Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa
File: I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa (raw, json)
Hash identifier: lZPJ4+UTAfzaBn1qvEutfPFu9s5OmtvAwYfd82jbQxI=
Subject key identifier: 23:75:E1:7F:60:F3:3C:2F:F2:0C:5E:C4:A7:B6:33:04:C1:4C:CB:D7
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019EC9FDC5CB8F9858CC284DC2C1CDB6C8C7
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa
Signing time: Mon 15 Jun 2026 06:35:11 +0000
ROA not before: Mon 15 Jun 2026 06:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49023
IP address blocks: 194.36.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c9:fd:c5:cb:8f:98:58:cc:28:4d:c2:c1:cd:b6:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jun 15 06:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2375e17f60f33c2ff20c5ec4a7b63304c14ccbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:bb:4d:df:ac:c0:6b:f4:c7:59:1b:6d:e9:
48:cd:e1:e9:17:15:09:b0:fc:db:c1:64:44:fa:d1:
7a:00:ec:31:5e:c9:36:24:35:c9:92:0d:8c:84:e1:
b3:5f:b6:60:0b:f6:df:2f:dd:be:20:04:18:48:99:
4e:fc:e7:f3:50:dc:bd:86:56:42:1d:af:82:8a:da:
2d:34:f0:3d:6c:f3:cb:86:cb:04:9c:a3:67:ae:eb:
1f:9b:29:8d:5f:6f:62:f3:83:1d:62:62:a9:9a:01:
2f:91:81:a6:82:7e:45:92:15:91:e3:b4:c7:63:77:
60:d3:f6:38:b7:65:2b:68:13:1f:18:08:45:07:2c:
09:6a:da:ff:62:7d:1f:08:28:1f:7c:48:9e:c3:2c:
7f:d5:22:41:4e:0d:04:80:ac:6f:47:df:e6:1f:11:
00:1c:0c:a6:69:78:0b:f1:84:e7:5b:8c:09:5a:0a:
46:d6:8a:b4:e3:3c:e2:48:b9:ff:68:ac:67:ca:d2:
28:4b:58:b2:b1:1f:c9:f4:6e:8b:3c:8b:9f:a5:b4:
2b:2a:13:f4:ca:6d:d5:ea:87:fa:d9:7e:97:12:c6:
c8:61:c9:3f:ce:20:10:4f:ca:1a:ed:5a:2e:2f:0e:
b5:ca:21:ee:0a:02:a4:55:44:91:a6:72:6e:9f:16:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:E1:7F:60:F3:3C:2F:F2:0C:5E:C4:A7:B6:33:04:C1:4C:CB:D7
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/I3Xhf2DzPC_yDF7Ep7YzBMFMy9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.140.0/24
Signature Algorithm: sha256WithRSAEncryption
76:30:6e:27:ad:b6:4a:de:76:8c:5d:d6:49:3a:2b:c6:37:7e:
54:d6:97:c2:82:73:11:c1:73:d7:76:95:10:b8:50:86:91:7d:
ea:e6:a2:5c:3d:30:2c:3e:be:06:58:8b:97:40:32:51:c1:66:
43:fe:00:61:0c:6a:75:c1:39:32:ac:cb:33:b9:74:44:14:d7:
2d:61:04:c9:53:e0:41:fc:1c:83:aa:23:cc:fe:d0:d1:00:ad:
be:96:06:bd:52:36:6a:fb:c9:60:ff:af:c6:7b:22:3a:02:52:
f0:32:20:84:84:e4:e6:7a:5b:a6:33:b9:14:cc:a0:88:b6:41:
d8:fc:c7:51:09:2f:e6:ef:79:5b:ee:76:2f:be:8c:a3:e4:4d:
66:0c:2a:a7:6d:3f:3b:1c:0f:b4:36:0a:f9:c8:ad:9f:23:62:
44:a1:26:48:27:2b:e2:44:60:10:c8:45:a9:d2:d4:6f:95:6b:
b1:07:61:b6:0b:7f:b8:5e:40:e2:b4:ba:e8:c5:f2:7c:fe:3c:
07:d0:3f:9b:ba:81:79:07:c5:d2:24:a5:22:f3:22:55:14:91:
1c:84:ae:cc:8b:c1:ce:9e:0d:ca:cd:64:4c:50:da:df:08:a5:
fe:a9:6f:85:3e:44:53:18:c1:e3:42:ee:76:b7:56:1d:c9:49:
62:79:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client