Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/3VtMLjenBkjVF4KJLk56mIMtUJI.roa
File: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (raw, json)
Hash identifier: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=
Subject key identifier: DD:5B:4C:2E:37:A7:06:48:D5:17:82:89:2E:4E:7A:98:83:2D:50:92
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 019F23692C1206120B005DD6183BA2F75FFC
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/3VtMLjenBkjVF4KJLk56mIMtUJI.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 559
IP address blocks: 193.5.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:12:06:12:0b:00:5d:d6:18:3b:a2:f7:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd5b4c2e37a70648d51782892e4e7a98832d5092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:be:af:a3:64:51:74:da:5e:1a:4f:75:b3:
c0:fe:d2:56:14:cf:0d:b3:e4:26:72:56:57:6e:c8:
d1:70:74:71:41:83:f2:45:0d:2e:61:6c:a3:67:4f:
a0:23:2c:cf:20:47:69:5a:25:09:6b:7c:6c:1d:10:
f5:86:98:2c:f6:cd:20:1a:17:87:16:16:cd:00:70:
2e:e4:97:fc:5d:20:8f:c8:34:ec:8b:c9:82:fe:c0:
6e:7d:8a:2b:80:e4:cf:84:f9:67:6b:b5:15:c9:f6:
8d:d6:4c:a1:e6:5a:41:8d:12:fb:79:87:4c:5a:61:
c6:c3:95:c3:f5:5b:15:22:0d:07:fd:b3:c6:e9:3a:
ce:a9:e4:db:e8:d2:94:55:f8:4c:71:88:75:eb:f6:
ae:91:db:c3:3d:3d:c2:44:52:e6:93:23:e5:bb:a2:
1d:09:7a:7b:14:40:5b:48:ab:ef:e2:d1:20:99:1a:
c4:a9:56:9d:02:c3:f0:0a:c8:d6:0c:18:33:6c:7f:
d0:ec:4f:12:f1:8f:b9:d2:e4:00:89:7f:8b:2b:67:
7e:d5:c7:63:e4:97:4e:d9:07:18:bd:b6:e6:98:f2:
b9:4b:12:1b:63:8d:a2:37:cf:0a:6d:38:de:b0:3e:
53:d3:c4:da:d1:80:07:18:8e:ee:3d:02:91:62:86:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5B:4C:2E:37:A7:06:48:D5:17:82:89:2E:4E:7A:98:83:2D:50:92
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/3VtMLjenBkjVF4KJLk56mIMtUJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:20:1a:15:a1:2e:d3:bc:eb:7f:b3:3b:31:5f:f9:67:a3:0b:
b6:93:14:50:b2:6d:6a:de:cd:f1:ae:0b:6f:dd:7c:bc:b9:55:
59:fe:d8:fa:17:a5:82:3a:43:b9:17:bf:31:3f:36:73:95:05:
ba:36:45:a8:ec:7d:c0:9e:7d:76:bf:b3:bf:86:54:22:da:e0:
fb:a7:10:d4:c5:ff:1e:42:4e:9e:fc:4c:d5:48:88:fe:e8:0b:
ff:28:50:7e:0a:03:04:82:63:2c:8c:52:fc:41:23:49:8d:42:
2b:95:75:87:07:c9:16:a6:58:61:30:b6:ce:0b:80:05:1c:5c:
89:5f:46:0b:02:2a:be:df:a3:35:92:76:66:ac:b9:6f:a3:67:
82:0f:dd:ae:d5:94:87:07:14:db:f7:26:10:42:71:db:5a:86:
a6:47:35:58:67:93:c9:9b:e7:2f:8c:a8:61:1b:08:bf:96:56:
eb:83:ab:7a:3e:4a:36:0d:72:81:55:79:3f:3f:45:d1:ad:ea:
53:2b:10:bf:0c:98:55:79:3e:01:73:36:92:a0:5d:dc:d3:e8:
06:42:7c:99:68:c6:5e:c3:1a:0b:b7:7e:ff:b7:4b:2e:5a:6e:
0d:de:b5:12:b8:20:77:0d:88:69:55:06:d1:eb:e1:8c:1f:d1:
38:ec:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:26 2026 by rpki-client