Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/r3EiLYHevbO0Th1WEvhzW1gW05s.roa
File: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (raw, json)
Hash identifier: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=
Subject key identifier: AF:71:22:2D:81:DE:BD:B3:B4:4E:1D:56:12:F8:73:5B:58:16:D3:9B
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019E95C0A1F5D81BE5EC68C737C85219A9E3
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/r3EiLYHevbO0Th1WEvhzW1gW05s.roa
Signing time: Fri 05 Jun 2026 03:08:09 +0000
ROA not before: Fri 05 Jun 2026 03:08:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201194
IP address blocks: 185.118.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:95:c0:a1:f5:d8:1b:e5:ec:68:c7:37:c8:52:19:a9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jun 5 03:08:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af71222d81debdb3b44e1d5612f8735b5816d39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:57:f8:85:6f:f9:92:87:ea:16:81:d6:88:
6c:40:2c:3e:8a:ca:7d:36:a0:3b:66:c7:ea:e6:da:
c3:87:e5:ea:4b:a9:4b:d1:23:29:a9:7f:57:b0:68:
1a:68:2a:4d:b7:ff:56:2e:48:a4:ad:b5:63:b6:36:
45:c8:77:45:c2:d9:5a:cc:cc:f4:94:b4:7f:5f:8e:
04:90:1a:96:17:7a:b0:dd:02:74:63:25:e8:af:fd:
f3:ec:b4:11:3e:37:78:dc:76:c9:8d:92:d5:77:38:
9d:46:30:ca:15:9f:c4:13:3f:17:42:35:87:f6:1d:
41:ac:f6:d9:68:0b:c5:cf:f2:c2:42:6b:09:b9:21:
00:d0:4d:56:52:be:0b:57:4a:f0:29:c2:67:00:60:
4f:41:6c:b6:0c:8b:3d:01:ea:23:ca:e6:f9:3e:52:
98:d2:84:15:77:9c:04:3c:49:3a:cb:4a:0d:fe:dd:
71:bb:cb:2d:7e:05:99:7a:72:8c:76:f5:e8:43:ff:
7d:a6:ec:ff:f7:f1:c0:9e:9d:26:c8:aa:bc:75:31:
b5:be:27:5c:19:9b:0d:64:0d:19:dd:52:ae:f2:dc:
be:87:27:21:04:f8:b0:c6:ff:99:fc:ad:44:2c:34:
6a:16:df:66:4b:90:ff:71:d7:0f:81:ef:b4:89:92:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:22:2D:81:DE:BD:B3:B4:4E:1D:56:12:F8:73:5B:58:16:D3:9B
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/r3EiLYHevbO0Th1WEvhzW1gW05s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:30:53:74:47:7b:98:e0:66:87:58:e7:15:59:15:59:c3:ba:
4f:9e:2f:b6:53:a1:f5:54:f1:10:f9:e7:a5:35:3f:86:6d:6d:
aa:be:91:4f:6f:d7:88:0e:80:01:6b:78:97:1d:65:e1:f3:8c:
63:05:40:2c:19:08:1e:93:20:6b:f9:bd:6a:87:88:ca:d3:05:
0a:08:b0:d5:2d:0c:bb:3e:06:ed:69:57:50:b1:43:24:db:7f:
92:38:40:00:8f:50:88:53:9f:1a:77:83:a4:72:33:78:0a:77:
91:b9:68:a0:8a:10:c3:9c:65:4f:ff:1e:4f:8a:e5:f4:af:49:
9e:0c:9b:ba:d6:30:c8:23:98:63:9e:5a:f1:a2:ae:53:3f:5d:
cf:5c:e4:10:69:1e:b9:19:1b:cb:16:f4:86:35:24:b5:31:05:
43:8f:f4:36:85:24:5a:c3:84:70:e3:19:22:3d:ec:bf:c5:69:
2e:db:87:5f:de:77:9e:51:3b:2c:21:07:bb:a9:f5:5d:78:79:
be:3c:ad:bb:ff:59:40:29:b3:78:5e:9b:fd:31:e0:e5:6b:e0:
e2:b5:f8:c4:d1:f9:39:b6:05:86:f5:c8:b5:1e:a8:5f:ae:b3:
54:3b:c3:4a:48:3e:8f:19:c2:e4:1d:23:8a:87:6a:07:03:f2:
0d:03:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:22:00 2026 by rpki-client