Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-N3rFcn7WFP9O7Vvil1cp3ZLak.roa
File: d-N3rFcn7WFP9O7Vvil1cp3ZLak.roa (raw, json)
Hash identifier: C6yatIm0VRWVHEHfHp9LpFBovAMvspdEx1PyQ4Fh1/s=
Subject key identifier: 77:E3:77:AC:57:27:ED:61:4F:F4:EE:D5:BE:29:75:72:9D:D9:2D:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019D2AA997B0947728E20637EC88F8D569E1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-N3rFcn7WFP9O7Vvil1cp3ZLak.roa
Signing time: Thu 26 Mar 2026 15:00:50 +0000
ROA not before: Thu 26 Mar 2026 15:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
94.177.122.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:97:b0:94:77:28:e2:06:37:ec:88:f8:d5:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 26 15:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77e377ac5727ed614ff4eed5be2975729dd92da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:31:f2:8c:75:1b:86:97:8f:a5:4c:38:27:
5b:90:8d:66:e2:a8:b6:d6:75:7a:8c:33:24:d1:17:
43:0d:ec:01:96:9f:63:ce:08:85:27:68:b3:3d:2e:
b9:6d:3c:a5:19:b8:6e:81:ce:06:e7:77:95:c5:e0:
90:fb:96:ef:a7:d1:0d:6b:90:a6:0b:ae:c1:ae:fa:
8c:33:3a:dd:f9:df:74:16:43:b0:9f:20:de:92:15:
61:18:16:5c:d0:f3:68:a9:e0:bd:03:56:d7:22:3c:
a1:af:5c:14:69:f2:4e:4c:97:d4:64:ac:05:db:56:
84:52:2f:78:00:eb:f7:5f:3f:36:72:57:4b:0d:25:
8f:98:65:bb:5a:65:4f:f4:83:ae:cd:6a:39:e8:6e:
69:05:88:06:0d:0d:86:b6:6c:9c:f4:9a:5c:dc:b0:
e6:a6:8e:cd:99:db:2a:6c:4d:44:65:16:ee:ec:19:
53:23:37:c1:fb:35:5a:95:7a:fa:3a:54:a7:2b:c3:
4c:55:b1:b5:ac:35:58:e3:65:4f:33:89:75:6f:e4:
1c:84:73:e7:42:ec:ee:c9:93:03:1f:6b:57:54:67:
75:54:14:92:91:96:4f:74:fe:d8:07:c8:fa:b3:fc:
09:2f:4d:6a:f3:97:2b:11:7a:52:8d:8b:99:9c:e8:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:77:AC:57:27:ED:61:4F:F4:EE:D5:BE:29:75:72:9D:D9:2D:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d-N3rFcn7WFP9O7Vvil1cp3ZLak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
94.177.122.0/24
139.28.99.0/24
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a5:59:a4:27:b3:07:10:05:77:a3:b6:ea:01:a6:06:7c:11:
7a:cd:9c:8b:5e:3c:3e:3f:8e:c6:8a:2d:4c:1a:53:73:69:4a:
e7:44:b1:8e:88:54:cf:5d:4f:bf:b2:9b:6b:a0:0a:49:d8:6d:
b9:6e:bb:dc:9c:6e:91:84:8b:0c:1c:75:c1:0d:61:15:87:56:
ac:91:8c:27:1d:c9:90:14:aa:c0:57:f7:ab:1c:80:14:7b:dc:
00:81:97:6b:2d:03:92:a7:d5:44:55:36:7b:9d:98:5a:b7:50:
68:2d:46:34:af:4c:98:7f:5f:9d:c8:40:6d:b2:b2:a3:9a:04:
25:0a:29:64:ca:f9:11:92:be:1b:4c:9f:d8:77:2a:41:53:17:
b6:31:79:fb:6e:06:f8:e3:dd:dd:f2:05:e1:09:25:a8:bb:e8:
c3:9f:25:ba:6d:26:ed:7e:b9:e8:c1:7b:76:99:a6:31:da:a3:
b6:97:09:c8:06:95:b1:f2:d7:fc:46:2d:26:f8:33:d7:be:e9:
ee:81:a6:35:bb:19:5f:cc:f0:55:95:ee:e5:79:30:f2:68:e3:
f5:db:1c:11:bc:14:c4:f2:fa:c1:76:7f:cf:03:a4:fe:0d:87:
18:e0:ae:0d:f4:21:d9:12:73:20:6e:92:1b:03:f3:3f:c1:51:
f4:c1:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:46:50 2026 by rpki-client