Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3j90mY1xX9GBX4XjaeXRZVWncOo.roa
File: 3j90mY1xX9GBX4XjaeXRZVWncOo.roa (raw, json)
Hash identifier: 7uOHrkjsEUxdze0ExT6W3FyPyUbbkd5wWCrU3rgf1nY=
Subject key identifier: DE:3F:74:99:8D:71:5F:D1:81:5F:85:E3:69:E5:D1:65:55:A7:70:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E3FDCD7F88C2F1ED07E834EC0FD8E29E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3j90mY1xX9GBX4XjaeXRZVWncOo.roa
Signing time: Tue 19 May 2026 10:51:38 +0000
ROA not before: Tue 19 May 2026 10:51:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
217.60.193.0/24 maxlen: 24
217.60.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:dc:d7:f8:8c:2f:1e:d0:7e:83:4e:c0:fd:8e:29:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 10:51:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de3f74998d715fd1815f85e369e5d16555a770ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:1d:97:a6:cb:69:e6:e3:1a:76:d4:1a:a9:
32:7c:c5:70:56:89:ec:0a:63:38:70:11:4f:45:14:
93:65:37:85:25:27:5f:fa:76:d5:8e:c4:52:8d:f9:
84:7a:9b:d9:75:d9:72:6c:da:30:bd:16:d4:28:f1:
4e:aa:9f:27:b2:20:3e:ec:5b:c0:6b:92:4e:4c:22:
3c:4d:01:8d:0e:78:a0:9a:44:70:c2:12:9b:59:c9:
0c:f2:59:88:90:9d:aa:f6:c4:cd:75:e9:af:12:d1:
df:7f:69:24:74:d4:86:42:09:9f:2d:df:15:e3:ac:
17:2f:b7:54:69:78:53:8f:a4:59:b8:e1:65:91:09:
d5:27:33:33:ad:df:54:e0:f7:d6:3d:24:74:03:d8:
1d:ae:ff:d1:ce:d2:d0:34:ae:99:d0:7a:01:9a:98:
9a:54:03:11:bd:ef:24:38:6c:69:2e:8e:05:98:35:
c0:d6:d6:24:41:4f:cc:ca:05:71:83:2a:89:25:9c:
9f:58:4f:ec:9d:67:e1:8d:b6:32:f4:44:80:f7:8c:
75:46:b2:b8:6d:dd:28:b1:f8:26:9f:f0:f9:36:c8:
1e:ce:be:7f:36:c6:81:88:76:6c:fe:17:9d:d6:a5:
e7:97:2d:eb:0d:34:ba:15:66:ae:6b:5b:1b:43:b5:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3F:74:99:8D:71:5F:D1:81:5F:85:E3:69:E5:D1:65:55:A7:70:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3j90mY1xX9GBX4XjaeXRZVWncOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.238.0/23
217.60.193.0-217.60.194.255
Signature Algorithm: sha256WithRSAEncryption
64:a1:12:c7:4e:a6:72:a8:47:da:a6:3b:49:3a:6d:78:1b:82:
44:b3:38:4f:0e:19:a1:eb:77:38:ec:e6:06:89:82:a1:b3:47:
ac:e5:ef:a9:5c:1b:51:27:f2:49:39:af:4a:25:92:35:94:09:
5b:85:67:2d:4f:75:93:1b:27:89:c2:e6:69:b1:fb:55:2a:79:
f6:87:be:11:03:73:94:3c:ea:93:72:93:5e:a0:fe:4a:f8:a8:
34:e3:4a:c3:2c:13:8b:d3:d6:d6:ce:d2:36:3c:0a:f9:a5:46:
44:45:fa:62:4f:07:9c:64:98:c7:ec:9b:d1:7c:11:98:85:20:
99:6d:9e:5b:8c:0f:42:e8:db:c8:67:7f:e9:18:e7:89:5e:da:
72:47:9d:a2:a7:d1:7d:67:4d:a4:da:d1:c7:5b:f3:a6:fa:85:
40:a6:b3:ab:ce:03:db:f6:b3:6e:57:2f:0c:b8:0c:4f:20:64:
6e:3e:86:0c:95:2b:b3:a2:11:bd:a0:99:6a:1d:52:99:62:6c:
79:18:48:05:9e:77:9a:c8:a4:ec:5d:00:84:5e:7c:3b:d9:2b:
09:67:a5:12:65:40:3a:cf:e3:eb:f1:72:c1:7b:17:67:6d:9e:
df:a6:32:f0:fb:71:8b:0a:a9:5d:ba:2c:c8:f6:2b:e2:90:07:
fe:c0:d1:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 27 15:56:43 2026 by rpki-client