Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sW3DBcB9sBA77CopTagPDD54BOA.roa
File: sW3DBcB9sBA77CopTagPDD54BOA.roa (raw, json)
Hash identifier: zOkrnJa2CpEWC4vYjGnNB5IYelYB6ppfOZkYw8U/nk4=
Subject key identifier: B1:6D:C3:05:C0:7D:B0:10:3B:EC:2A:29:4D:A8:0F:0C:3E:78:04:E0
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019CB306196577E9DA643212058445503AB2
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sW3DBcB9sBA77CopTagPDD54BOA.roa
Signing time: Tue 03 Mar 2026 09:27:27 +0000
ROA not before: Tue 03 Mar 2026 09:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212087
IP address blocks: 84.232.22.0/24 maxlen: 24
84.232.32.0/23 maxlen: 24
84.232.110.0/24 maxlen: 24
84.232.114.0/24 maxlen: 24
84.232.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:06:19:65:77:e9:da:64:32:12:05:84:45:50:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Mar 3 09:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b16dc305c07db0103bec2a294da80f0c3e7804e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:a9:92:8a:a6:75:3a:af:ce:1a:6f:63:11:
ff:02:a2:48:87:e5:6e:25:4c:9b:72:a9:98:66:40:
4b:55:72:d8:84:91:6c:f5:ad:52:93:f3:b5:76:7d:
85:d4:0c:16:ea:74:cd:a4:78:2a:72:95:26:99:b1:
fb:e8:f5:c8:fb:d4:e2:2d:4c:89:04:98:39:ae:29:
b4:fd:4d:ee:20:9f:96:91:d0:99:b6:1c:c9:bd:c2:
f7:7f:71:ed:6f:47:2a:55:91:32:ab:ae:fe:b7:ff:
96:9e:8a:a6:00:41:25:df:ac:7b:e1:26:a1:5b:f2:
d9:23:ef:38:e7:93:69:25:f2:4d:1f:33:31:0e:a5:
82:69:86:c1:49:0b:8b:3a:86:1d:77:27:f5:03:34:
1b:22:ad:b7:3a:76:32:a2:75:9d:6d:eb:c9:f9:09:
79:8f:52:2a:78:82:43:e0:b0:d2:b9:1d:4d:01:87:
f0:0a:f6:5f:cf:bb:b5:cb:e1:59:58:0c:dd:8b:83:
bc:35:a0:23:23:5c:bd:97:c2:52:ef:67:96:db:de:
ed:64:fa:69:57:d5:b7:1c:aa:19:f5:6e:1a:ee:3e:
93:e5:f5:27:3a:a9:03:da:84:5f:51:cd:f4:d0:e3:
79:b3:94:42:b7:b3:8f:1e:13:8e:ca:4c:57:aa:b1:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:C3:05:C0:7D:B0:10:3B:EC:2A:29:4D:A8:0F:0C:3E:78:04:E0
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/sW3DBcB9sBA77CopTagPDD54BOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.22.0/24
84.232.32.0/23
84.232.110.0/24
84.232.114.0/24
84.232.121.0/24
Signature Algorithm: sha256WithRSAEncryption
53:93:11:e7:28:8c:40:89:e5:84:e7:1c:c0:4f:cb:71:e4:e5:
72:75:b8:74:ff:20:eb:4f:c5:58:4b:1e:1c:12:69:fc:a0:17:
f3:23:67:d1:07:25:51:ff:3b:92:22:f6:e2:98:fd:f9:13:8f:
4b:2c:c6:6c:d5:93:d3:a3:59:9d:24:72:38:fb:53:3e:fb:2e:
c4:8e:59:cc:ca:d7:40:4b:3f:ed:85:28:c8:34:67:b7:9b:a0:
98:35:ac:55:dd:e0:e8:dd:e6:d0:3c:a6:dc:09:e4:b9:04:4b:
42:26:05:c4:eb:90:c5:4c:55:05:cf:b0:a4:92:36:1a:2b:c5:
60:8f:cd:55:60:35:7a:9b:ea:dd:1c:74:df:dc:51:0f:5e:a0:
da:5e:3f:5b:7f:a0:bc:1f:17:6d:66:42:4b:5d:8d:8f:5e:41:
ee:80:79:4a:52:cd:59:d9:76:bb:38:90:3f:80:5a:47:df:e4:
1d:0c:58:0c:4a:5e:0a:8d:52:11:4c:d3:83:52:b9:a5:da:50:
af:ec:a5:8c:b5:dd:73:59:c3:69:fd:92:59:78:6e:d4:c7:05:
d2:2c:a1:7a:c9:85:fa:89:fa:4b:c8:de:8f:97:e0:7c:e0:76:
61:71:5a:e3:64:70:8f:04:7f:a3:79:8b:a5:9e:da:ae:5b:8e:
cd:18:28:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:57:52 2026 by rpki-client