Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/38F3RhCLEsplC_HqN7PLuMebFpk.roa
File: 38F3RhCLEsplC_HqN7PLuMebFpk.roa (raw, json)
Hash identifier: 6eU7O6bTo+2h8a0CcTBhs9xpRuFRC3NSIJyb5rSHg6Q=
Subject key identifier: DF:C1:77:46:10:8B:12:CA:65:0B:F1:EA:37:B3:CB:B8:C7:9B:16:99
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 01A12B371FA91DE0D7237E815F71A31B42C5
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/38F3RhCLEsplC_HqN7PLuMebFpk.roa
Signing time: Sun 11 Oct 2026 13:46:35 +0000
ROA not before: Sun 11 Oct 2026 13:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 79.132.204.0/24 maxlen: 24
79.132.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:37:1f:a9:1d:e0:d7:23:7e:81:5f:71:a3:1b:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Oct 11 13:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfc17746108b12ca650bf1ea37b3cbb8c79b1699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:36:0d:06:c6:35:08:ae:71:d6:c3:fa:fb:
09:9c:0e:22:91:18:f4:00:2d:a5:a0:08:d3:42:9e:
34:1f:70:a1:80:b3:b8:15:38:10:d6:4b:21:57:5a:
0d:7d:70:07:48:dc:4d:2f:ec:96:ef:78:7a:79:a0:
01:2b:3e:30:28:7e:01:b9:8b:56:65:55:a1:93:13:
87:6d:90:84:0f:a5:94:6d:18:0f:2f:23:b7:08:fa:
98:d7:62:9a:98:1f:e3:41:35:12:a8:78:94:b7:b1:
b2:00:8f:e9:f8:56:29:24:3b:5b:c5:36:d1:11:e7:
11:e5:91:64:b3:ea:45:93:bc:5d:e6:dc:82:43:f5:
4e:f9:fb:12:62:26:21:a2:b0:37:fa:e2:35:aa:d0:
ad:e9:aa:e7:be:5e:58:59:cf:b7:9f:a5:d5:dc:d4:
8b:d6:f1:96:62:81:be:15:f0:2e:60:8b:07:c4:c3:
46:58:de:ad:f5:d0:71:c9:6c:31:2e:a1:e3:45:d9:
65:da:06:c9:29:da:5a:ed:ca:fb:6e:db:ed:d6:89:
d8:c7:ed:a0:92:8a:1d:a8:d3:92:d7:13:cc:96:ed:
63:8f:47:b9:1e:a5:22:48:e8:cf:6e:91:2b:1b:79:
83:c4:48:91:c2:93:47:89:67:d7:6a:ee:6b:06:75:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:77:46:10:8B:12:CA:65:0B:F1:EA:37:B3:CB:B8:C7:9B:16:99
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/38F3RhCLEsplC_HqN7PLuMebFpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.204.0/24
79.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
57:71:2e:bb:f0:4c:fd:6a:7a:05:11:10:6a:69:32:2a:df:ae:
24:c1:5b:16:fa:d8:6f:06:6b:4f:9b:6b:31:fc:3b:e4:e2:c6:
89:ad:a5:3c:84:9d:1e:ec:e3:b5:03:25:ce:32:41:25:a5:f3:
d1:67:73:b4:82:c8:5b:57:4b:60:4f:d5:51:cb:25:5c:b1:ca:
a2:c7:ad:d7:3f:67:5f:cc:09:99:17:52:48:38:ef:cc:ab:35:
ef:82:5d:4f:98:96:35:82:50:96:bb:33:ec:2c:08:1e:bf:b4:
2b:3f:4b:4b:bc:82:80:a9:d3:25:07:10:cd:3e:24:33:e0:fb:
88:ed:24:a2:1c:f9:34:4b:2d:15:81:30:ae:8b:60:64:7e:82:
44:f4:f5:ba:be:48:c9:4e:4b:5c:e0:a5:01:2c:2c:10:d7:81:
89:f2:4d:81:80:34:76:19:4d:a9:30:4b:75:c9:c3:d0:50:a7:
54:e1:ff:18:b7:8d:f3:71:5d:8a:52:3d:1a:d3:42:c9:0f:a3:
d6:cf:16:9b:20:77:f6:04:e0:d9:21:61:6e:31:45:25:93:fc:
fb:ec:5d:3a:42:f1:42:3f:2e:e7:60:09:d4:84:71:24:40:d3:
ee:b7:f1:65:af:1e:95:dd:ac:4d:e9:6a:c5:07:ce:16:61:bf:
d5:bb:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:18:19 2026 by rpki-client