Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/3sNHI6PonG3yTWC7luEipoNUwyM.roa
File: 3sNHI6PonG3yTWC7luEipoNUwyM.roa (raw, json)
Hash identifier: 25qkkZcN3FmiRMNBN3fedg1xY9PzbM2FV5V46F5kvco=
Subject key identifier: DE:C3:47:23:A3:E8:9C:6D:F2:4D:60:BB:96:E1:22:A6:83:54:C3:23
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019B7DC9C9FB48977BA1313A44E9A2A5D6FB
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/3sNHI6PonG3yTWC7luEipoNUwyM.roa
Signing time: Fri 02 Jan 2026 08:18:54 +0000
ROA not before: Fri 02 Jan 2026 08:18:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214439
IP address blocks: 74.122.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:c9:c9:fb:48:97:7b:a1:31:3a:44:e9:a2:a5:d6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Jan 2 08:18:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dec34723a3e89c6df24d60bb96e122a68354c323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:b8:fc:04:61:4d:2e:92:fd:c3:65:25:d4:
a6:de:bd:df:6e:3a:82:ba:5d:da:14:1b:37:b6:e6:
43:54:35:c9:8c:51:9e:28:b8:47:6c:81:7e:a1:0b:
d2:4f:d7:63:7f:e7:a1:9e:0d:71:9d:ca:0d:e6:e9:
31:38:cc:ee:ac:83:d7:2d:f6:5c:7c:ec:99:49:94:
d9:ae:cb:7b:0a:91:08:fb:8b:0b:c4:c3:ef:ab:45:
2a:1c:5f:0a:e2:1e:6c:d5:ed:1c:76:0a:2a:0a:5d:
d9:7f:ab:66:06:45:27:bf:30:19:1b:cd:b7:be:0e:
41:0b:64:27:e6:4b:39:62:08:dd:d5:3a:24:3c:cb:
2b:12:83:4f:ec:12:e9:cc:36:d1:45:ea:82:a6:da:
ad:1f:0b:4a:c2:ae:69:91:fa:7c:25:87:2e:89:10:
f5:f3:c6:7e:88:51:07:ac:20:ed:80:e2:0f:1a:28:
23:b3:b2:dd:61:05:1e:8f:ac:54:7c:92:25:a0:76:
01:38:a4:04:62:54:64:3d:a8:f2:27:46:3c:92:50:
c1:6d:b7:a5:9d:60:21:d6:dc:8c:52:a9:9c:7b:23:
b3:38:a4:04:2a:37:2b:a4:f3:90:ca:40:dd:7f:59:
0d:6d:c9:be:24:c9:d8:01:dc:bd:92:0e:4e:48:89:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:47:23:A3:E8:9C:6D:F2:4D:60:BB:96:E1:22:A6:83:54:C3:23
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/3sNHI6PonG3yTWC7luEipoNUwyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.122.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f1:b0:9b:9e:f3:73:df:a1:06:5f:4d:07:ca:e6:50:03:83:
70:f7:2b:03:ff:b7:84:34:6f:37:a8:c8:ea:c1:4a:9c:e8:31:
e2:7d:41:e1:ec:df:15:ed:dc:06:63:8d:69:60:71:4a:9b:d2:
d5:a8:08:25:7f:22:c4:cb:1a:15:28:8b:e2:c3:1b:9b:f7:e4:
05:f7:0e:6c:74:fa:21:0b:0a:ab:3a:70:7e:15:80:44:c7:94:
07:88:82:ef:73:e4:74:09:32:fb:27:9f:26:fb:7c:d8:f0:26:
8a:18:b0:6a:a6:57:1d:af:ce:01:ac:f7:1e:2d:b8:de:c9:a0:
f6:06:5c:28:5b:57:58:5d:25:62:f4:02:b0:0b:51:66:e4:0b:
ba:15:00:f7:b6:a5:04:62:34:75:6b:e1:a0:b9:c8:d9:d1:66:
36:75:21:59:02:ca:12:d2:d8:85:1c:b1:0d:9d:42:1c:ad:d1:
63:0a:9a:4e:d5:9c:d3:30:44:e4:47:1e:c9:91:c6:8e:be:21:
20:15:b4:82:53:f8:33:4a:5a:82:da:59:3b:bf:69:a8:7e:9a:
d7:6a:1c:50:91:78:e6:f8:5a:65:bc:8b:5d:ed:fb:96:b5:02:
1d:97:e8:88:d9:5f:08:7e:6a:85:9f:0e:12:0f:d9:e8:5e:43:
da:2d:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 03:19:11 2026 by rpki-client