Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/AD3dL38ItgcaG-oFKVYv8zmfTus.roa
File: AD3dL38ItgcaG-oFKVYv8zmfTus.roa (raw, json)
Hash identifier: DqDKMAFToDn+3i7WatsmOeHGyqsNBV2w2kEv4qRPVMY=
Subject key identifier: 00:3D:DD:2F:7F:08:B6:07:1A:1B:EA:05:29:56:2F:F3:39:9F:4E:EB
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019FD3B1857A6CF4CFED9CB8D6C4D36DB53A
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/AD3dL38ItgcaG-oFKVYv8zmfTus.roa
Signing time: Wed 05 Aug 2026 20:50:54 +0000
ROA not before: Wed 05 Aug 2026 20:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399114
IP address blocks: 94.154.8.0/24 maxlen: 24
135.84.215.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.143.0/24 maxlen: 32
135.136.144.0/24 maxlen: 32
153.52.160.0/19 maxlen: 32
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
189.12.224.0/19 maxlen: 32
191.219.128.0/19 maxlen: 32
207.189.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:b1:85:7a:6c:f4:cf:ed:9c:b8:d6:c4:d3:6d:b5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Aug 5 20:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003ddd2f7f08b6071a1bea0529562ff3399f4eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:a0:8c:0d:1b:3a:31:4f:a3:6e:ba:2d:18:
6d:6e:36:59:19:c7:40:d7:2c:97:cf:dd:9e:2b:54:
67:70:80:7e:6c:b5:46:67:bb:75:54:7c:67:be:34:
ee:fe:59:8c:37:b3:8f:f7:e9:86:6b:51:d2:31:df:
05:a1:42:5c:e7:57:80:eb:0b:ed:4c:82:a8:f0:6c:
ed:17:59:3c:de:77:70:6d:88:fe:11:3b:c2:38:49:
ec:79:15:65:33:80:79:59:71:46:42:6f:c1:fa:4d:
db:a2:75:d6:ef:49:41:63:0b:90:2e:4b:c0:94:c8:
4a:90:45:96:62:10:9a:32:ae:79:de:71:bf:b4:3c:
1e:5a:b3:27:8b:af:9e:cb:3a:13:9b:70:c6:44:31:
46:dc:6b:ab:10:d8:90:1d:73:ae:df:d0:62:94:2c:
dc:83:41:f8:03:06:f4:db:25:48:ef:03:8a:e6:39:
16:31:e1:ce:fc:be:c7:01:52:17:81:f2:09:16:01:
15:a4:b2:d7:36:fe:f8:7d:64:62:a5:0a:e5:59:39:
0c:93:5f:b8:22:e9:8c:32:08:f4:17:07:b7:6a:a5:
34:6b:50:a8:44:28:34:77:33:4d:d9:94:98:30:91:
52:ad:70:5e:9f:38:d5:2e:64:0d:f4:13:87:71:b8:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3D:DD:2F:7F:08:B6:07:1A:1B:EA:05:29:56:2F:F3:39:9F:4E:EB
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/AD3dL38ItgcaG-oFKVYv8zmfTus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
135.84.215.0/24
135.136.128.0/19
153.52.160.0/19
178.211.157.0/24
185.234.115.0/24
189.12.224.0/19
191.219.128.0/19
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:0e:55:9d:c0:aa:6b:b7:71:d9:95:46:44:79:9b:12:5d:61:
d0:bb:cd:44:b6:17:c3:b0:71:c3:d2:ec:65:2c:04:8f:fc:65:
e3:df:25:60:a0:fd:2d:af:74:07:ab:61:90:8b:d9:b7:c2:50:
47:42:80:d4:34:34:d2:00:9a:54:bd:d1:f5:92:f8:a3:b5:99:
5d:33:44:d9:a9:52:f8:b5:c6:3c:b3:98:74:11:bb:f6:40:9b:
a1:0a:74:f4:16:af:e6:00:90:b0:c2:ad:07:d4:7a:0a:4f:01:
49:38:04:e7:de:33:27:96:d3:9d:44:ba:c9:ff:08:7a:4a:54:
00:b7:c3:9e:57:fb:9f:80:10:ce:d1:ed:c1:fc:ff:46:77:63:
6a:57:51:33:90:75:e4:45:c2:69:ac:c8:ee:02:3f:eb:3e:e2:
35:84:b1:63:11:27:b6:58:28:a2:e6:c9:0f:22:17:02:ca:23:
db:99:a6:bf:45:40:71:87:d4:a9:49:ff:52:19:76:bc:3d:b9:
64:2f:4e:43:2e:1c:46:16:65:03:cb:6d:ac:7e:86:8f:c8:f4:
4f:ea:1c:f1:5a:c5:e6:3b:53:cc:5d:84:5f:4b:74:d0:ad:82:
7c:3b:2c:12:c5:58:24:ce:22:39:67:d6:b9:d7:72:23:a7:d8:
3a:6a:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:44 2026 by rpki-client