Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/0r3kkbCIc2trczoA0tV0PpuHTqk.roa
File: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (raw, json)
Hash identifier: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=
Subject key identifier: D2:BD:E4:91:B0:88:73:6B:6B:73:3A:00:D2:D5:74:3E:9B:87:4E:A9
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019E0CC3C4A6815BCAACFCD20B766EDE3C6F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/0r3kkbCIc2trczoA0tV0PpuHTqk.roa
Signing time: Sat 09 May 2026 12:43:36 +0000
ROA not before: Sat 09 May 2026 12:43:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210814
IP address blocks: 109.122.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0c:c3:c4:a6:81:5b:ca:ac:fc:d2:0b:76:6e:de:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: May 9 12:43:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2bde491b088736b6b733a00d2d5743e9b874ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:29:60:89:2a:d7:00:87:60:65:d1:70:17:
ee:6a:eb:07:28:2b:bb:c8:be:e1:fa:4a:cd:cd:cc:
2a:f1:98:9e:00:88:96:54:fb:59:cf:3b:2d:30:7c:
14:c3:99:db:2a:8f:ff:9f:69:2d:5e:af:cf:22:4b:
57:8b:02:e8:9d:20:80:e4:9b:c8:67:05:3b:b3:c0:
15:43:84:f4:91:f5:1a:9c:27:08:9b:27:1c:f2:09:
27:49:70:eb:22:0a:15:17:22:7a:c5:6c:d3:1d:1c:
32:72:f4:38:98:ae:92:4b:fa:c8:51:32:18:61:18:
32:a2:1e:e7:a1:22:d7:fd:31:fc:8e:d0:29:4f:c8:
7d:60:ab:1d:47:fb:88:ed:3f:ee:94:b9:ab:16:7a:
3d:33:90:76:97:92:4f:db:8a:52:fa:f3:a9:82:c9:
c0:e8:17:66:62:89:1f:0f:a6:ee:65:2a:ce:2c:44:
f5:be:8a:a9:87:33:85:4b:37:7c:f7:bf:5d:24:89:
dc:d7:bf:ec:b1:2c:9b:d8:d5:ef:d7:60:6c:dc:0a:
cc:4e:e9:ef:18:ad:c8:86:e5:03:cc:c9:6c:61:b1:
81:0d:73:68:ba:01:c8:59:a6:c7:af:11:77:b0:78:
f9:b8:d2:59:85:ea:36:d7:a1:06:01:5b:41:d2:02:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:E4:91:B0:88:73:6B:6B:73:3A:00:D2:D5:74:3E:9B:87:4E:A9
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/0r3kkbCIc2trczoA0tV0PpuHTqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d0:14:db:9d:5b:64:ba:42:69:5e:83:5b:51:5a:5a:7c:f4:
d9:70:05:2d:70:67:94:f7:c3:84:a5:41:2e:c0:6d:31:5e:68:
8b:78:14:da:a0:85:b1:56:6d:1a:08:82:b5:9a:54:0f:d4:a2:
fa:cf:2f:11:33:81:b2:d8:63:1c:b5:da:a3:2f:80:5e:5c:5d:
6d:52:91:9c:04:1c:b3:ee:c3:5a:82:13:db:92:f2:fb:b2:3c:
de:74:d7:36:f3:66:36:65:82:2f:44:66:01:0a:a3:52:d3:0d:
a9:14:b1:22:46:60:77:64:83:92:1c:7c:5f:97:e8:f0:59:66:
79:dd:8f:70:44:f2:72:14:40:8e:0e:bc:07:9b:84:c2:f9:f9:
c9:54:e9:6f:8d:e9:e1:7b:ca:67:ec:49:b3:1e:1b:0e:28:83:
f6:02:11:d7:32:7a:64:99:89:2c:60:cc:00:10:a1:a4:67:dd:
21:e0:51:fb:ef:18:1a:56:25:7f:70:30:06:67:8f:3b:41:3d:
7c:4f:16:19:c6:d1:04:89:fd:fe:81:d1:dc:1b:10:19:e5:3a:
a6:2b:27:b4:1a:43:34:98:44:b2:a5:12:4d:0c:ef:46:9f:1e:
35:bc:fc:96:34:21:11:ee:db:7a:fe:ec:d4:91:e4:37:72:c2:
55:c5:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:26 2026 by rpki-client