Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/i3YTAJozwkOZYg6f7KZcf--oZvY.roa
File: i3YTAJozwkOZYg6f7KZcf--oZvY.roa (raw, json)
Hash identifier: N6vYaUT4my73KK+I3kEXMZHN6vjd2Vf3D+a9de3TkZE=
Subject key identifier: 8B:76:13:00:9A:33:C2:43:99:62:0E:9F:EC:A6:5C:7F:EF:A8:66:F6
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A070B1E07F7338E8627EE0CF6ECDE60876
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/i3YTAJozwkOZYg6f7KZcf--oZvY.roa
Signing time: Sat 05 Sep 2026 08:31:40 +0000
ROA not before: Sat 05 Sep 2026 08:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31863
IP address blocks: 165.84.231.0/24 maxlen: 24
192.145.52.0/24 maxlen: 24
213.109.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 08:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:b1:e0:7f:73:38:e8:62:7e:e0:cf:6e:cd:e6:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 5 08:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b7613009a33c24399620e9feca65c7fefa866f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:b1:23:5a:aa:0a:93:35:4e:b8:49:31:33:
78:7f:12:fc:3b:74:f6:2e:d5:0d:9e:e4:5b:e4:02:
aa:5a:e1:2f:b7:55:72:2a:33:24:4c:08:2f:bb:a4:
d8:f1:0d:7e:ce:cb:40:1e:c5:f7:28:46:8e:a1:cf:
bb:5d:49:7a:25:dd:f5:ae:4f:42:e3:a5:54:76:bb:
a6:bc:17:f2:9a:c8:e2:b2:60:0c:0c:e2:ba:8e:f6:
47:bb:de:6d:02:2f:bb:3b:21:be:19:b3:5b:ed:9a:
57:65:32:93:70:be:74:21:66:ee:0d:0a:29:31:e1:
7b:11:34:9b:15:c0:15:df:b4:39:d1:71:f7:05:76:
58:5d:aa:14:4e:90:3d:92:cb:81:07:76:22:11:82:
3e:9a:3c:bb:32:4a:cb:d5:7f:75:be:45:b3:0c:ac:
14:9d:a6:c5:c7:b8:f8:53:2d:4e:bc:6c:96:62:ea:
94:ec:6e:56:5e:d5:7a:c7:ad:ee:1c:b0:27:3d:91:
17:09:fa:ad:90:7d:b2:84:f1:b5:2b:27:f8:5c:3f:
98:25:b8:cc:b9:30:cd:17:fe:71:54:9d:e5:e9:c5:
e1:c0:49:a9:ad:44:4a:60:cd:17:66:7c:0e:a4:d0:
4a:62:66:02:dd:d8:91:b6:ed:8d:ec:d6:9e:a6:bd:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:76:13:00:9A:33:C2:43:99:62:0E:9F:EC:A6:5C:7F:EF:A8:66:F6
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/i3YTAJozwkOZYg6f7KZcf--oZvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.231.0/24
192.145.52.0/24
213.109.182.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f9:a6:ab:2b:6c:dd:d9:07:aa:34:dc:53:e6:08:e4:5f:36:
5e:81:12:d8:0a:e8:a1:5a:17:0e:67:08:04:58:44:f2:b0:7f:
8c:63:9a:67:cc:92:de:cd:c0:81:d4:23:cf:e2:92:9a:cc:36:
f2:41:b8:47:0b:87:fa:45:27:5d:b1:34:63:75:6d:7c:af:c9:
4e:af:31:f4:99:e8:31:f8:cb:3f:59:fb:6e:8c:aa:46:b7:d8:
27:79:c3:21:7d:e0:03:25:2b:05:96:ff:fb:10:13:37:7e:06:
ef:65:70:01:30:73:61:66:a9:0c:34:43:3d:38:83:49:7c:f4:
5d:a6:cb:05:7c:fb:9b:39:ae:79:a0:7d:b5:d0:1a:43:e7:4f:
62:8c:31:78:ba:4b:5a:fa:c8:80:79:ba:77:51:f1:3f:2a:2b:
bc:87:13:94:4e:8b:95:aa:8e:7e:96:74:82:e1:52:21:56:fc:
f8:33:6e:fc:d4:b1:1e:1a:0b:54:77:6b:08:08:dd:ce:ea:51:
71:04:12:12:dc:3c:82:27:9a:ed:c9:6b:f7:19:82:23:42:ff:
9e:bf:88:57:9b:b9:80:74:fe:74:bc:d6:ad:27:0a:bc:73:13:
83:4e:81:63:e1:e4:8f:fc:09:50:47:11:d9:4c:8d:01:c7:7b:
30:ba:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:38:05 2026 by rpki-client