Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3y1Ti8NORK0s9CGbcmQnfJzk0fE.roa
File: 3y1Ti8NORK0s9CGbcmQnfJzk0fE.roa (raw, json)
Hash identifier: K/qZase2jaaL3XTb2pU/FBN9Wi1NaXdYbb3HDSGRX3k=
Subject key identifier: DF:2D:53:8B:C3:4E:44:AD:2C:F4:21:9B:72:64:27:7C:9C:E4:D1:F1
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01A144212744037C423A41BDD6238A907136
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3y1Ti8NORK0s9CGbcmQnfJzk0fE.roa
Signing time: Fri 16 Oct 2026 09:53:05 +0000
ROA not before: Fri 16 Oct 2026 09:53:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 91.210.108.0/23 maxlen: 24
91.221.190.0/23 maxlen: 24
132.243.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:21:27:44:03:7c:42:3a:41:bd:d6:23:8a:90:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Oct 16 09:53:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df2d538bc34e44ad2cf4219b7264277c9ce4d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:57:74:dd:b2:5c:6f:45:72:22:b8:0a:09:
22:c0:7d:e5:68:0e:6a:8d:e4:ce:c4:05:90:dc:0b:
55:55:e0:f7:bf:00:ca:fc:8f:2d:36:52:0e:77:5d:
39:af:1d:d3:4d:b6:86:b5:3f:fc:48:5b:11:4a:f5:
f6:a0:b4:b0:d6:bd:96:84:cc:0e:c8:76:16:32:39:
f4:32:91:b5:60:59:a5:25:56:94:be:9a:78:fb:69:
d7:ae:bb:93:bf:9e:a0:f0:5d:7e:f4:07:ec:08:59:
7d:b3:15:51:fd:40:8b:ab:d1:06:33:80:69:13:37:
07:b0:44:ae:ab:74:22:d2:83:1a:76:22:1e:dd:37:
02:c9:d5:ad:63:c0:c6:c8:76:18:7f:87:58:ec:e6:
e4:55:6f:f2:0e:cd:87:63:99:4e:df:a3:9a:7f:41:
c7:d0:3c:aa:9c:35:d6:29:28:6e:75:16:81:36:de:
07:f4:ab:35:87:b6:b5:73:ba:88:f7:a8:2f:04:b3:
70:03:30:2d:84:8e:65:7e:fd:04:64:84:b5:a6:80:
f6:54:67:f3:a7:32:bd:18:3e:c6:76:2c:f1:41:e3:
06:e7:bc:71:7a:c9:cb:4c:88:30:b5:ee:7a:70:28:
6c:bc:fe:67:ed:84:45:4d:5b:83:cc:2f:de:a9:0f:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:53:8B:C3:4E:44:AD:2C:F4:21:9B:72:64:27:7C:9C:E4:D1:F1
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/3y1Ti8NORK0s9CGbcmQnfJzk0fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.108.0/23
91.221.190.0/23
132.243.168.0/22
Signature Algorithm: sha256WithRSAEncryption
01:4d:5e:d2:ef:2b:ed:bd:bd:4f:ae:75:e6:50:da:02:23:c0:
7e:3f:a9:da:3b:94:1d:4c:d4:c9:2f:44:e0:df:f9:d4:eb:42:
bb:1f:39:f8:d5:27:87:bb:5c:42:fb:10:94:f0:df:f4:22:0e:
87:33:dd:22:4b:82:15:54:4b:14:2c:c4:88:da:b3:e7:1c:14:
48:32:08:83:df:9d:96:f0:d3:05:3c:62:57:cf:97:29:7e:3e:
d8:32:ce:99:40:f7:53:7f:ac:7c:45:43:c6:82:7e:1e:b3:f6:
5f:63:eb:bd:17:3a:92:76:da:72:55:98:8f:dc:ae:40:7e:6b:
a0:0e:89:b9:db:ec:8e:2c:0b:23:1f:af:e5:ef:26:8d:c0:eb:
42:39:22:a7:11:bc:d4:dc:d6:ea:d7:8d:7e:26:82:59:d7:c5:
30:26:e2:ce:66:9f:f5:5a:a2:2b:30:4d:7e:21:f9:5f:fd:44:
6f:18:15:81:16:5e:1f:f8:50:89:b0:c0:9e:55:54:6f:4e:ee:
2f:5c:60:d6:90:f9:9f:28:39:f5:85:8f:98:26:d6:65:c6:4e:
15:e1:35:43:a6:01:1a:fe:54:f9:4e:cb:14:5c:b0:2d:91:12:
ef:ce:49:5c:a5:13:1d:20:cc:b5:c2:01:01:1b:39:b7:c6:50:
d9:0c:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:08:24 2026 by rpki-client