Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3FT0Q8HYAJshK2YTHraizTTtl68.roa
File: 3FT0Q8HYAJshK2YTHraizTTtl68.roa (raw, json)
Hash identifier: pANleIvpMGxlEA0HNwGBfCJZkP0QnPfNivkJewRQ0Wo=
Subject key identifier: DC:54:F4:43:C1:D8:00:9B:21:2B:66:13:1E:B6:A2:CD:34:ED:97:AF
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 01A0F775ACBA6FB47D80E9E670D5C80B15E9
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3FT0Q8HYAJshK2YTHraizTTtl68.roa
Signing time: Thu 01 Oct 2026 12:34:39 +0000
ROA not before: Thu 01 Oct 2026 12:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.34.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:75:ac:ba:6f:b4:7d:80:e9:e6:70:d5:c8:0b:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Oct 1 12:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc54f443c1d8009b212b66131eb6a2cd34ed97af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:4d:04:88:fb:55:44:20:19:d7:62:1e:f8:
6f:f3:2a:29:37:21:0f:31:22:7a:dd:5e:7a:15:ff:
00:6d:5f:5f:10:d4:b7:d5:88:ce:fd:fa:0d:b6:3e:
d5:19:d7:d1:93:4f:aa:99:54:74:42:2e:d1:bc:11:
c9:4d:67:21:dd:5e:df:b2:c0:26:10:10:6d:59:57:
88:2e:e8:96:fd:99:28:4d:22:be:8d:42:f5:2a:24:
3d:05:00:55:1c:56:d5:0b:5d:04:3f:3f:1c:e0:e9:
7f:04:85:a9:8f:d4:b4:23:45:a8:47:3c:6b:77:22:
64:df:bb:dc:39:9a:e1:aa:c2:fa:3e:1d:56:8b:bf:
70:75:59:bc:83:38:18:70:5d:dc:d5:e2:3c:af:46:
00:14:a7:b2:eb:2e:50:6a:86:f5:3d:60:5b:24:cc:
95:5c:98:07:6f:9e:a3:df:84:cb:44:5a:24:50:a8:
57:09:72:8f:2f:f8:3f:32:7f:fa:a6:5b:99:16:3d:
fe:a0:98:f4:a1:c0:01:62:37:da:3d:c8:8f:c6:e2:
6f:3b:6f:8d:6e:db:a1:67:67:cb:60:6e:13:04:9f:
4f:fd:18:91:82:fb:bc:c1:ec:ac:16:19:56:0f:ac:
74:11:b3:cc:3b:95:6f:f4:e5:d4:73:68:5e:4c:50:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:F4:43:C1:D8:00:9B:21:2B:66:13:1E:B6:A2:CD:34:ED:97:AF
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/3FT0Q8HYAJshK2YTHraizTTtl68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.105.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f8:5b:31:46:a5:9b:48:8d:6c:3a:b2:13:27:ed:84:f5:09:
70:99:3c:34:01:7d:37:e9:17:61:2f:6b:a3:4e:ed:a7:9f:09:
5b:95:04:ee:50:a5:3a:f8:47:07:6f:e7:c9:3f:d5:43:d0:f7:
57:82:f1:51:8f:d6:41:3f:d5:c2:a8:f0:f4:db:34:84:cc:10:
32:4e:76:55:c1:75:b4:dd:f2:df:28:62:55:f0:d4:4b:c3:63:
43:fe:a4:5c:de:e4:73:5a:61:6f:74:49:05:68:a8:25:cc:df:
6e:8b:2a:43:60:19:92:27:3c:19:27:5c:9d:1a:d8:c5:d7:4a:
c5:4c:16:db:81:ac:29:0c:16:2e:66:bd:ad:62:40:83:d9:fa:
99:66:e4:8e:8d:3c:ca:54:a2:bf:7b:a2:12:c2:d7:16:1e:88:
3c:13:a9:f6:0d:95:9b:69:e1:3f:db:a0:9d:a0:13:b8:6c:b5:
78:b0:8f:2f:17:cd:98:d7:f8:a2:0d:ae:c3:f5:a8:b0:0c:49:
41:f9:e9:fd:38:08:eb:c0:c1:69:8b:f6:fa:ca:78:88:1f:26:
3c:e2:e8:8b:a0:9e:75:d8:b2:bf:19:b2:eb:f3:f4:56:eb:87:
d9:92:f6:6c:33:73:14:b3:b2:bf:7e:01:86:8e:a3:a7:fe:1c:
c8:41:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:25:01 2026 by rpki-client