Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3L1fS5YlDSoxam984DQval1zCzA.roa
File: 3L1fS5YlDSoxam984DQval1zCzA.roa (raw, json)
Hash identifier: gxKGYQMUUGEfS0KP7dw/0ET9qypmTgnM2n4XaNA7YPY=
Subject key identifier: DC:BD:5F:4B:96:25:0D:2A:31:6A:6F:7C:E0:34:2F:6A:5D:73:0B:30
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0F347BD2FB2F4C5C839B234B1E425E92A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3L1fS5YlDSoxam984DQval1zCzA.roa
Signing time: Wed 30 Sep 2026 17:05:59 +0000
ROA not before: Wed 30 Sep 2026 17:05:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 194.93.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:47:bd:2f:b2:f4:c5:c8:39:b2:34:b1:e4:25:e9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 30 17:05:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcbd5f4b96250d2a316a6f7ce0342f6a5d730b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:88:45:ad:2f:81:08:53:9d:74:f5:c7:54:
3b:52:be:3e:b1:9c:fa:d5:5f:9d:01:33:06:d9:27:
94:c5:4c:97:90:aa:05:53:19:b0:a0:fb:0c:7f:9b:
2a:6d:35:65:aa:29:f8:c6:bb:98:f5:ab:1c:3e:ce:
60:3d:49:4b:3f:a8:95:3a:a7:ea:78:0d:ca:e5:6b:
87:f5:54:f3:83:ca:70:ea:1c:90:4a:4f:67:ca:48:
c9:2c:6c:27:ad:7a:e7:33:09:14:c1:78:51:90:12:
7c:65:ea:28:9a:f9:a9:ba:fc:7a:31:48:6a:8a:07:
d9:0b:2b:65:fb:56:b0:18:df:27:bc:e1:db:ca:e7:
74:45:3f:f7:d8:7e:58:21:c7:8d:2a:13:61:8f:73:
2f:a5:19:4a:0b:ec:57:6b:9d:f9:22:41:15:eb:61:
67:77:12:ec:4b:a3:fd:1e:a3:a8:6c:ea:36:37:5c:
2e:a4:42:21:2c:d4:02:9c:5a:fc:dd:71:fa:03:7a:
c9:8a:d3:c2:4e:f6:fd:db:d6:40:0f:c3:7d:04:e0:
ff:ed:69:be:3c:1b:be:9f:2c:14:f9:6a:54:45:a4:
2e:51:c2:d6:a0:16:a2:a3:67:25:b1:2c:3b:ea:ad:
d5:8a:4e:20:30:a9:b4:3d:73:f6:64:55:7d:98:46:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BD:5F:4B:96:25:0D:2A:31:6A:6F:7C:E0:34:2F:6A:5D:73:0B:30
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3L1fS5YlDSoxam984DQval1zCzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.3.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7e:7d:33:20:40:ad:1c:78:0e:1a:17:8e:fd:3d:70:30:1e:
dd:4e:c5:8e:79:ad:88:84:e4:39:ce:ea:58:3e:bd:f1:97:69:
12:d0:5c:c9:36:a7:77:9b:1b:61:3f:c8:7b:d4:dd:66:28:f1:
28:e7:88:93:08:88:47:e5:53:9f:05:9f:3b:96:9f:8a:02:cf:
f2:44:b8:35:69:e5:52:35:24:7d:9a:f9:84:57:68:02:a4:83:
ac:ff:f7:9f:13:5b:14:03:0c:b5:22:e4:e8:5b:5a:6d:cd:38:
0a:4b:39:aa:32:ac:ea:9e:f9:fd:a9:f7:19:ed:7f:c6:4e:14:
42:86:22:90:eb:50:b8:69:b1:d2:7a:60:2c:84:c9:38:4b:9e:
7a:33:5e:eb:18:82:94:ab:c7:30:bb:90:e4:fa:90:a6:ab:d6:
02:20:d1:77:a9:dc:61:ee:ae:40:15:f2:6f:c7:54:7b:60:d5:
55:f6:08:fe:0b:c5:6e:16:41:9d:10:df:ad:2e:3f:47:ea:f3:
d8:ac:69:94:05:80:cf:db:71:c0:5c:58:02:9c:eb:8a:58:fc:
88:a1:41:18:3d:82:df:1b:02:b2:a5:1c:06:10:f4:57:27:33:
17:a7:96:b3:98:c4:b1:57:5a:4c:91:22:0b:8a:78:1f:5e:01:
53:78:5c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 00:04:59 2026 by rpki-client