Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/3f-YZ_gZlvXel0INTsX8PYHYwkM.roa
File: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (raw, json)
Hash identifier: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=
Subject key identifier: DD:FF:98:67:F8:19:96:F5:DE:97:42:0D:4E:C5:FC:3D:81:D8:C2:43
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 019F59C7097FECDBA1B0D08A5A81EF792760
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/3f-YZ_gZlvXel0INTsX8PYHYwkM.roa
Signing time: Mon 13 Jul 2026 04:40:43 +0000
ROA not before: Mon 13 Jul 2026 04:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 91.202.212.0/24 maxlen: 24
91.244.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:c7:09:7f:ec:db:a1:b0:d0:8a:5a:81:ef:79:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Jul 13 04:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddff9867f81996f5de97420d4ec5fc3d81d8c243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:96:b1:03:07:04:70:1e:48:9f:de:63:f4:4b:
c9:93:2b:6a:03:50:c1:32:19:3a:87:8d:ae:04:db:
20:d0:c5:5f:dd:8f:f6:27:61:63:33:5f:0e:6a:fa:
d1:fe:e0:d1:7a:73:40:24:79:b9:48:10:49:79:7d:
b1:a9:0e:43:f5:6a:ce:09:0e:58:60:46:ae:4b:d9:
ab:61:a4:39:49:b6:0f:b6:25:5e:2e:ed:f7:92:10:
e2:52:e5:68:e2:ff:1d:20:29:02:f2:18:57:fb:87:
91:a3:c9:4d:eb:54:e0:71:56:f7:4f:e0:da:43:c8:
a0:62:74:37:bb:a5:2a:27:de:c0:70:e4:f9:e2:0e:
d4:81:56:e8:53:6d:fb:51:46:cc:a7:ad:d1:d4:eb:
a5:b6:89:98:74:7d:1c:c5:4c:c7:14:3b:14:e5:1a:
48:c9:8d:70:07:79:d3:c5:cb:33:8c:f2:2a:92:61:
82:16:89:4c:70:1e:55:6c:63:79:33:c5:53:a1:d1:
56:5e:1d:a1:ba:ff:e4:4c:59:bc:77:1c:44:af:2b:
b1:fe:17:b7:c3:57:cb:aa:e6:99:3f:34:e2:b0:2c:
7d:28:47:cf:e5:bd:60:02:ce:fa:80:a5:a7:2e:96:
d0:bf:b7:fe:20:ef:e3:b8:72:8e:38:90:44:79:96:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:98:67:F8:19:96:F5:DE:97:42:0D:4E:C5:FC:3D:81:D8:C2:43
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/3f-YZ_gZlvXel0INTsX8PYHYwkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.212.0/24
91.244.118.0/24
Signature Algorithm: sha256WithRSAEncryption
32:13:e4:4b:43:66:ea:a1:01:fb:bc:f0:d2:4d:b1:e7:f9:4b:
72:d7:59:08:57:56:9b:64:76:71:8a:75:15:64:53:f4:72:13:
2c:42:ed:e6:f6:33:b4:fb:d5:95:0b:39:94:5a:9c:32:bf:37:
92:6f:53:ea:4b:91:52:2d:96:b6:7f:cb:77:b2:fc:8e:84:8d:
6d:eb:75:58:b5:55:13:60:97:03:d4:1b:59:22:94:2d:87:1e:
e0:a2:d6:6a:20:b4:cf:5c:df:55:ff:8b:cd:8e:31:74:ec:44:
09:7e:08:17:7b:ba:5b:a9:6f:8b:81:99:ed:df:76:b0:0f:9e:
8a:f8:2d:65:cd:c9:73:19:a4:1f:8e:2a:70:39:e2:f5:b4:45:
dc:76:90:c8:65:f9:70:28:4c:77:99:6d:1c:ad:a1:f3:ad:1b:
0d:bc:92:b3:23:20:58:7c:78:ad:30:38:fc:17:68:9b:26:7b:
1a:79:03:8e:c6:c4:eb:56:95:dd:59:4a:5b:41:ab:38:3b:13:
07:8e:cc:05:cd:ae:72:5d:d8:35:2e:51:4d:c9:fe:89:4b:dc:
3b:5b:64:ba:8b:94:cf:81:64:d2:4e:17:de:35:1a:24:ad:ca:
cc:94:75:e2:c4:fc:ce:49:4b:e5:a4:35:c6:46:62:80:92:df:
67:a3:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client