Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3XsiZbWegOdpyVOc_mN32Bgr6Ac.roa
File: 3XsiZbWegOdpyVOc_mN32Bgr6Ac.roa (raw, json)
Hash identifier: K+GBrncia876g3YzQJCjXROtI+uYHyb7gesWaOkMZrI=
Subject key identifier: DD:7B:22:65:B5:9E:80:E7:69:C9:53:9C:FE:63:77:D8:18:2B:E8:07
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FEC030F2B16AFE50D2A75AE0943EBA221
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3XsiZbWegOdpyVOc_mN32Bgr6Ac.roa
Signing time: Mon 10 Aug 2026 14:10:51 +0000
ROA not before: Mon 10 Aug 2026 14:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153168
IP address blocks: 61.14.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:03:0f:2b:16:af:e5:0d:2a:75:ae:09:43:eb:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 10 14:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd7b2265b59e80e769c9539cfe6377d8182be807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:28:9a:a1:3a:ad:de:2b:03:90:4a:dc:a2:
46:7d:72:b1:4f:2c:17:bf:79:94:03:3e:10:b4:c3:
a2:09:cc:6f:3e:6f:39:01:de:df:39:a1:13:d0:64:
b3:0e:cc:c6:ec:38:c6:08:e5:8b:4d:f9:09:6f:f8:
c9:60:af:82:7f:8d:a8:4c:9a:80:92:49:d4:4c:44:
f4:cc:2d:29:c6:f3:52:55:fd:20:1e:1c:16:96:3a:
48:e4:17:71:a4:7b:bf:90:43:b7:3d:a1:8e:fc:52:
49:d4:b8:f0:d8:21:66:da:3b:91:be:a4:87:64:f6:
48:3f:35:5f:9a:f4:b4:64:47:58:40:55:91:2f:14:
ca:e6:21:9e:cd:27:18:47:e2:c6:8a:3b:6a:81:b1:
2f:67:2a:88:c1:11:8b:f9:a5:e3:73:73:36:ba:0f:
73:34:28:4c:8d:50:dc:ba:b0:15:89:1c:51:ad:1e:
6f:93:61:bf:c8:28:fa:41:8e:25:4f:e7:39:e5:f5:
af:06:19:a1:99:2b:ab:3d:ce:2f:db:de:76:8c:18:
92:50:4e:2d:2d:fe:7b:25:ac:bb:14:3d:f0:bb:8d:
ff:55:ef:5b:a1:50:83:73:e8:d9:af:a1:0e:8d:e2:
0b:a6:d5:44:11:72:f9:15:54:fb:0b:a3:0f:5f:7e:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:22:65:B5:9E:80:E7:69:C9:53:9C:FE:63:77:D8:18:2B:E8:07
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/3XsiZbWegOdpyVOc_mN32Bgr6Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.14.225.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ce:76:db:a5:51:66:90:e3:71:2a:47:a8:65:ee:ed:90:d2:
36:8b:21:e9:4e:fa:36:a1:2d:7c:d4:4c:09:77:14:bb:30:24:
e1:79:63:4f:a2:f9:06:6b:1e:70:5a:08:9b:e0:c6:45:29:16:
36:91:4e:d1:d7:6d:19:a0:54:8d:19:9a:26:cb:aa:27:83:9e:
c6:76:d4:43:3d:bc:fa:70:8f:ae:a5:54:ff:a0:a8:c5:e2:0a:
27:cb:c7:63:9c:cf:0a:6f:4a:f1:d4:78:70:0e:49:cf:ac:d2:
25:e8:75:eb:25:44:c2:c0:09:e3:88:4b:7a:0e:9d:1a:20:6d:
84:e3:cd:15:04:66:dc:0d:d8:d2:46:64:d1:b4:ea:6b:87:78:
95:1a:e4:4e:ab:72:f0:b4:af:8b:4f:61:23:9a:e7:73:4d:d6:
8f:80:08:6c:c8:b2:18:73:a1:20:aa:7a:e1:5c:7e:45:31:ed:
cc:c0:81:15:a3:08:98:29:d8:d6:33:93:f6:0f:d0:08:01:3f:
09:3f:77:28:83:11:8c:15:bc:fb:ed:61:5a:ab:3a:6d:3b:00:
01:ec:0c:a0:a4:fd:74:e3:c0:9d:4e:21:9c:32:7e:75:0a:4a:
49:45:7e:b8:07:6b:74:0c:a7:7d:2d:c2:2c:10:49:6c:17:b4:
bd:8e:28:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/sAw8rFq/lDSp1rglD66IhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwODEwMTQxMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDdiMjI2NWI1OWU4MGU3NjljOTUzOWNmZTYzNzdkODE4MmJlODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ0omqE6rd4rA5BK3KJGfXKxTywX
v3mUAz4QtMOiCcxvPm85Ad7fOaET0GSzDszG7DjGCOWLTfkJb/jJYK+Cf42oTJqA
kknUTET0zC0pxvNSVf0gHhwWljpI5BdxpHu/kEO3PaGO/FJJ1Ljw2CFm2juRvqSH
ZPZIPzVfmvS0ZEdYQFWRLxTK5iGezScYR+LGijtqgbEvZyqIwRGL+aXjc3M2ug9z
NChMjVDcurAViRxRrR5vk2G/yCj6QY4lT+c55fWvBhmhmSurPc4v2952jBiSUE4t
Lf57Jay7FD3wu43/Ve9boVCDc+jZr6EOjeILptVEEXL5FVT7C6MPX3654wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN17ImW1noDnaclTnP5jd9gYK+gHMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvM1hzaVpiV2VnT2RweVZPY19tTjMyQmdyNkFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPQ7hMA0G
CSqGSIb3DQEBCwUAA4IBAQBKznbbpVFmkONxKkeoZe7tkNI2iyHpTvo2oS181EwJ
dxS7MCTheWNPovkGax5wWgib4MZFKRY2kU7R120ZoFSNGZomy6ong57GdtRDPbz6
cI+upVT/oKjF4gony8djnM8Kb0rx1HhwDknPrNIl6HXrJUTCwAnjiEt6Dp0aIG2E
480VBGbcDdjSRmTRtOprh3iVGuROq3LwtK+LT2EjmudzTdaPgAhsyLIYc6Egqnrh
XH5FMe3MwIEVowiYKdjWM5P2D9AIAT8JP3cogxGMFbz77WFaqzptOwAB7AygpP10
48CdTiGcMn51CkpJRX64B2t0DKd9LcIsEElsF7S9jijo
-----END CERTIFICATE-----
Generated at Thu Aug 13 02:25:24 2026 by rpki-client