Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/r3_mc9CdfqjKkPDbRieGRarY3J8.roa
File: r3_mc9CdfqjKkPDbRieGRarY3J8.roa (raw, json)
Hash identifier: 1R/r8NdpsrVTyu0//wO87WSQNYrZaTMeX7aV4UcB6I8=
Subject key identifier: AF:7F:E6:73:D0:9D:7E:A8:CA:90:F0:DB:46:27:86:45:AA:D8:DC:9F
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 01A019C3F52F23D054ED40243F31A39BE368
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/r3_mc9CdfqjKkPDbRieGRarY3J8.roa
Signing time: Wed 19 Aug 2026 11:24:27 +0000
ROA not before: Wed 19 Aug 2026 11:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50132
IP address blocks: 185.115.33.0/24 maxlen: 24
185.115.34.0/24 maxlen: 24
185.184.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:c3:f5:2f:23:d0:54:ed:40:24:3f:31:a3:9b:e3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: Aug 19 11:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7fe673d09d7ea8ca90f0db46278645aad8dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e3:ea:4a:be:59:4f:9a:c3:39:3c:f2:66:25:
5f:97:7b:1c:77:ae:58:c4:a9:aa:93:b2:5d:d2:49:
ae:f7:14:07:85:ae:66:75:33:de:d2:da:a4:96:d5:
05:aa:90:3c:6a:a8:ba:d4:f1:dd:aa:05:5e:9e:fb:
46:79:90:37:11:50:df:e3:5c:83:89:fe:cb:12:70:
c6:51:76:fa:f0:11:2c:4d:ec:a0:18:a3:08:e5:8e:
01:22:69:c9:4f:d2:ca:e3:c0:ad:ad:08:25:b5:4b:
07:13:81:eb:62:c6:10:ed:9d:e3:6b:1c:e2:b8:ce:
69:e2:0d:a5:23:66:81:d8:bd:40:f5:5d:8f:ed:82:
e1:65:bf:46:3c:f3:96:2d:8f:2b:62:20:9b:ab:74:
79:cc:fe:90:d1:25:ef:fe:ff:16:18:68:93:54:28:
ed:b7:0f:8d:26:2a:d2:1d:1b:24:a2:7b:99:9f:e7:
26:83:8a:2d:3a:af:ee:f8:aa:ad:75:5a:e8:3d:d3:
6b:c6:97:8a:85:c1:9a:7e:11:50:ad:14:74:70:4e:
6d:1f:b1:aa:3f:3e:54:54:3a:18:b4:9f:16:3c:28:
ed:ab:69:85:1a:a2:60:1f:2a:a9:2a:9f:92:b0:9b:
1d:22:fc:53:0d:9d:d3:22:d3:86:83:6a:bc:89:2d:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:E6:73:D0:9D:7E:A8:CA:90:F0:DB:46:27:86:45:AA:D8:DC:9F
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/r3_mc9CdfqjKkPDbRieGRarY3J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.33.0-185.115.34.255
185.184.42.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3c:33:00:88:cb:b0:40:4e:13:00:71:05:5d:2e:2c:b7:a7:
5d:66:00:a9:ec:ae:72:e9:b2:cc:87:86:b7:15:66:3d:ef:c5:
2e:44:e0:54:08:a4:4d:cc:a5:03:4b:75:10:5d:42:9c:33:72:
ea:d7:7f:20:b4:ae:6f:53:4f:d8:6c:f1:ee:94:49:ff:c3:4c:
c9:0e:b9:9c:cd:97:d9:a2:52:90:04:b4:5b:33:89:db:a6:54:
f3:49:6c:af:1a:a7:4e:ff:cd:21:34:e4:83:f8:8f:2b:fe:d9:
c3:94:f1:03:ef:a3:c8:27:1e:f5:7d:be:f9:a7:b6:92:3e:97:
f0:6c:c6:06:25:41:db:5d:c1:85:a0:5f:e7:ff:72:ff:a4:b3:
c8:1d:5c:09:80:4d:91:fb:af:81:68:f3:45:27:9f:8b:87:af:
0b:5b:e0:89:22:44:89:15:ef:64:15:b8:8a:b5:ed:06:30:9c:
93:cc:47:45:6c:c3:ff:8a:42:ef:42:7d:3b:22:f5:4b:9d:6c:
15:a3:fb:92:68:79:99:72:d5:bb:e6:51:8f:3f:c8:dc:50:df:
f4:81:66:d5:43:e8:af:c6:d2:ce:a3:f2:f5:ed:40:15:93:87:
ea:47:7b:7a:1d:55:a7:1a:ca:a9:12:08:a9:36:36:6f:7e:a7:
93:f5:31:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:17 2026 by rpki-client