Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/siESF6F_gUc4rowkgIQasST7alw.roa
File: siESF6F_gUc4rowkgIQasST7alw.roa (raw, json)
Hash identifier: ICbIj7gHikRw51S8547UlClU26rp3kyB1vQFCuy883c=
Subject key identifier: B2:21:12:17:A1:7F:81:47:38:AE:8C:24:80:84:1A:B1:24:FB:6A:5C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A00F078CA8815DFE0ED404063BAE9FBFD3
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/siESF6F_gUc4rowkgIQasST7alw.roa
Signing time: Mon 17 Aug 2026 09:22:27 +0000
ROA not before: Mon 17 Aug 2026 09:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 109.66.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:07:8c:a8:81:5d:fe:0e:d4:04:06:3b:ae:9f:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 17 09:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2211217a17f814738ae8c2480841ab124fb6a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:bd:be:aa:2f:41:2c:6f:cf:cb:56:d8:0c:
df:37:2d:b9:fa:49:8a:fa:00:d6:4c:96:71:70:3d:
5e:7a:d1:4d:63:a0:07:77:8c:40:64:c4:aa:9f:71:
b4:95:75:9f:29:ba:1a:59:5b:98:07:df:7a:f9:91:
e1:a6:70:ee:61:b1:19:30:97:5c:dc:ff:0d:98:5e:
fe:93:c2:2b:69:62:20:99:f3:90:f4:e3:ec:ad:46:
74:d4:55:b2:f4:95:d4:88:98:d8:af:4e:21:c9:d3:
56:d5:1d:7e:ee:4d:d6:a7:c7:6f:54:84:25:d9:f7:
9c:e1:24:5d:ec:52:00:b1:51:84:b7:8a:b8:0c:86:
e6:fe:77:fd:00:0e:71:d9:ef:4b:c5:b2:cf:cf:0f:
10:a1:95:9b:e3:69:73:43:13:04:98:4c:17:5f:bf:
c6:5f:4b:66:10:d7:e2:7d:57:e1:a6:24:5e:bf:95:
cc:9b:80:0a:30:cd:7e:3f:76:b4:ec:c7:e5:3b:3a:
1d:fa:e8:54:30:57:da:96:fc:fd:a0:3c:61:d2:45:
81:b5:f0:76:a7:24:2a:d3:79:bb:d4:9a:56:da:3d:
38:d4:9b:2b:9a:d2:85:38:f1:9a:28:7d:27:11:6f:
77:0c:2a:d9:7a:fb:79:53:5a:da:ee:b6:96:2a:66:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:21:12:17:A1:7F:81:47:38:AE:8C:24:80:84:1A:B1:24:FB:6A:5C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/siESF6F_gUc4rowkgIQasST7alw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6e:36:1e:1d:ba:b9:a5:c8:73:a0:f1:26:4e:70:f5:28:c8:
9c:3c:5f:73:0e:0d:de:a6:1b:7f:a0:80:dd:90:e9:dd:63:77:
fd:4b:f4:0d:7c:22:f5:1b:f5:03:a0:05:65:03:be:52:29:d0:
fa:53:14:bc:14:2c:ea:9e:51:b2:23:d5:93:8e:f4:a3:d5:74:
76:b1:97:96:a2:d2:fc:50:0a:1f:4e:d8:74:26:0f:9f:dc:6b:
0a:f9:08:12:d1:38:65:51:1a:d3:a7:9b:8d:3d:b5:a5:bc:f3:
d7:02:3b:db:14:3b:25:0e:14:7c:5e:d3:c3:2a:46:43:8c:4d:
35:e7:bd:48:a0:74:de:35:eb:a4:4a:47:66:9a:64:f6:69:0f:
33:c3:3c:28:4c:f9:b1:c4:63:a6:01:25:9d:f0:bd:b6:2e:0b:
73:37:f1:1c:56:0c:12:89:c9:61:98:d8:89:db:e4:f2:9e:c5:
26:12:e1:41:ee:70:ee:ba:53:47:c9:e3:36:fe:79:b4:7d:62:
04:91:a6:8b:00:04:5b:c3:de:1e:67:90:d4:42:0a:a0:2f:e0:
80:56:98:8f:0a:f8:8c:88:f0:4c:84:16:ef:d8:f0:b3:5e:f3:
ad:61:c2:85:47:d0:8a:60:85:3f:7d:ef:ed:ad:8c:5e:e2:3d:
0f:11:0b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:09 2026 by rpki-client