Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yNrh7Q3v_gJcnm0Je2efGWIGRJ8.roa
File: yNrh7Q3v_gJcnm0Je2efGWIGRJ8.roa (raw, json)
Hash identifier: BIU1E5Hav9FVZFyqn6BwwZzFMrEQl4AP4LuEBefOadA=
Subject key identifier: C8:DA:E1:ED:0D:EF:FE:02:5C:9E:6D:09:7B:67:9F:19:62:06:44:9F
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A03E6FC7231D026ABF9B4EC44AD3A7A229
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yNrh7Q3v_gJcnm0Je2efGWIGRJ8.roa
Signing time: Wed 26 Aug 2026 14:18:27 +0000
ROA not before: Wed 26 Aug 2026 14:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 109.66.12.0/24 maxlen: 24
109.66.129.0/24 maxlen: 24
109.66.134.0/24 maxlen: 24
109.66.165.0/24 maxlen: 24
109.66.198.0/24 maxlen: 24
109.66.207.0/24 maxlen: 24
109.66.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:6f:c7:23:1d:02:6a:bf:9b:4e:c4:4a:d3:a7:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Aug 26 14:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8dae1ed0deffe025c9e6d097b679f196206449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:f3:12:b2:aa:09:d9:25:12:df:70:9e:d6:
05:cd:01:d1:52:b5:2d:58:a6:3d:b4:fa:8f:51:c9:
90:f7:d8:48:62:29:a5:94:61:27:db:76:82:44:06:
0b:12:75:50:db:2a:c2:86:a3:82:ff:e8:b0:57:86:
29:b9:ff:26:19:75:f1:5c:dc:92:32:0a:a1:c2:a3:
87:07:1b:bd:2e:3c:c1:68:74:b1:fa:c2:4f:d0:5a:
42:3c:9f:88:a0:64:e8:42:72:ab:31:e9:70:07:c0:
21:fd:d1:74:b9:f0:fd:c3:32:07:73:30:74:db:08:
34:49:67:dc:11:72:e8:95:5c:8e:5d:f2:fd:07:73:
92:6e:d0:28:c3:3f:73:ec:aa:90:74:43:d7:15:9a:
22:b9:74:81:5e:1d:84:ce:57:b2:18:93:08:1d:e8:
8c:9f:90:cf:a5:23:c6:67:1f:9d:74:29:67:16:43:
20:8c:35:62:56:f7:f1:5f:98:5e:78:b9:a7:4e:33:
d8:a1:00:22:48:50:93:ce:02:8b:fe:08:a0:f0:e0:
92:44:fe:24:c8:5f:14:79:be:75:a3:1b:bb:08:57:
8a:37:bb:94:d1:6d:ba:e6:37:06:96:02:ca:23:76:
30:61:dd:22:bd:e7:26:50:ae:d2:5e:eb:80:ab:3d:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DA:E1:ED:0D:EF:FE:02:5C:9E:6D:09:7B:67:9F:19:62:06:44:9F
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/yNrh7Q3v_gJcnm0Je2efGWIGRJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.12.0/24
109.66.129.0/24
109.66.134.0/24
109.66.165.0/24
109.66.198.0/24
109.66.207.0/24
109.66.242.0/24
Signature Algorithm: sha256WithRSAEncryption
09:14:3c:8b:79:21:5f:10:55:2d:e5:ce:6e:03:30:22:29:02:
70:6f:44:15:0d:96:70:9a:6f:1c:d6:cf:6f:15:f4:bd:e9:52:
e6:0f:7b:d2:9e:97:a7:fd:34:83:6d:7a:ce:0e:30:50:b0:e5:
4e:20:2a:43:76:bb:ed:42:33:1c:dc:68:66:f9:93:c3:65:8a:
d4:c9:63:f7:f0:52:0a:c6:99:75:34:67:ce:b8:e3:7e:1d:e3:
81:64:41:6a:de:bf:f5:b6:cd:63:4c:dc:57:bc:5c:f6:09:c2:
a9:37:9c:ad:30:50:12:87:70:fd:b1:4a:21:b8:d2:92:79:af:
8e:e8:e8:a0:d6:8b:b4:a1:44:24:9c:57:65:8d:8e:2c:3d:59:
3f:4c:36:9a:8e:92:b4:76:ed:fd:ca:00:26:b6:e9:56:9c:59:
fa:3c:12:13:a0:4d:db:cd:57:f0:ab:1f:47:dd:31:0b:7b:b7:
fd:0a:37:7c:27:73:b3:c0:d7:77:48:40:aa:fd:96:f7:80:e4:
9e:1f:84:24:bb:ac:3b:b5:09:d5:f6:3a:ce:fa:b3:20:07:6e:
57:0d:15:12:7e:b2:ba:58:24:7a:4f:2c:c0:ef:d3:44:f8:27:
a8:f9:56:bb:51:d7:9f:a9:35:4a:37:7e:14:53:dd:db:14:bd:
33:e9:a0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:53:56 2026 by rpki-client