Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3FvVdfFOaj0OsGUL6G2CYClf0sE.roa
File: 3FvVdfFOaj0OsGUL6G2CYClf0sE.roa (raw, json)
Hash identifier: eyoDdfEy7dAL6wyjh5kMLGk2I6vBwlxHWkuGqZqdSag=
Subject key identifier: DC:5B:D5:75:F1:4E:6A:3D:0E:B0:65:0B:E8:6D:82:60:29:5F:D2:C1
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A1685354D0F249DC9BDE01E3ADE6E6CD9B
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3FvVdfFOaj0OsGUL6G2CYClf0sE.roa
Signing time: Fri 23 Oct 2026 10:34:14 +0000
ROA not before: Fri 23 Oct 2026 10:34:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6282
IP address blocks: 176.227.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:53:54:d0:f2:49:dc:9b:de:01:e3:ad:e6:e6:cd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Oct 23 10:34:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc5bd575f14e6a3d0eb0650be86d8260295fd2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:95:8f:02:7d:a3:8a:40:15:f3:9a:07:54:
54:52:6c:90:a7:1a:aa:03:4f:bb:1b:39:4d:69:a0:
78:a4:4e:2b:96:0a:e1:94:c4:7c:2d:65:9c:88:18:
69:df:c0:27:5e:84:4c:5b:0e:e4:5b:ca:ea:e2:bc:
85:54:25:4c:9c:a0:fc:7e:c8:02:4b:1f:37:d5:00:
04:af:92:49:21:5a:09:f7:bb:97:b9:c3:9c:e8:a4:
6f:9b:91:10:03:22:d9:6f:f8:69:89:d3:68:95:85:
ea:9b:9a:64:a0:95:14:b2:27:cf:52:9a:35:2b:a7:
bd:44:e0:39:43:67:1d:2e:22:66:3a:79:88:e8:eb:
ef:de:72:82:1b:d9:bf:97:81:d8:cd:43:9b:69:de:
cc:07:8e:bf:0f:07:d5:3f:3f:a5:40:42:26:1a:e8:
24:32:d8:fb:85:63:5e:f8:48:b1:5a:c7:6c:96:c6:
cc:f2:41:98:8a:81:e4:ca:0c:7a:27:05:da:6c:77:
e9:64:32:42:ad:da:be:bf:f7:c5:d1:8e:8f:ae:d1:
bc:83:73:f7:3d:1a:e6:35:18:96:ba:e1:8e:43:06:
60:e2:90:44:fd:23:43:d9:9b:b1:ca:48:b0:91:c3:
85:7d:21:e0:73:6d:49:3a:da:0f:5b:5a:c8:25:1b:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:D5:75:F1:4E:6A:3D:0E:B0:65:0B:E8:6D:82:60:29:5F:D2:C1
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/3FvVdfFOaj0OsGUL6G2CYClf0sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.159.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:98:07:46:2c:84:63:0d:64:6e:ea:54:37:7c:e5:a0:1d:2d:
80:2a:f0:f3:e4:09:7f:a6:49:c4:5d:c0:bf:be:e7:25:ac:cf:
17:43:a6:db:e5:d1:3c:4f:4a:73:de:8b:3b:b4:95:28:ad:93:
a5:43:94:c6:30:f0:4e:7e:17:fb:36:83:47:49:14:49:03:ae:
55:de:33:05:58:ea:da:8a:50:5f:ee:04:8a:6f:f9:b4:b4:0f:
20:a1:07:42:89:01:9d:d3:53:f2:e6:76:17:7c:08:91:53:5a:
50:fb:aa:3b:37:79:5e:f6:fd:e9:4f:41:5b:dc:70:3f:65:c4:
31:04:3f:06:75:7b:39:bc:09:68:84:b6:8d:fb:69:05:ad:39:
df:8d:58:cf:f2:44:2b:d6:7b:8e:a3:e2:ad:30:1e:41:4d:e0:
00:c4:fe:32:93:73:d3:9e:27:b1:05:cd:2b:c6:e4:07:62:05:
c8:eb:cc:c4:14:f4:35:05:e6:95:d6:0e:bb:c8:da:86:53:b4:
7e:9c:d0:76:44:12:d7:2d:e3:56:a2:96:d3:f7:c9:8f:3e:2f:
29:95:81:73:ea:db:6c:cc:f3:39:1e:6e:05:e6:f6:9b:31:90:
5e:1a:1c:b6:7b:d2:5c:24:58:0e:82:1d:66:29:c5:30:04:31:
1c:af:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:55:55 2026 by rpki-client