Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iT3xHJ3e7fTF99buVC6ZO6RGCPk.roa
File: iT3xHJ3e7fTF99buVC6ZO6RGCPk.roa (raw, json)
Hash identifier: cFmLsWWNN8QjqTq8QBb4MSMqm51H/2AZcJoZja9UCHg=
Subject key identifier: 89:3D:F1:1C:9D:DE:ED:F4:C5:F7:D6:EE:54:2E:99:3B:A4:46:08:F9
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A11339EFA29718329EFB661273BAEA166E
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iT3xHJ3e7fTF99buVC6ZO6RGCPk.roa
Signing time: Tue 06 Oct 2026 21:58:46 +0000
ROA not before: Tue 06 Oct 2026 21:58:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218587
IP address blocks: 95.214.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:39:ef:a2:97:18:32:9e:fb:66:12:73:ba:ea:16:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 6 21:58:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=893df11c9ddeedf4c5f7d6ee542e993ba44608f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:83:bb:64:c9:f8:5d:df:a2:d8:73:6d:fe:
3e:48:08:63:9b:c1:ce:a5:f7:97:57:0a:6c:31:9f:
0c:52:35:8a:d2:77:c3:56:f8:cc:ce:71:6c:85:16:
58:a3:48:5a:56:c7:1e:36:5b:23:40:db:7e:d8:0c:
c1:cc:62:3e:83:e3:45:c0:59:c2:21:8e:3d:80:ee:
5c:27:97:61:0d:22:af:21:ef:66:41:37:a0:ff:65:
b1:34:14:2f:2e:f8:d8:d0:32:99:32:1e:06:03:17:
21:f8:59:88:b3:c2:9b:9e:8a:5f:fb:3e:9c:6d:a4:
05:94:55:8a:27:0c:4c:e7:2d:ed:5e:b8:25:9f:fb:
88:5b:4e:c7:82:e7:02:58:2d:8d:3b:68:db:58:cc:
68:ed:83:94:2e:b0:d0:60:a3:f4:43:79:8d:88:06:
14:71:39:31:07:4c:26:69:8c:40:9c:81:03:5a:5c:
d7:83:e2:8b:45:87:03:f6:63:91:5c:e2:e0:5d:1e:
64:17:87:9c:5b:74:3e:be:5e:a6:06:24:c9:38:f1:
f1:1e:f9:74:63:9e:a1:ec:ce:d3:b2:a8:4e:61:e1:
b6:4c:92:42:2f:6c:55:24:ab:be:9c:e8:93:ac:8f:
8e:d8:e2:14:56:87:12:8d:9b:ff:39:ef:0a:11:a9:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:F1:1C:9D:DE:ED:F4:C5:F7:D6:EE:54:2E:99:3B:A4:46:08:F9
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/iT3xHJ3e7fTF99buVC6ZO6RGCPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.83.0/24
Signature Algorithm: sha256WithRSAEncryption
56:79:50:fe:ad:a3:fa:a4:38:a6:57:75:d9:7d:1e:b8:dc:33:
fb:07:73:09:3c:ef:7a:7c:ab:6b:3f:8e:b4:72:3c:31:04:6e:
fb:29:ba:93:c1:e5:4f:da:12:c0:8d:a4:a2:cf:75:f3:7e:0a:
e5:09:ec:83:2d:3f:55:24:c4:4e:ef:88:61:d5:8f:52:96:dd:
0b:20:9e:6b:87:e3:c8:9b:81:23:39:98:ec:3e:f7:04:ea:f4:
fa:c1:4b:59:a9:24:79:8c:f9:64:4f:b8:2e:ac:dc:2c:80:f1:
dc:0f:40:33:96:db:9f:0d:07:0c:35:7c:4c:43:44:c2:56:70:
44:4e:56:6f:e3:56:bb:76:3a:af:4e:55:ff:cc:5d:93:c1:65:
60:28:94:aa:16:f1:a7:ab:79:df:32:6e:c7:60:bc:64:66:9c:
61:a6:f9:77:5c:61:3b:21:06:6a:0c:f4:ae:ec:8e:ee:ef:f1:
81:fd:b2:6f:e8:82:f0:c3:6b:bf:d3:37:c9:53:36:52:e5:77:
70:c8:98:43:8c:54:26:18:61:08:49:0f:a1:0b:78:0b:e2:2e:
87:71:1d:e5:52:97:d6:09:22:76:0e:c6:a3:82:e9:d5:8e:35:
6c:09:c8:af:24:d7:8b:c6:4d:0a:77:a0:d4:5f:6f:d7:b5:17:
13:b1:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:13 2026 by rpki-client