Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa
File: 3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa (raw, json)
Hash identifier: hh8lqhzxp65qpWrKmiGr9OM0XCPYC84fwBd1q1LAGsc=
Subject key identifier: DF:24:B4:13:83:31:25:BC:3E:B1:71:23:87:F4:91:0F:14:45:5C:B3
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 019FEB2F930D0C8DB45CAF9862A082174013
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa
Signing time: Mon 10 Aug 2026 10:19:51 +0000
ROA not before: Mon 10 Aug 2026 10:19:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 91.213.4.0/24 maxlen: 24
91.214.168.0/24 maxlen: 24
91.214.169.0/24 maxlen: 24
91.214.170.0/24 maxlen: 24
91.214.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:2f:93:0d:0c:8d:b4:5c:af:98:62:a0:82:17:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Aug 10 10:19:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df24b413833125bc3eb1712387f4910f14455cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:99:5c:4f:89:2e:a4:f4:63:81:3e:29:78:
90:ab:5a:df:5e:d1:12:58:e6:70:ee:f3:54:48:d2:
e1:14:b8:b8:5e:f6:9b:a6:83:7d:d0:dc:e6:9c:66:
fb:45:4d:ef:8e:96:76:56:c6:cc:6a:97:38:12:a4:
f6:2b:52:6f:f4:6b:c7:70:ef:57:e2:68:8a:d0:6e:
b1:3f:2e:b8:c2:a4:58:08:a4:ad:ed:76:4f:38:1e:
3b:d6:6b:5c:fc:22:b9:37:a3:6b:c5:ec:a1:2d:a7:
2e:71:75:72:5d:ae:d3:b0:4c:c7:ec:8a:c7:7c:3c:
93:ae:66:d5:c0:4b:26:42:9a:93:97:ed:82:f3:e3:
0e:5d:91:49:a5:45:a6:36:de:48:f9:46:0f:9e:1c:
6b:46:a7:50:05:8e:f0:6d:15:3e:fa:dc:1a:f9:3a:
9b:8c:70:4a:1a:70:fb:5b:c3:36:af:1a:4c:8f:b8:
64:a2:02:2d:a5:60:a5:59:a5:89:e5:c8:e3:fa:be:
2e:e6:54:c2:34:9b:25:1b:bd:8c:3d:8f:e7:db:7a:
c6:23:4f:89:96:e8:7b:84:7e:c0:32:24:e5:da:09:
1c:9c:4e:c0:16:b9:5c:fe:39:4d:ca:e8:44:92:cf:
b4:a1:c3:d6:fe:9c:4b:c2:61:f3:72:f1:6b:f7:5d:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:B4:13:83:31:25:BC:3E:B1:71:23:87:F4:91:0F:14:45:5C:B3
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/3yS0E4MxJbw-sXEjh_SRDxRFXLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.4.0/24
91.214.168.0/22
Signature Algorithm: sha256WithRSAEncryption
17:b0:da:5a:1e:a6:ec:8d:53:93:0c:67:ad:ca:d5:df:e2:1a:
62:da:79:3f:9b:37:db:04:b4:5b:54:69:d5:90:43:a0:ad:d7:
37:10:9a:12:25:ff:f8:c3:9c:a4:35:06:b3:3d:93:d2:f7:8d:
88:18:d3:a7:cf:5d:ce:05:59:7b:e4:88:c7:2a:b2:b9:56:58:
8c:c2:8e:30:42:f9:29:53:e6:54:b9:8e:65:76:0c:75:87:98:
b8:08:76:c1:66:4b:06:18:eb:9e:cf:76:8f:a9:5c:d5:a9:b6:
f9:a1:83:0b:57:dd:8d:42:d9:a6:8d:a7:ee:1a:61:e9:d5:06:
71:d3:50:c0:06:8e:31:bf:d8:ed:44:5e:a1:e5:59:5b:e1:1f:
98:d9:1a:2f:3e:e6:07:8d:95:05:4d:55:a3:73:22:9b:0d:69:
82:e1:f3:14:1d:7b:45:71:fe:db:ab:e9:71:11:44:27:df:3a:
5a:71:76:3e:82:b0:66:cc:33:7d:2c:52:40:14:bf:ec:8d:dc:
2e:83:33:0b:1d:f8:5e:de:79:21:df:35:b1:d4:0e:07:be:48:
4f:30:b6:82:de:45:a7:82:84:f1:cd:41:b1:cb:df:2f:9e:28:
5d:67:11:b6:bb:61:65:5d:07:98:1a:70:0e:59:39:32:8f:61:
2f:b7:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:43 2026 by rpki-client