Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa
File: 3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa (raw, json)
Hash identifier: 7jmJB1ip1ePV21qy2oJjMtrZOP/BQAW7WRPsDMK05o0=
Subject key identifier: DE:05:85:43:74:7D:E2:75:DE:26:6F:47:EC:21:69:FF:B1:D8:E3:23
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0F1C10DD18DC6CF2E41016C42F9A41AEB
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa
Signing time: Wed 30 Sep 2026 09:59:16 +0000
ROA not before: Wed 30 Sep 2026 09:59:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 165.84.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c1:0d:d1:8d:c6:cf:2e:41:01:6c:42:f9:a4:1a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 30 09:59:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de058543747de275de266f47ec2169ffb1d8e323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:1b:81:d6:26:95:0f:54:10:c1:73:ee:1a:
65:01:96:ab:fd:3b:5b:d7:ce:5b:5b:4c:ce:31:74:
35:3a:7f:3b:a7:cb:2a:5d:fc:18:e7:78:33:b1:d6:
69:53:37:7d:b6:5d:32:f2:ef:c8:6b:3d:2b:ac:21:
3e:53:e8:b7:5b:cf:fb:e5:bf:d3:2d:10:57:7b:b9:
5f:fe:4d:44:00:c6:8d:b9:9c:9c:62:2b:38:b8:c0:
9a:5e:38:6d:75:c9:ba:fc:cb:f5:d6:d2:41:85:4a:
bf:e6:09:90:ee:5e:00:9a:39:7f:16:80:2f:94:38:
a6:ed:e3:db:52:59:cc:04:51:31:52:3c:e2:2a:e2:
42:56:8b:2d:f1:89:e4:ab:4b:c3:74:7f:4d:cc:da:
d5:2d:91:ca:9b:fd:35:ae:a8:14:9c:8a:38:8e:e0:
93:48:a2:92:52:9e:de:bc:b6:a4:fd:74:83:ce:ee:
28:58:e0:df:ae:cc:d9:eb:1a:c2:20:c9:b6:53:2e:
74:58:7f:84:47:94:0f:de:18:b1:ba:73:a7:b8:98:
8f:18:e0:3c:6d:38:54:3f:97:7f:23:52:0c:7d:24:
fa:d5:1d:95:42:91:e0:dd:54:97:56:d8:a2:6d:40:
71:e8:d3:88:f5:cf:49:ba:09:43:1f:22:35:a9:2b:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:85:43:74:7D:E2:75:DE:26:6F:47:EC:21:69:FF:B1:D8:E3:23
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.226.0/24
Signature Algorithm: sha256WithRSAEncryption
80:68:d5:71:46:ea:9f:32:df:83:62:6a:2c:c5:51:ee:73:23:
5a:12:d4:a2:3f:29:3a:ea:48:4b:c1:be:54:ca:74:1d:d5:84:
ba:67:4f:28:c6:82:c6:0d:db:44:8f:6d:fc:f1:3d:b3:bd:8e:
5c:2c:bd:ae:05:ff:76:32:5d:17:96:78:cb:f9:eb:fa:c0:d0:
d4:cf:6e:46:48:09:b7:13:dc:d7:b8:8e:43:ac:b5:52:ea:78:
ac:68:f4:1e:af:59:48:a4:dd:48:74:a4:79:91:e1:f4:9a:58:
8e:a8:1b:e2:45:77:1f:1a:50:be:6a:15:89:ae:26:34:fb:ec:
48:13:ec:4a:f0:fa:46:fd:85:f6:04:b1:90:45:52:d9:d4:86:
29:ff:7a:66:f3:b6:a0:01:21:db:d1:a4:dc:36:81:38:b2:90:
e4:74:9e:69:b8:f3:6c:4d:06:87:54:d8:65:92:64:a9:5d:01:
d1:ad:27:bb:53:bb:a3:f2:17:60:30:eb:94:6a:8d:6d:97:6a:
fe:be:19:d3:3c:b1:45:7a:bd:f5:8a:c3:fc:4b:cb:01:a5:05:
11:e9:64:b1:1a:80:e3:8a:f2:be:ad:41:89:d8:60:ec:7a:b2:
2d:c0:d2:9c:9a:05:1d:e5:da:67:68:cd:b8:41:a5:e1:7f:4c:
75:47:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:32:41 2026 by rpki-client