Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/B3sUFjmdNfw2Wbgl1lpAMuRHxqU.roa
File: B3sUFjmdNfw2Wbgl1lpAMuRHxqU.roa (raw, json)
Hash identifier: +ec5NyHhhZd9g1lzc179De1f1DaI7xtjRcD1vQ3XvWw=
Subject key identifier: 07:7B:14:16:39:9D:35:FC:36:59:B8:25:D6:5A:40:32:E4:47:C6:A5
Certificate issuer: /CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Certificate serial: 01A135475A0D9567493D5D4B2283052DA49C
Authority key identifier: CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/B3sUFjmdNfw2Wbgl1lpAMuRHxqU.roa
Signing time: Tue 13 Oct 2026 12:40:30 +0000
ROA not before: Tue 13 Oct 2026 12:40:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213295
IP address blocks: 195.200.234.0/24 maxlen: 24
2a10:d0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:47:5a:0d:95:67:49:3d:5d:4b:22:83:05:2d:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cedd23bb8e38d09774633cb0db42e5a20d7e1767
Validity
Not Before: Oct 13 12:40:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=077b1416399d35fc3659b825d65a4032e447c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:10:f7:85:c4:7a:7f:12:71:5f:25:db:6c:
2c:72:d2:15:66:d8:6b:f2:0f:8c:7d:28:d5:7b:f3:
b3:fc:ba:01:33:e7:69:3a:75:98:ca:df:21:e6:df:
ca:42:29:f7:8b:5f:4f:0a:36:4d:55:cc:47:13:3b:
e6:86:ef:7d:30:17:9c:e3:c5:1c:4f:b9:1a:b9:87:
b0:48:21:5e:72:45:6f:28:d5:f2:5c:2f:7e:0e:d4:
0e:4d:0a:28:a0:21:89:e9:b9:8c:dc:d4:7a:da:61:
f5:ff:32:fa:18:c7:15:dc:e2:c7:e1:98:30:bd:ef:
42:b7:5a:c3:e1:ac:70:f0:80:c6:b0:38:fb:7b:c9:
ca:ad:90:12:e1:97:ed:d6:2c:cd:01:15:57:c1:ac:
de:d9:1f:ee:14:a2:17:c0:29:31:1b:0b:29:34:1a:
69:17:1c:f5:11:4c:6a:e6:14:31:f0:a1:d1:b1:94:
34:4f:7f:61:5c:41:f4:d6:86:e5:94:45:47:d3:68:
d9:8e:6d:59:4e:a5:1b:4c:11:51:80:1b:bb:db:98:
f4:37:5d:08:e4:ce:1a:4e:d1:b6:4b:1d:c5:cd:02:
b9:e7:4b:aa:9e:18:90:b2:db:82:67:cd:bf:99:46:
f6:63:13:0d:36:f1:e6:bb:93:0f:c2:c4:c4:fc:27:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:14:16:39:9D:35:FC:36:59:B8:25:D6:5A:40:32:E4:47:C6:A5
X509v3 Authority Key Identifier:
keyid:CE:DD:23:BB:8E:38:D0:97:74:63:3C:B0:DB:42:E5:A2:0D:7E:17:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0ju4440Jd0Yzyw20Llog1-F2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/B3sUFjmdNfw2Wbgl1lpAMuRHxqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/6c0622-2000-4e4e-aac2-f6b018e7c80a/1/zt0ju4440Jd0Yzyw20Llog1-F2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.234.0/24
IPv6:
2a10:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:57:7e:22:f5:92:c9:31:ae:78:aa:79:08:62:b8:5f:96:01:
41:cb:b5:0e:18:39:7a:3d:9d:31:83:fb:d3:52:22:dc:3d:49:
cc:10:3e:1d:01:23:78:df:f6:6f:67:94:40:5e:58:87:3d:22:
02:74:86:e3:a6:f2:d6:63:ac:3b:f3:a2:38:a6:46:66:68:a2:
06:a0:93:23:26:80:5f:0a:d1:17:42:f4:1b:3d:e1:ed:ac:15:
17:ab:f5:38:cc:77:ea:a4:48:72:46:19:00:ef:33:d3:d9:8b:
f9:5c:05:a0:34:02:c7:a8:c8:ba:eb:ee:b8:ab:7a:6d:70:b5:
29:08:a0:9d:ca:1f:6e:68:50:d7:7c:3d:81:ab:dd:c7:dd:12:
26:0f:28:21:41:77:65:ba:37:b8:64:b0:af:1f:36:c2:52:a8:
53:2e:1d:9b:ff:b0:06:85:5f:ab:99:ae:1a:bb:8a:d5:31:52:
01:b8:c7:19:13:9d:3a:dd:83:71:8c:d7:90:0e:12:68:d0:36:
20:5e:c9:bd:45:df:9e:26:9c:b7:d9:c4:a1:3f:52:1c:6c:03:
9c:ec:da:b7:d9:83:6e:8d:3b:fa:7d:c6:b8:f0:a3:a1:d8:57:
b2:6c:d6:5a:d5:7b:96:5b:7e:62:ce:b6:d4:e2:6a:62:72:09:
81:41:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:19 2026 by rpki-client