Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/3VnpyEk02FjL-0GsgYxhgZUyBcA.roa
File: 3VnpyEk02FjL-0GsgYxhgZUyBcA.roa (raw, json)
Hash identifier: wOplWLpk4FnDyNWkayArNNbeSTOxVN/q/yUMTT90ZAw=
Subject key identifier: DD:59:E9:C8:49:34:D8:58:CB:FB:41:AC:81:8C:61:81:95:32:05:C0
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A13F03D96E6814FC1E34AC14A838571273
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/3VnpyEk02FjL-0GsgYxhgZUyBcA.roa
Signing time: Thu 15 Oct 2026 10:02:59 +0000
ROA not before: Thu 15 Oct 2026 10:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29076
IP address blocks: 185.253.2.0/24 maxlen: 24
193.193.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:03:d9:6e:68:14:fc:1e:34:ac:14:a8:38:57:12:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Oct 15 10:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd59e9c84934d858cbfb41ac818c6181953205c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:54:64:74:aa:47:2c:9f:cf:98:7f:de:e8:
90:89:fe:d6:13:2f:da:e1:7a:01:ae:17:dc:cf:52:
1b:fc:3f:ef:5a:37:6d:25:0b:0b:6d:fb:17:56:0d:
8e:1e:e8:23:59:dc:75:fa:f1:be:50:fc:2c:ea:13:
fb:2d:66:eb:d2:0c:01:1b:21:09:e6:bd:85:1c:0b:
77:7a:b7:4c:43:4b:cb:48:26:28:07:a0:fe:6d:fb:
30:67:e8:a6:15:f9:c0:48:fd:6a:5b:29:c0:37:46:
88:60:52:68:6c:4f:eb:5c:17:14:3d:00:56:8b:d5:
63:e2:de:d4:6f:04:37:96:fc:2d:80:95:0e:45:b9:
e7:20:d1:7c:12:aa:ac:7b:18:ac:8c:3c:79:8e:d8:
fa:6a:1c:71:e5:cb:ef:06:2c:f2:d4:4e:32:24:dd:
fd:bf:4b:3c:8e:44:d1:bf:38:54:ce:ba:58:0f:20:
72:04:4e:02:31:b1:ad:db:26:49:1e:ec:31:ac:02:
67:bb:5d:66:d6:23:df:0a:fd:9d:10:57:fe:51:c7:
36:39:29:b2:6c:bf:8f:fa:c5:e2:a9:02:c4:ca:ed:
cf:c6:2e:9b:e4:a9:15:1c:f9:e1:12:e5:9f:c1:66:
74:8e:33:c5:94:d5:d6:2f:fe:e8:20:06:e4:ff:f7:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:E9:C8:49:34:D8:58:CB:FB:41:AC:81:8C:61:81:95:32:05:C0
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/3VnpyEk02FjL-0GsgYxhgZUyBcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.2.0/24
193.193.160.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c4:31:a1:b1:66:ce:76:c2:fe:78:4c:f1:b4:c2:66:0c:9a:
e2:c7:4f:af:05:23:05:f9:f7:5e:79:72:d1:6a:47:20:c6:d1:
e9:2b:c0:c6:f1:e5:fe:5b:19:61:41:77:5f:28:b4:cd:d9:24:
90:c4:6e:a9:d4:23:e4:c7:69:0d:a7:43:93:3f:c9:6f:80:57:
ce:62:7e:08:99:8d:cf:e2:35:14:08:9a:9a:94:5f:0f:e6:55:
a5:da:80:00:a2:20:4f:35:fb:3a:7b:f9:a0:d5:61:1c:b3:6b:
aa:ca:3d:35:0a:e8:dd:13:ca:62:40:1c:1b:39:b1:ff:47:2b:
a6:28:66:c5:5d:eb:a7:90:bd:1f:5e:0f:80:7f:c3:0c:c1:bb:
5d:ed:37:a2:f8:a0:5e:da:3a:01:4e:00:44:53:de:d9:e6:64:
d4:a2:7f:1c:00:8d:e1:6a:5e:45:20:0e:8d:11:fa:24:8e:4a:
4b:df:0f:9b:2c:ce:7a:3d:0f:10:32:15:c9:b9:3c:eb:eb:8d:
20:fe:ca:b0:f0:a8:ee:8e:4b:8d:89:25:59:ea:36:34:cd:35:
29:f5:ec:ec:c4:7a:6e:3e:68:f2:57:56:f5:a1:c4:25:48:b8:
66:07:30:97:a4:57:4b:e6:cb:f2:0c:0c:a9:4f:53:59:e6:7f:
8c:f0:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:38 2026 by rpki-client