Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa
File: 3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa (raw, json)
Hash identifier: dvct+dxdFU1Z+0nEPHjZJnc61yMaQjvQerVz4nTodfw=
Subject key identifier: DC:06:4B:69:86:38:AF:C2:59:B5:61:6E:47:E0:94:27:1F:9E:C0:A9
Certificate issuer: /CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Certificate serial: 019F2368E35009E833E110FA04474C569A0C
Authority key identifier: A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:50:09:e8:33:e1:10:fa:04:47:4c:56:9a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ad35fccc6e9d7c4ef1762b2045f750f13e14b6
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc064b698638afc259b5616e47e094271f9ec0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:53:de:0e:e7:a6:1e:01:a4:ba:b7:09:72:
c4:d6:3a:c7:39:2f:60:c8:05:ed:b6:c6:33:24:54:
59:28:7e:fd:30:7a:38:8a:39:c1:60:5f:b8:1d:15:
2c:e8:22:3f:64:34:22:07:04:d5:50:14:9d:8c:cd:
96:1f:95:a6:e3:ee:53:60:83:17:ca:a8:26:a3:87:
9a:50:dd:95:32:1e:79:b3:b0:4c:2d:0a:ad:9a:b9:
8e:b2:06:2d:f0:b6:57:83:40:9c:fb:9e:f0:24:f7:
97:b9:1f:27:3c:de:da:e4:ad:ad:a7:db:48:9d:32:
83:fd:35:72:af:92:23:ae:97:31:37:91:2e:4c:45:
55:4d:c1:e5:3d:5f:a6:41:c1:2e:7a:00:91:41:00:
af:c1:72:65:85:3b:55:35:d8:a2:63:53:e7:bb:2f:
3d:85:bf:55:91:8a:04:a1:e5:70:ea:e5:9b:64:87:
16:d8:cf:11:bb:0e:6f:cd:87:96:58:f2:1f:06:29:
c1:e2:ff:18:70:03:1a:2e:e9:f3:49:00:f4:9b:9a:
e8:8d:a8:14:d8:a2:ef:d9:47:34:c0:b8:c7:ca:7a:
b7:74:2d:60:ac:40:0c:30:28:a0:84:29:c2:84:cd:
1d:6f:10:9e:97:ad:26:6a:66:93:c6:43:7a:24:73:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:4B:69:86:38:AF:C2:59:B5:61:6E:47:E0:94:27:1F:9E:C0:A9
X509v3 Authority Key Identifier:
keyid:A5:AD:35:FC:CC:6E:9D:7C:4E:F1:76:2B:20:45:F7:50:F1:3E:14:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa01_MxunXxO8XYrIEX3UPE-FLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/3AZLaYY4r8JZtWFuR-CUJx-ewKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/pa01_MxunXxO8XYrIEX3UPE-FLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0-91.102.186.255
Signature Algorithm: sha256WithRSAEncryption
3d:e3:03:9d:50:f7:d5:3d:94:54:b9:02:57:3b:f7:9d:24:f5:
61:3b:18:ae:62:5f:25:6d:00:60:8e:07:bc:09:7c:b9:a6:76:
0e:65:29:62:47:93:f2:aa:cb:a8:fa:c7:09:98:05:d9:95:bd:
f8:0b:8b:c9:23:8c:0b:8d:5c:9d:a6:00:ce:4a:1d:00:7c:93:
bf:70:1f:12:4c:cb:c1:1a:f4:81:8e:5c:a1:8d:84:8a:22:60:
06:8f:69:99:39:c3:b0:82:37:ac:1c:f6:f5:02:ca:77:b6:9e:
26:2b:5e:2e:a1:88:5f:cf:60:d5:33:59:56:db:cc:c6:73:bd:
73:dc:62:9f:47:93:a1:40:24:f2:e7:e1:f2:25:e6:22:ea:d0:
72:19:f9:6a:7d:d1:99:25:28:8a:b9:ca:24:69:5e:f1:4a:0d:
3f:fb:3d:63:99:f7:ca:50:9a:0c:80:5f:05:c5:92:83:c6:a5:
32:f6:0c:a8:27:23:ec:1a:8b:22:06:70:6b:1e:dc:6f:f0:18:
30:70:3c:58:1f:67:91:0f:b0:a6:e4:16:39:41:b9:67:09:1c:
49:bc:f6:8f:84:81:bd:76:a6:56:03:5e:6e:7b:27:76:01:a7:
c6:0c:48:a3:16:8b:eb:ff:a6:94:61:b3:1f:d0:d5:aa:a5:07:
ec:1e:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client