Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa
File: 3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa (raw, json)
Hash identifier: MDxZZe3k7ORQJwCLNzuLo1EsDwOBi3wJgl86avRTrMo=
Subject key identifier: DD:A5:13:E1:17:13:A4:16:B0:B1:9E:80:BE:A9:38:BE:BB:F1:57:22
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019F47260C51CCF656500C8EDC351780C6B2
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa
Signing time: Thu 09 Jul 2026 13:51:43 +0000
ROA not before: Thu 09 Jul 2026 13:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 212.108.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:26:0c:51:cc:f6:56:50:0c:8e:dc:35:17:80:c6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Jul 9 13:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dda513e11713a416b0b19e80bea938bebbf15722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:9b:df:4b:10:fc:a5:7d:a7:01:40:c9:77:
e3:68:48:41:71:04:08:5c:5d:d0:f5:61:a2:2f:b8:
83:c4:0b:01:44:75:f6:87:6d:48:97:1b:db:89:d6:
e5:19:1b:9f:6f:77:0d:c3:0c:ea:ab:26:6b:ec:58:
1c:bb:a5:91:bb:e1:3f:f5:8d:2c:46:8b:b9:d1:6f:
04:d4:57:f5:e8:b0:0c:c4:8b:e0:c6:8e:30:aa:e1:
1c:73:8f:b9:50:46:8f:e1:b7:82:79:b3:11:0b:44:
1c:75:18:48:8b:be:59:2b:5b:1f:e7:28:23:12:90:
61:9a:96:b6:d3:76:8e:cd:af:b7:4e:79:b7:de:18:
b5:85:82:be:29:86:c1:28:5e:5b:dc:a6:f5:9b:8f:
ce:e6:a6:e0:4e:e3:e8:18:36:42:44:1f:3f:d4:84:
46:30:63:11:6b:cf:ee:5c:bd:6a:d4:fd:e7:db:cc:
1e:9c:4c:10:e1:7a:bd:70:53:02:65:af:a2:43:0c:
5d:b2:20:be:f9:ab:37:5e:91:c7:61:e5:27:a0:79:
7c:4b:06:05:05:56:16:9a:09:20:5b:d1:ba:8a:89:
4c:89:47:a9:5c:ee:13:1f:9d:ad:f0:9e:7d:0a:63:
68:52:cf:94:9a:16:f0:48:cc:62:aa:31:20:be:2f:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A5:13:E1:17:13:A4:16:B0:B1:9E:80:BE:A9:38:BE:BB:F1:57:22
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/3aUT4RcTpBawsZ6Avqk4vrvxVyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.97.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f9:1a:a4:42:dc:2f:a6:bf:9f:65:34:14:66:bf:55:fe:cb:
a4:7a:8d:39:e4:de:7f:f6:79:14:33:06:69:20:83:1a:23:3a:
36:2b:3c:3d:fc:70:8b:d4:ea:a4:d4:1e:96:ef:a5:90:9b:4f:
09:68:44:0e:2e:77:50:68:06:d4:11:57:9f:6e:c4:ea:61:c4:
8a:72:f0:6a:ff:44:bd:91:c9:8a:94:20:0a:6e:c4:31:fb:9c:
1f:84:9d:0b:78:8b:29:4b:0d:bf:ef:7d:96:6b:68:18:78:de:
e1:cc:d6:18:24:e3:6c:53:7a:fd:d9:1a:23:13:56:9f:be:ac:
96:79:b2:39:2c:ec:5f:6f:d9:53:10:00:d1:dd:f4:8c:ff:12:
1c:b6:d7:c7:32:63:2f:a5:37:7d:4c:45:dc:d9:2a:81:2b:c0:
d2:9e:a9:94:44:1c:76:2b:5b:fb:f2:0d:70:72:73:83:25:3d:
bf:82:5e:d1:61:fa:6b:7e:8f:4a:86:32:fe:35:a7:bf:7d:dc:
ec:64:ba:01:7c:02:3c:a8:6d:45:97:32:f7:a7:b0:f0:a0:8e:
d8:c1:6d:f6:5e:8d:3d:d2:57:88:b7:88:1e:a4:d6:56:a8:4e:
d0:d9:b3:c4:62:65:42:49:e7:4b:2e:dd:c8:bd:d7:4c:2c:a2:
21:b5:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:23:34 2026 by rpki-client