Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/3vLigIAmr0enEPBVbFd-Efg6QLM.roa
File: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (raw, json)
Hash identifier: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=
Subject key identifier: DE:F2:E2:80:80:26:AF:47:A7:10:F0:55:6C:57:7E:11:F8:3A:40:B3
Certificate issuer: /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial: 019F23682C5DCE592C1EF421CAA6CC3F1148
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/3vLigIAmr0enEPBVbFd-Efg6QLM.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 185.76.201.0/24 maxlen: 24
185.76.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2c:5d:ce:59:2c:1e:f4:21:ca:a6:cc:3f:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=def2e2808026af47a710f0556c577e11f83a40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:e5:43:55:ff:dc:94:48:17:49:33:4d:26:
ce:a0:0f:22:86:69:57:82:57:27:17:05:a8:87:65:
e3:7a:d5:b3:86:b6:2f:1d:f4:38:5c:4f:d1:be:73:
86:c0:04:2b:98:67:aa:5a:42:da:04:dd:58:c3:bc:
56:6b:56:fd:f4:27:ab:84:70:95:df:87:9c:e3:88:
80:79:17:38:fc:56:d7:d6:fb:99:6a:93:a1:4c:c7:
41:47:e9:e6:72:53:71:05:32:83:19:12:a2:73:56:
06:d8:85:95:1e:fa:b6:22:e6:39:a9:54:75:0a:9f:
70:5f:f2:db:96:d4:67:1b:c1:04:2b:6f:82:5a:72:
ee:32:10:71:37:cf:a9:0f:6d:24:54:45:2a:88:dd:
f1:c5:22:a0:fa:f7:2a:77:30:33:38:8b:c0:09:5f:
19:bf:a6:0b:4f:f7:83:97:e1:78:e7:99:1a:db:56:
c7:3b:59:60:22:b8:bf:e2:a0:df:70:4f:26:d0:9b:
a6:f8:49:a0:cf:6e:dc:17:41:24:9b:0d:43:9a:d1:
4d:22:02:60:6e:ae:73:b0:6e:f3:54:bc:84:a4:9f:
6a:4a:67:94:5d:bf:41:ab:c0:c8:99:53:22:f3:26:
0b:ba:ad:7b:21:6f:3d:12:86:e4:09:be:f2:e3:87:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:E2:80:80:26:AF:47:A7:10:F0:55:6C:57:7E:11:F8:3A:40:B3
X509v3 Authority Key Identifier:
keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/3vLigIAmr0enEPBVbFd-Efg6QLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.201.0/24
185.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
67:33:78:6d:5e:30:0c:c7:e9:30:7a:83:fc:ae:a6:59:f1:fe:
2c:cd:f5:b2:66:ce:99:5f:05:a1:91:4e:a7:02:66:be:6a:62:
89:7d:5a:7e:53:87:0d:54:75:5c:69:c3:39:c2:33:a8:2f:b8:
91:a7:a4:b8:8b:79:eb:9e:22:f4:53:b6:64:f0:29:a2:50:d4:
79:ca:3a:e8:50:2e:82:62:c6:39:97:ea:80:2b:75:a9:a6:d9:
b8:a3:a6:72:33:5c:eb:f9:5e:cf:e6:eb:97:17:be:b2:88:34:
53:8c:77:87:6e:45:e5:42:cb:58:34:9c:cf:66:27:f9:91:99:
4e:a9:91:25:a7:56:a2:61:18:de:cc:ee:1e:d9:f3:9d:ff:b3:
ff:15:07:f2:2a:37:63:17:f3:c6:f2:6a:8d:58:ab:8e:07:93:
1c:35:ce:c0:ad:7e:ba:bf:80:69:86:1f:87:ee:80:be:64:e2:
dc:43:b5:36:7c:c7:96:3c:1f:55:5e:07:74:a7:e3:c9:4b:e5:
de:13:5f:87:e7:ba:88:da:f0:e8:d2:72:4b:0b:00:50:c4:6b:
93:1e:f1:10:b1:79:a8:7f:d3:01:59:86:c9:2e:85:32:96:1d:
af:73:ad:b4:82:ad:2a:70:3f:af:39:d7:96:4f:12:48:b7:d0:
7e:d2:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:31 2026 by rpki-client