Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fJ_PMoOYtSCfWri3bnuEStzAEU.roa
File: 3fJ_PMoOYtSCfWri3bnuEStzAEU.roa (raw, json)
Hash identifier: K8zTDQZ2GewiOPYbGYIIiD7ysBjj/YajRY7qtZRmYI4=
Subject key identifier: DD:F2:7F:3C:CA:0E:62:D4:82:7D:6A:E2:DD:B9:EE:11:2B:73:00:45
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F84AD3CB2BE8E414849CB2A6EAA09185E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fJ_PMoOYtSCfWri3bnuEStzAEU.roa
Signing time: Tue 21 Jul 2026 12:36:13 +0000
ROA not before: Tue 21 Jul 2026 12:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 45.137.84.0/24 maxlen: 24
45.141.176.0/24 maxlen: 24
45.146.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:ad:3c:b2:be:8e:41:48:49:cb:2a:6e:aa:09:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 21 12:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddf27f3cca0e62d4827d6ae2ddb9ee112b730045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:4f:57:fd:87:8c:c5:c2:b9:35:30:3e:b3:
e4:14:3c:06:51:9a:e6:00:6f:13:f1:fc:d0:42:78:
aa:25:7a:20:1f:8b:c4:a1:51:9c:aa:53:4f:94:67:
ef:02:fc:c4:0d:9d:ee:e6:35:3a:6c:df:64:ff:26:
10:dd:13:cc:18:d8:a1:e3:26:5e:20:b2:23:ae:d0:
fd:97:a3:42:39:03:96:30:b8:8f:7d:51:f6:98:64:
c2:ed:40:bf:93:80:cc:95:dd:c6:e5:7c:78:4c:81:
b5:2d:b6:df:95:fc:2a:c3:8b:a5:1a:fe:1d:d0:4f:
87:8d:45:1b:f0:30:60:59:98:bc:89:a4:f2:5e:15:
d9:26:6d:b5:8f:52:2c:6e:00:74:5b:e2:ea:8a:58:
76:b6:ea:18:4d:ba:b8:e8:4b:6f:0d:ff:0e:5f:b1:
08:d6:39:c4:98:6d:e4:35:66:e7:f3:fa:6d:e1:2e:
35:da:28:38:0f:ee:a3:f5:4a:98:c0:c2:55:e9:4e:
fd:2f:aa:e9:59:6e:3a:84:c2:dc:13:13:c3:17:11:
2b:2f:41:5d:39:80:02:0d:a7:09:72:9b:c9:3f:af:
3f:45:66:cd:38:cf:c2:65:dc:bf:8d:e6:79:38:7d:
1f:34:48:0d:3c:38:c9:f3:25:a0:64:b4:04:68:9a:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:7F:3C:CA:0E:62:D4:82:7D:6A:E2:DD:B9:EE:11:2B:73:00:45
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fJ_PMoOYtSCfWri3bnuEStzAEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.84.0/24
45.141.176.0/24
45.146.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f0:90:de:2d:07:fa:8c:e8:98:4b:55:c0:02:08:24:b9:ea:
e7:6a:07:42:4e:9d:19:2b:d9:d8:8c:98:1e:22:73:b9:23:44:
e2:32:0c:7f:43:19:64:3a:a3:7d:ff:0c:bf:c6:8f:ef:8b:81:
ca:41:7d:26:8c:69:87:0b:81:b7:63:73:37:3e:31:6d:53:b9:
a5:e5:b9:75:a1:09:8b:0d:e0:4d:45:b4:b0:26:e2:fb:d5:ae:
c2:b5:b7:60:a2:10:8a:44:e5:25:74:27:78:a1:78:2a:81:0b:
63:33:fa:2b:ae:30:e1:77:b8:d3:07:96:30:65:cd:cd:2a:46:
14:3e:9a:87:c5:d6:e7:4b:c1:94:d9:6f:a2:14:75:42:00:c9:
af:c6:5f:00:74:92:37:a8:34:e6:4e:cd:a1:fc:25:1d:74:08:
b1:97:f3:a6:a6:94:30:9b:d7:21:42:63:84:62:61:ff:4d:31:
5c:23:76:cd:e7:41:3a:01:ac:7a:36:27:15:47:af:7e:04:d5:
a3:b3:1a:e3:b7:c6:db:9a:1a:f0:8c:c6:7b:04:20:50:1f:dd:
ac:4b:b6:29:a1:73:3a:e1:98:27:d8:6c:99:e1:64:09:e2:bf:
d8:b7:26:89:da:4e:7e:99:42:a8:4c:f4:0f:92:03:cf:f9:bb:
4f:8d:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:38 2026 by rpki-client