Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3IacvNRism4GZ0zEUtYzlGSV7Bc.roa
File: 3IacvNRism4GZ0zEUtYzlGSV7Bc.roa (raw, json)
Hash identifier: NSjcjyZ7oK5mBE+vm+rIzz5SIjKJvxRPeUHfkbLaZFE=
Subject key identifier: DC:86:9C:BC:D4:62:B2:6E:06:67:4C:C4:52:D6:33:94:64:95:EC:17
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FD5730FC0AA6591CF002B2C26C4A0712C
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3IacvNRism4GZ0zEUtYzlGSV7Bc.roa
Signing time: Thu 06 Aug 2026 05:01:55 +0000
ROA not before: Thu 06 Aug 2026 05:01:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153622
IP address blocks: 61.14.225.0/24 maxlen: 24
160.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 17:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:73:0f:c0:aa:65:91:cf:00:2b:2c:26:c4:a0:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 6 05:01:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc869cbcd462b26e06674cc452d633946495ec17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:2b:00:a3:30:2c:15:9f:d1:df:19:93:3c:
1b:ad:c6:3e:00:58:08:66:bf:f0:ad:7c:53:79:f8:
1a:d7:34:8e:30:bf:74:41:d5:ff:c2:46:77:12:33:
4a:5c:9c:bd:00:81:32:bd:c6:6f:2a:a0:10:7b:92:
56:4c:8c:30:6d:88:2e:df:75:cc:80:e5:a4:af:51:
05:57:cc:f6:3e:c4:b3:e4:d1:55:66:5f:80:da:8e:
e4:a0:39:ac:39:e8:c4:53:7d:c3:d6:4f:8b:61:8f:
2f:20:5b:89:d2:05:5f:8b:ec:ad:8b:10:0e:4f:19:
b3:ab:2c:ab:07:ec:d2:b2:e6:2e:7d:b3:79:42:bf:
f6:bb:13:22:3e:32:ae:f9:9c:d4:46:4a:94:c4:5f:
47:18:3d:23:af:f3:e3:7c:91:f1:2c:ea:4b:72:04:
9b:9c:9d:a4:d4:0e:1d:87:49:d0:a0:85:7c:02:41:
9e:d9:c8:0b:ea:f2:e9:f1:f9:69:94:b1:76:73:89:
97:1d:3f:70:b2:20:7e:a9:9f:93:59:a0:97:c0:8b:
3c:09:a0:79:12:37:b3:1c:37:81:b3:ad:87:a1:a8:
50:ab:1b:62:7a:05:f5:20:8d:91:95:10:ef:b8:78:
09:a8:fa:60:55:be:0f:c0:a1:9a:1a:8b:46:a8:f4:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:9C:BC:D4:62:B2:6E:06:67:4C:C4:52:D6:33:94:64:95:EC:17
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3IacvNRism4GZ0zEUtYzlGSV7Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.225.0/24
160.238.98.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:35:8f:c9:34:ef:6b:0d:63:8f:54:9f:3f:bb:76:53:8d:99:
05:c4:39:01:35:c3:51:06:45:eb:51:ce:e4:de:d4:34:d3:96:
4d:d6:3a:3e:e3:85:99:4e:66:72:4e:0c:6e:96:e5:39:8a:da:
1c:8c:f3:8a:66:0a:96:2d:2a:d1:09:ed:cb:04:9b:14:95:e1:
cf:2b:3f:c3:61:ec:64:12:2b:13:b6:94:8c:b0:45:71:47:21:
f1:78:14:3a:82:7f:66:6e:00:a2:24:94:38:b3:1a:93:e5:ae:
84:c7:a3:23:40:1d:0c:88:15:14:1f:e8:43:0c:b6:aa:c6:a3:
7f:a6:90:26:bc:ce:03:f1:2d:69:1d:74:67:32:79:0a:b0:64:
25:f0:a4:a8:79:79:d2:25:cb:2a:70:1d:d6:38:0e:ff:f2:f8:
46:bd:60:51:a5:23:f5:d3:c9:3e:a7:0c:08:c4:1d:f9:7d:60:
d0:a1:01:63:d0:25:28:d3:68:7c:73:af:12:d0:cd:cb:a9:c1:
50:1f:9b:2e:93:af:08:7e:e0:88:64:1a:70:80:0f:cb:b1:89:
bf:c0:31:2a:16:e6:45:cb:af:c1:9f:87:b4:03:1e:09:8a:30:
c4:a5:89:80:ba:43:e1:5b:59:00:1d:91:fa:ae:78:dd:0d:6c:
af:14:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 02:45:58 2026 by rpki-client