Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/3URcR2VAq9YwUG_RdREcOw-9ln4.roa
File: 3URcR2VAq9YwUG_RdREcOw-9ln4.roa (raw, json)
Hash identifier: S5nWhW1lsV8LUmD4DKpYZGcwm/m354NfNJ30ZDEaIUk=
Subject key identifier: DD:44:5C:47:65:40:AB:D6:30:50:6F:D1:75:11:1C:3B:0F:BD:96:7E
Certificate issuer: /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial: 019F2368CCA84610FB71C4B3C39955CB7A68
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/3URcR2VAq9YwUG_RdREcOw-9ln4.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205112
IP address blocks: 185.117.214.0/24 maxlen: 24
2a06:8784::/32 maxlen: 32
2a06:8784:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:a8:46:10:fb:71:c4:b3:c3:99:55:cb:7a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd445c476540abd630506fd175111c3b0fbd967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:63:70:ee:7f:81:e3:21:08:e3:38:81:1b:
56:c9:8b:29:74:99:7f:6b:f8:e7:d1:7c:f0:a8:d1:
0b:70:f0:13:1f:83:15:3c:6c:bf:cf:e2:2e:28:c4:
6f:2d:06:bf:39:c1:6f:4c:5d:e6:73:62:32:2c:dc:
1f:a9:c7:ad:20:0b:7e:76:c1:51:b6:ee:f8:7e:e9:
c4:78:2f:c6:88:01:a2:2e:93:08:61:46:21:ca:ae:
a6:b1:75:40:f7:26:71:3e:6b:5d:27:9d:9a:e4:96:
3e:c8:23:33:0d:62:cf:30:a7:b9:90:4d:85:de:62:
a3:fa:fa:d2:d3:9d:d7:58:7c:ce:70:4a:27:a8:f1:
76:36:6a:3a:cb:d1:8c:91:2f:f0:bc:e9:70:bc:64:
e8:c6:eb:d6:2d:0b:ee:11:92:2d:a2:7b:b0:bb:ca:
28:63:09:de:d1:da:bb:93:9b:cf:4f:f8:4e:83:f3:
a3:6a:d1:1e:21:04:6c:a4:a9:e4:eb:de:32:87:ee:
f2:2b:6d:8c:83:ec:43:71:44:b5:30:31:5a:99:f4:
96:f5:6d:0d:dc:06:ef:be:d5:9d:04:17:b5:15:2d:
52:99:7d:1b:37:70:09:84:b9:ba:61:01:ff:7c:b1:
6b:8a:15:d2:04:3d:db:2a:ed:00:a5:2b:ad:87:d1:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:5C:47:65:40:AB:D6:30:50:6F:D1:75:11:1C:3B:0F:BD:96:7E
X509v3 Authority Key Identifier:
keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/3URcR2VAq9YwUG_RdREcOw-9ln4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.214.0/24
IPv6:
2a06:8784::/32
Signature Algorithm: sha256WithRSAEncryption
1d:68:34:be:c6:26:e5:9d:d9:28:d9:ef:3c:bf:1a:30:62:7d:
27:89:6a:2f:ff:6f:00:64:26:96:05:13:c4:3f:a1:75:9d:57:
8e:31:f8:b3:5a:36:e4:a6:93:ba:17:7f:09:ea:5a:5b:d1:46:
b2:17:af:56:6c:47:d7:5b:1c:e5:fc:9c:0d:a4:37:28:4c:ce:
41:ff:da:59:83:2c:ad:4d:54:67:ca:fd:21:c6:93:39:ac:49:
4f:21:64:d7:26:52:8e:e4:a9:65:fb:88:88:e6:4e:91:3c:97:
42:36:f3:5c:b6:1d:22:5a:94:40:36:e2:bc:bf:89:ea:bd:93:
e9:dd:3e:b1:7d:ac:8b:e0:4c:2c:35:af:47:ce:f8:41:98:be:
fe:b7:64:7a:f9:8e:aa:b7:5a:32:94:bf:33:13:da:81:ec:75:
8e:d9:3f:8e:4e:2d:e1:a4:71:ea:df:79:79:bc:02:fc:60:b3:
78:49:4c:b0:04:19:de:f9:ce:6c:9a:1b:f7:d7:a4:d7:6d:51:
8c:db:d3:0d:05:18:8e:87:49:54:04:89:27:30:24:a6:07:3c:
5d:fd:bb:89:14:c6:72:4b:0e:c0:42:9a:07:d7:93:74:d5:29:
c8:88:f9:90:eb:79:a3:ab:c0:40:63:26:33:87:64:8b:b7:45:
08:84:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:23 2026 by rpki-client