Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/3WBgzyeX1uLGrZJBfUCmtAri3yo.roa
File: 3WBgzyeX1uLGrZJBfUCmtAri3yo.roa (raw, json)
Hash identifier: YH496ZA6V5oD8citQskcrgnfmvtB3C49x/dIJaTBFS8=
Subject key identifier: DD:60:60:CF:27:97:D6:E2:C6:AD:92:41:7D:40:A6:B4:0A:E2:DF:2A
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01A010083C00F47C315DF5C7690FA27C1DD0
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/3WBgzyeX1uLGrZJBfUCmtAri3yo.roa
Signing time: Mon 17 Aug 2026 14:02:50 +0000
ROA not before: Mon 17 Aug 2026 14:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31445
IP address blocks: 185.112.40.0/22 maxlen: 24
195.128.226.0/23 maxlen: 24
195.177.70.0/24 maxlen: 24
2a10:23c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:08:3c:00:f4:7c:31:5d:f5:c7:69:0f:a2:7c:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Aug 17 14:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6060cf2797d6e2c6ad92417d40a6b40ae2df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:07:cb:39:b6:f3:fa:54:6b:f7:b1:fc:98:
cc:8e:e8:7a:49:2d:6a:80:17:f0:10:00:01:5e:b6:
9d:98:c3:b1:d3:05:12:87:3d:54:2d:c2:10:8b:f9:
cf:a7:f4:88:b3:e9:38:cd:70:65:6f:30:b7:b0:eb:
14:e1:25:0e:24:49:e0:21:66:54:d5:3b:26:82:9b:
a0:d4:da:06:b5:7e:df:9b:b1:44:c0:ce:33:8b:71:
4f:4e:5c:a2:99:5f:10:e9:83:c1:69:d5:02:a2:18:
42:b3:71:8e:f5:ff:53:dc:85:b7:51:46:82:4d:29:
21:cb:d3:ca:5b:2e:b9:40:85:b0:34:ef:1d:89:01:
07:2e:5d:cc:62:d2:79:ad:b3:b5:ef:a5:55:e1:45:
ad:b5:c7:d4:cf:21:2d:ba:d8:16:b8:e7:21:0e:11:
c9:25:46:8c:bd:56:8f:fe:81:9f:bf:58:52:af:62:
8e:e2:04:d2:5d:ce:2f:cc:dc:6a:0c:ff:c4:09:47:
86:ec:6d:96:3e:3e:91:06:ed:f6:9d:84:cf:cd:aa:
1b:ba:cf:69:1e:92:1d:ae:f3:bb:50:36:28:c9:53:
f4:b4:ac:a3:b0:62:14:0f:c6:e0:6e:27:db:36:7c:
4b:16:a5:db:e2:0f:11:68:66:27:2c:b3:5d:33:1a:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:60:60:CF:27:97:D6:E2:C6:AD:92:41:7D:40:A6:B4:0A:E2:DF:2A
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/3WBgzyeX1uLGrZJBfUCmtAri3yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.40.0/22
195.128.226.0/23
195.177.70.0/24
IPv6:
2a10:23c0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:63:9b:c7:db:23:a8:d3:94:2e:55:bd:7e:fd:b6:28:d9:32:
2d:2d:ab:d0:f2:ba:50:78:87:7f:8a:e5:e9:a4:d9:d6:86:3b:
20:30:8d:b7:2f:db:f9:d6:89:4d:63:74:f5:cb:1f:62:14:50:
38:e0:90:ea:ff:34:a2:bb:7b:9e:8c:45:c9:cf:d0:a4:76:3a:
fb:d6:b8:bb:a6:d1:84:44:a3:18:d2:84:28:8e:89:ab:82:4d:
76:9b:0a:46:62:8d:39:a6:25:d4:43:f4:14:7a:69:04:84:ff:
b2:40:8d:91:b6:a1:1b:ad:24:77:a9:b4:42:1a:88:1d:04:5b:
07:87:d3:70:81:b8:64:ee:c8:43:f5:56:d9:82:c3:d5:77:10:
a8:82:65:1e:03:e2:15:ce:f5:1d:19:1e:ad:4e:48:ef:f9:c5:
46:c8:ab:6c:2a:3a:40:02:7d:88:e2:0a:1c:5b:2c:40:e2:50:
46:cc:d2:8d:67:ae:f0:cc:81:73:2c:8a:b0:07:d1:f5:92:39:
fb:6a:fc:b8:e0:47:b9:a3:10:cc:63:34:f8:c0:ab:61:91:25:
74:18:41:b4:07:b8:be:d0:5d:e0:12:ed:da:62:c6:00:02:9b:
a3:2b:76:c2:0c:1a:e9:35:30:04:7e:06:de:20:c2:91:d3:0e:
b3:4b:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 02:56:55 2026 by rpki-client