Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3f7KQyUBwcSYn-oe0aI8eIzxP2c.roa
File: 3f7KQyUBwcSYn-oe0aI8eIzxP2c.roa (raw, json)
Hash identifier: +EvgCeoC6Bz6hbtFxRO7AmtSFa3KbGMgbKfwPOOEIbA=
Subject key identifier: DD:FE:CA:43:25:01:C1:C4:98:9F:EA:1E:D1:A2:3C:78:8C:F1:3F:67
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A182E0A197FD02B0E6EAF49BDF0AED6460
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3f7KQyUBwcSYn-oe0aI8eIzxP2c.roa
Signing time: Wed 28 Oct 2026 14:18:41 +0000
ROA not before: Wed 28 Oct 2026 14:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 85.208.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:e0:a1:97:fd:02:b0:e6:ea:f4:9b:df:0a:ed:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 28 14:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddfeca432501c1c4989fea1ed1a23c788cf13f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:87:f9:cb:25:c1:10:d6:a5:74:8a:b5:da:
de:10:3a:41:01:9a:9a:90:b0:bd:c3:85:5a:dd:3b:
56:63:7d:5b:cc:78:26:2c:a0:73:d5:ca:e9:6a:1d:
82:d1:ea:16:4e:06:31:d4:82:f1:21:67:9d:19:02:
6b:15:04:ce:c3:97:f4:4f:e5:11:af:fb:82:8a:b7:
32:2f:e4:b5:16:16:06:23:ab:e7:dc:5a:d6:bb:24:
9c:99:c8:30:75:a8:02:f1:c8:3c:f7:20:3d:56:be:
2b:65:f6:e8:b9:ce:95:bc:1e:da:b3:bd:22:10:c2:
80:e5:be:31:1a:00:b8:28:b0:8e:0e:05:b0:c5:74:
5a:d6:25:d2:08:66:ba:07:59:ec:da:d2:a9:ec:06:
6d:ce:1c:01:aa:b7:82:b0:0d:5b:05:b6:fc:85:c3:
1e:01:ba:41:06:8d:08:35:ba:2d:f9:26:b9:7f:04:
d7:65:d3:3a:ba:af:6d:33:bb:3f:23:71:cd:0e:ed:
37:99:b3:08:a6:7d:58:53:9f:91:65:68:61:90:ef:
5a:d9:a2:c4:fc:76:04:af:f6:70:04:76:c7:09:71:
60:09:23:55:8e:43:ce:c0:09:6c:ad:6e:c8:c0:17:
11:84:9d:e6:d3:a4:04:f9:99:3a:93:76:3d:80:0c:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FE:CA:43:25:01:C1:C4:98:9F:EA:1E:D1:A2:3C:78:8C:F1:3F:67
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3f7KQyUBwcSYn-oe0aI8eIzxP2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
13:06:8a:1d:81:56:74:e8:dc:9d:bb:1b:12:1f:07:1c:5f:07:
0e:03:ff:45:e6:6e:37:4b:56:cf:5d:23:07:21:b9:dc:54:24:
e1:e8:e2:9b:d4:19:f0:08:42:0d:d4:39:5c:02:25:8c:f1:05:
20:53:29:62:61:df:15:b1:0e:9e:3f:93:34:da:ce:53:95:03:
39:39:44:4a:3f:bf:c1:d3:ac:2d:c4:96:cf:b8:07:60:96:af:
57:6d:b8:cb:2c:a2:5f:c4:8e:ec:fd:71:ee:09:72:ce:4e:e6:
82:c8:e7:a5:04:19:cb:ec:c1:90:bb:a5:10:76:54:5c:f5:da:
f6:10:fe:28:2c:05:7d:d6:cd:5c:a6:ec:46:14:cc:ea:ed:68:
85:4a:38:33:a2:8a:d8:85:de:d9:b1:cd:f9:fc:f6:ad:c5:09:
93:6c:c7:1e:7b:da:6c:0e:5a:5b:86:a2:0b:71:48:86:0e:a4:
00:93:7f:a5:24:0e:64:81:ee:97:e0:b4:07:1c:7e:94:54:4e:
ac:15:af:50:e4:c3:3d:8d:90:ec:a3:e8:ae:bb:1c:c9:45:b1:
d3:4e:6d:fb:99:ce:49:8a:4f:b0:bc:52:58:00:10:ad:d7:63:
ef:c5:51:f1:65:09:64:e7:dd:45:56:43:e2:15:8a:53:72:a3:
71:16:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:56:07 2026 by rpki-client