Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/PYhdlsUvc6cMikLsj2CZu44GozA.roa
File: PYhdlsUvc6cMikLsj2CZu44GozA.roa (raw, json)
Hash identifier: TWRSUVS4O6iaQs3ZX5NWtc+VI0J6VDPVPjsAdIWPgM0=
Subject key identifier: 3D:88:5D:96:C5:2F:73:A7:0C:8A:42:EC:8F:60:99:BB:8E:06:A3:30
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01A062141C9BFBC4DB19BDA3FCA973358380
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/PYhdlsUvc6cMikLsj2CZu44GozA.roa
Signing time: Wed 02 Sep 2026 12:24:40 +0000
ROA not before: Wed 02 Sep 2026 12:24:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203050
IP address blocks: 45.10.37.0/24 maxlen: 24
149.170.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:14:1c:9b:fb:c4:db:19:bd:a3:fc:a9:73:35:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Sep 2 12:24:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d885d96c52f73a70c8a42ec8f6099bb8e06a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:2a:8b:94:1b:85:b0:66:fb:55:36:4e:78:
7f:85:d2:fe:25:20:ff:8f:56:bf:dd:47:c5:41:47:
6b:20:34:ec:13:22:3f:b5:61:15:75:d9:b0:bd:ee:
0e:bc:84:c3:2a:86:79:47:a0:3b:43:c4:3a:f4:fc:
da:f8:c8:6c:4e:1a:9d:7c:1e:2b:c0:09:97:7c:bf:
cc:67:9c:32:9b:7b:bc:f6:6d:57:a1:ff:59:95:9c:
45:28:67:a3:56:c9:53:ba:54:fa:26:76:ed:2a:71:
75:96:65:5b:aa:ab:32:0c:f2:15:7e:2e:eb:9b:b1:
8c:ef:13:9c:26:6c:81:d8:11:79:17:af:54:06:8d:
0e:19:e3:9e:78:1e:9b:ed:ac:66:61:4a:bb:f5:ca:
a4:08:85:ba:43:f4:0e:1c:15:72:11:fc:7d:ba:30:
c6:74:71:9e:46:8e:65:cf:a8:e5:3b:32:ec:32:19:
d0:76:06:31:3a:c1:c7:dd:9a:3c:f5:35:f3:30:47:
52:8f:ba:cf:21:ea:2a:07:ff:24:c8:ff:de:f9:5a:
d2:f6:9a:ba:6f:92:fd:42:7a:5c:cf:14:27:f1:6a:
fa:97:e2:09:a4:23:ff:09:2e:57:f2:d0:72:21:2a:
3f:9e:43:11:e5:bb:eb:8e:ae:8f:5a:1e:7f:84:95:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:5D:96:C5:2F:73:A7:0C:8A:42:EC:8F:60:99:BB:8E:06:A3:30
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/PYhdlsUvc6cMikLsj2CZu44GozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.37.0/24
149.170.228.0/24
Signature Algorithm: sha256WithRSAEncryption
36:87:87:8e:4c:27:80:8c:98:cd:1d:70:33:1e:b7:8a:8d:06:
4f:3e:f7:e5:59:03:46:75:b4:16:cf:f1:bb:12:36:dd:78:5a:
30:01:19:2b:c5:c2:f2:ab:57:51:29:8b:7e:6f:18:96:0c:96:
e5:aa:97:f8:4a:69:ef:ed:4f:83:8b:aa:a0:03:d0:2d:3d:4c:
0e:d0:8e:5c:33:e2:b7:3b:40:58:1a:d8:9d:5b:e3:01:57:f6:
30:7b:a2:08:ff:fb:2b:2d:6d:a3:1b:10:bf:a9:64:12:b0:62:
e4:bb:5a:64:d6:07:8e:b8:49:6c:6d:95:f9:5f:9a:d8:33:25:
32:a2:c2:34:7e:a4:45:98:bd:51:cf:5e:c7:8a:93:06:b1:99:
d5:04:9d:0c:6e:a2:9c:c3:5f:89:90:3b:23:75:ee:fc:0d:03:
d0:8f:17:a2:7a:af:6f:4a:e1:f5:df:35:dd:48:4e:81:19:27:
ec:d3:20:40:4f:a9:9e:41:76:9b:4b:a5:7a:1d:5d:c8:eb:f8:
ad:24:4a:de:bb:93:7b:37:5c:6f:7b:b4:20:9d:ba:fd:cf:f6:
27:e5:36:d3:1a:ed:b9:63:55:f8:6b:39:12:9c:bf:c8:4e:46:
10:98:15:53:95:f7:ae:49:3a:19:3d:5d:12:3d:29:95:5c:97:
17:16:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:41 2026 by rpki-client