Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa
File: A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa (raw, json)
Hash identifier: UDvp6EMA0+KfuBkd2l4oyl6FkbhaIkyjf6UNDZfoBjk=
Subject key identifier: 03:7A:05:AE:C6:76:AE:3D:1F:AF:69:84:78:25:3D:B7:07:69:9C:3D
Certificate issuer: /CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Certificate serial: 019D298D023BEAD4FC7546E1D81E3694E350
Authority key identifier: 14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa
Signing time: Thu 26 Mar 2026 09:50:00 +0000
ROA not before: Thu 26 Mar 2026 09:50:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20841
IP address blocks: 193.108.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:8d:02:3b:ea:d4:fc:75:46:e1:d8:1e:36:94:e3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d2a56c24bd7b4c0f934ef72445f2e3f2ee482c
Validity
Not Before: Mar 26 09:50:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=037a05aec676ae3d1faf698478253db707699c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d7:9c:98:36:63:10:1f:bb:77:8f:74:1b:51:
61:60:60:f7:28:be:65:2d:c1:7a:65:aa:e0:f8:6b:
8b:b7:d8:f4:0f:05:ea:e8:46:10:d8:fe:dc:43:86:
9c:c8:a5:72:01:f1:8d:c4:b2:2f:8c:1d:b4:23:dd:
6b:06:e4:1f:eb:ee:4f:9f:cb:d1:c0:6c:97:06:b2:
4f:54:bc:8c:14:19:3d:c1:70:7e:3f:cb:b7:76:3a:
89:89:d7:62:c2:23:7a:82:7f:a2:a1:63:f0:80:11:
60:a7:c1:31:26:15:4b:3c:d1:e9:23:cb:9c:bd:43:
70:08:76:74:5a:f8:93:b8:cd:8e:ca:f4:c1:12:5f:
56:30:44:24:6c:8d:bd:2c:12:7e:46:e5:7d:ef:f9:
21:ee:6a:4d:52:16:71:b4:52:85:7f:03:bc:1f:ae:
dc:9d:8e:9a:97:6b:e4:8c:59:58:1d:21:64:40:10:
38:9d:04:2a:7e:41:41:7d:b2:09:93:c1:47:57:e0:
a6:79:1f:fd:5b:fe:64:6b:7d:ec:86:07:ce:d3:00:
85:1b:b1:07:a1:db:3e:55:e6:e5:61:88:d3:9b:7b:
1d:f2:dc:e7:a2:1a:d4:81:fb:81:48:a5:77:c2:6a:
a3:79:7c:1c:34:bf:33:9a:88:a4:59:81:81:14:f3:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:05:AE:C6:76:AE:3D:1F:AF:69:84:78:25:3D:B7:07:69:9C:3D
X509v3 Authority Key Identifier:
keyid:14:D2:A5:6C:24:BD:7B:4C:0F:93:4E:F7:24:45:F2:E3:F2:EE:48:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNKlbCS9e0wPk073JEXy4_LuSCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/A3oFrsZ2rj0fr2mEeCU9twdpnD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/41d93c-70ff-40fe-9581-37804eb75386/1/FNKlbCS9e0wPk073JEXy4_LuSCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.195.0/24
Signature Algorithm: sha256WithRSAEncryption
11:76:02:24:2a:9a:fe:89:3a:77:51:cc:63:db:2f:36:86:23:
86:ec:81:06:3f:20:ce:69:14:27:23:08:46:86:87:53:73:3f:
87:c8:5d:f8:e4:87:bd:ff:3c:79:36:11:f8:1c:78:ee:07:cb:
85:75:21:ce:56:e9:57:de:3d:a4:cb:1c:48:2b:1f:40:f0:21:
ad:04:16:aa:f8:17:e1:9b:ca:29:4e:d3:33:04:da:92:8b:aa:
81:a2:a2:bc:44:7f:7e:a5:d2:9c:1b:1e:f2:de:4c:a8:ce:52:
a2:98:44:02:19:11:61:d9:8c:69:ca:ce:10:aa:62:db:56:33:
58:6d:5d:97:2b:98:f5:7e:a2:9f:2c:3a:92:80:3e:9b:73:9c:
c8:eb:d6:3c:0e:32:63:88:2d:85:49:cd:d5:71:92:0a:78:68:
5b:da:87:94:8a:9b:fb:cc:fd:0b:b2:70:fa:5d:98:3b:af:e5:
aa:62:5e:24:d3:70:db:69:b6:39:c5:fb:24:4b:fe:dc:fa:34:
c8:40:05:04:c7:a9:3d:66:61:97:f5:70:a6:3c:d1:da:85:aa:
6d:b7:a0:dc:bb:78:1b:12:2b:bb:57:4f:75:66:a6:8b:16:41:
7e:62:86:6e:09:36:60:ea:bc:40:59:89:91:c8:ee:20:90:ff:
de:1d:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:32:13 2026 by rpki-client