Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/341KD6A1qYw9poPII9Ppf5Qrnr0.roa
File: 341KD6A1qYw9poPII9Ppf5Qrnr0.roa (raw, json)
Hash identifier: 31iFqqugua1nGzFflLnVArKONocl9vfID1i8yti6Wws=
Subject key identifier: DF:8D:4A:0F:A0:35:A9:8C:3D:A6:83:C8:23:D3:E9:7F:94:2B:9E:BD
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019FDC796F11DB52E22DD6F73FB3C1BE1C5F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/341KD6A1qYw9poPII9Ppf5Qrnr0.roa
Signing time: Fri 07 Aug 2026 13:46:13 +0000
ROA not before: Fri 07 Aug 2026 13:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 45.86.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:79:6f:11:db:52:e2:2d:d6:f7:3f:b3:c1:be:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 7 13:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df8d4a0fa035a98c3da683c823d3e97f942b9ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:a8:ef:06:e0:c6:7c:f2:d3:20:14:e2:b2:
1b:10:7c:5a:e4:26:65:bc:52:d1:02:e0:b4:fc:f3:
dd:0b:8e:f7:ef:62:08:59:5c:5a:4c:e9:1e:2b:2b:
8b:da:2a:e6:de:f0:fe:a4:a4:be:a7:0c:c1:37:8c:
f8:2b:c7:df:fb:18:a9:5a:50:50:a3:90:db:38:ef:
d3:89:03:bc:76:ec:fe:c9:ed:88:2a:5e:cb:e5:f5:
d9:0a:05:d9:d3:b7:52:f8:a8:8f:aa:c0:ae:5c:59:
ff:b1:c0:1f:07:0b:bc:ec:23:e4:62:93:11:df:2d:
65:9b:c3:06:75:65:5f:50:00:0d:d0:9a:f3:55:f3:
ff:c2:e6:08:e0:8e:7e:6a:c7:2c:a2:c7:7b:12:45:
02:58:a3:cf:6e:8f:b6:e3:e6:88:b2:57:65:c1:a3:
a7:da:36:79:04:6e:c9:33:bb:33:94:86:eb:8c:23:
3e:06:8a:d6:c9:24:9f:f3:96:b3:47:59:9e:35:23:
14:f7:de:f5:cb:85:8b:c7:60:9b:23:a3:86:45:bf:
69:04:1d:e6:2b:0b:1d:47:79:e1:31:3f:b7:86:d0:
ff:d0:2f:01:47:29:13:e2:70:8c:5e:de:fb:88:56:
ef:bb:c6:d7:52:8c:06:89:b6:b7:af:1c:c8:12:7f:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8D:4A:0F:A0:35:A9:8C:3D:A6:83:C8:23:D3:E9:7F:94:2B:9E:BD
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/341KD6A1qYw9poPII9Ppf5Qrnr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bf:47:ba:21:e6:cb:85:d9:bf:63:e4:ff:53:04:b7:c7:e8:
53:c9:46:e6:42:e6:03:8c:30:64:11:b8:d2:d3:3b:63:e1:7d:
d4:9a:d2:71:24:14:14:46:e5:43:3e:83:b2:d9:ed:60:de:36:
4d:28:92:26:3d:4d:7f:db:da:3a:c5:25:fa:08:d3:86:d5:90:
b9:99:f5:7e:96:63:61:ec:99:2e:fc:78:be:4f:df:4a:36:bb:
6a:3e:a5:a4:5f:e9:0c:88:f0:9d:4c:76:af:2c:41:00:f4:ab:
16:f2:60:65:1f:66:72:1f:e2:9b:06:db:70:2c:04:2c:ad:e0:
e9:a2:fb:ac:ff:b7:a6:72:43:9f:1a:35:f3:d8:73:cd:7d:14:
da:c6:9e:d4:52:8b:da:d4:54:33:63:e2:25:30:e3:ed:f6:76:
cd:78:74:36:88:23:bc:dd:5a:e8:44:90:a0:0c:c2:98:00:86:
48:41:17:a0:b9:55:11:67:f5:9b:cf:22:76:44:e1:91:3e:71:
50:32:0b:b7:20:72:82:5a:76:7c:b4:25:a2:8b:6a:1b:8c:8c:
16:00:1e:b8:fa:20:91:82:e6:10:b8:e9:fe:8a:c0:91:4f:30:
b6:39:44:5e:86:92:33:e9:47:f6:01:b5:9c:19:e0:09:7c:0f:
de:0d:23:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:34:22 2026 by rpki-client