzNLVTFJ1U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.14.0/24
109.66.17.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f3:bf:5b:ff:ce:9d:c2:cb:15:45:d7:61:63:7d:f5:62:4c:
32:42:1c:58:ed:3d:d9:ff:ef:6c:ff:62:fe:54:32:5f:49:8a:
4f:bb:bb:98:26:50:3c:fb:46:cc:ee:8a:46:be:e8:24:dc:3e:
12:8d:a9:ca:38:0c:1a:8e:3a:c9:c1:75:fa:15:a9:dd:10:43:
43:1a:b2:55:aa:76:34:71:17:44:1e:4b:b9:6e:24:60:dc:0a:
cb:32:9d:fc:75:cd:ef:d6:36:61:b3:8c:52:cd:b4:71:6e:00:
1c:fa:8f:38:61:f0:87:ca:03:43:8c:f6:b3:a2:0c:fb:d7:f0:
04:c0:94:ca:4c:95:5c:bd:b4:99:61:11:4b:31:b5:ed:57:ea:
af:dc:7f:02:3c:fc:60:03:c9:0b:f6:6a:81:b5:0a:f4:35:99:
52:37:f4:a4:57:fa:9d:f1:cb:a6:c4:d6:0d:39:73:a1:12:4b:
f7:95:f5:4b:e3:47:31:1c:d3:3d:45:8d:f7:04:19:ad:fd:74:
b5:bd:25:61:ed:e0:9f:c5:dc:97:f1:99:0f:85:a3:79:39:f2:
e2:4f:55:ef:34:df:c6:e4:b0:b8:a8:df:92:f9:35:ea:6e:87:
36:5e:d4:70:a1:3c:51:a0:b1:10:77:71:b4:d8:3a:22:3d:36:
2a:2c:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:39 2026 by rpki-client