Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l3bT-jumDHdM-CroDVO2-UNB5Ww.roa
File: l3bT-jumDHdM-CroDVO2-UNB5Ww.roa (raw, json)
Hash identifier: JzFw155niU4OBQbKXyrwYnEb+/39hOkTbj6xIQxW9CA=
Subject key identifier: 97:76:D3:FA:3B:A6:0C:77:4C:F8:2A:E8:0D:53:B6:F9:43:41:E5:6C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E3BD332CE100B99FD20600B594A9F413D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l3bT-jumDHdM-CroDVO2-UNB5Ww.roa
Signing time: Mon 18 May 2026 16:02:37 +0000
ROA not before: Mon 18 May 2026 16:02:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211072
IP address blocks: 45.15.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:d3:32:ce:10:0b:99:fd:20:60:0b:59:4a:9f:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 18 16:02:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9776d3fa3ba60c774cf82ae80d53b6f94341e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:e2:77:d7:fb:43:bf:2f:83:bd:c8:f5:0f:
20:73:21:a1:e9:ef:7b:a2:52:8e:de:7d:ec:df:d7:
62:f9:65:df:b4:26:cd:b5:4a:ca:0f:89:bc:48:0f:
9e:be:45:e2:3e:00:5b:f0:9f:5d:9d:b1:f5:3f:28:
39:7b:f2:67:25:63:a9:24:1c:8d:af:1a:b5:bf:b4:
b9:d6:43:72:ff:86:b3:df:b8:ad:58:95:79:af:ae:
8c:50:73:64:88:f8:eb:cc:42:c5:7b:fb:15:05:36:
6f:ec:53:ba:4a:f0:04:bd:a4:6d:ac:4a:6a:a1:e3:
bc:4f:3e:7b:55:d8:69:c2:04:fe:b8:24:56:4c:c4:
92:a6:2e:60:af:9c:3e:87:92:ac:33:1e:ef:59:0b:
e6:fe:e9:2a:97:8c:93:95:4d:0c:41:7f:ae:79:37:
72:ed:b6:a3:62:b3:72:c9:31:ac:d5:3d:8b:de:ba:
48:d6:3a:c7:43:bc:52:12:ec:5e:d0:36:39:6b:85:
e1:32:1c:a9:3c:3f:56:cc:5e:9d:dc:9b:0b:04:06:
c1:84:5a:df:91:1e:b1:f0:80:79:77:aa:99:9c:29:
49:1b:68:40:37:b4:ff:85:63:66:3c:05:f1:27:b3:
ca:82:da:c4:92:65:1c:ab:36:da:dd:f0:db:26:4d:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:76:D3:FA:3B:A6:0C:77:4C:F8:2A:E8:0D:53:B6:F9:43:41:E5:6C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/l3bT-jumDHdM-CroDVO2-UNB5Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:28:f4:2a:96:f0:21:72:ee:56:b1:0a:3e:d2:24:01:d7:85:
66:99:ad:f1:5e:7f:61:21:81:a1:bc:57:61:0e:38:94:fd:5b:
7a:cf:00:af:e6:1f:1d:02:81:a8:e7:4b:1a:0b:2f:60:2a:df:
c5:b1:97:fc:14:2f:7d:5e:a5:85:39:da:a3:15:18:18:8e:7c:
d4:aa:d2:04:0a:88:ce:f5:a4:7b:d0:bf:53:c8:cf:49:4f:40:
bb:df:f4:09:89:92:a4:99:12:e0:79:68:6b:11:25:79:c1:a3:
ce:35:1e:fb:f5:d2:75:87:d8:63:45:13:3e:a7:55:7b:91:0b:
06:dd:0d:bd:43:e0:72:8c:9c:83:52:c4:7f:38:9b:26:43:33:
8d:07:f7:90:23:02:df:3b:d0:87:50:1c:4e:1e:15:d9:a2:9c:
ec:31:6f:99:0b:c5:41:88:39:87:a8:92:0a:44:59:97:23:d3:
a0:e2:b4:84:c7:3c:d6:40:49:4a:c2:25:17:95:05:6c:66:d8:
c3:a7:b9:84:f1:6f:6c:4d:25:f9:33:bb:e3:75:a6:c5:06:7e:
14:75:1f:fd:0c:57:56:8c:a8:01:88:3b:83:b4:19:0d:dc:71:
34:64:03:01:58:02:09:b3:f5:cd:f1:a9:be:ea:fd:cb:84:1a:
3b:6b:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:23:53 2026 by rpki-client