Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/3hoyMf4bitt7jwJRtcUeClUis-4.roa
File: 3hoyMf4bitt7jwJRtcUeClUis-4.roa (raw, json)
Hash identifier: 3Q2574IoV1+PXA126yc1/pkJvBgiZb7epxUK3jkb8bg=
Subject key identifier: DE:1A:32:31:FE:1B:8A:DB:7B:8F:02:51:B5:C5:1E:0A:55:22:B3:EE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019FF1F3BFBF494CE077EE65CECBAB89A811
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/3hoyMf4bitt7jwJRtcUeClUis-4.roa
Signing time: Tue 11 Aug 2026 17:51:51 +0000
ROA not before: Tue 11 Aug 2026 17:51:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218998
IP address blocks: 195.123.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:f3:bf:bf:49:4c:e0:77:ee:65:ce:cb:ab:89:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Aug 11 17:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de1a3231fe1b8adb7b8f0251b5c51e0a5522b3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:5b:da:3e:a6:e9:4c:29:a8:ec:f1:4c:1f:
2e:3b:ed:2a:70:88:00:6e:91:b4:ab:c2:98:92:d1:
cb:36:d0:f1:a8:b0:6a:ec:7a:30:5e:55:75:be:37:
1a:64:7a:c9:b6:d6:91:05:6b:95:d9:fb:1c:bd:4b:
bf:20:cd:73:40:74:a0:a4:ba:89:ba:96:7c:b5:45:
77:d3:1c:90:2a:36:ad:fe:ea:3c:3f:5b:38:de:74:
9e:da:4a:8f:3a:26:03:80:ef:6b:d4:06:4d:75:1c:
3b:d6:eb:67:36:87:c8:f7:f1:6d:fc:e3:41:f0:5b:
ab:d1:7e:98:cf:40:80:25:c2:6b:43:d0:74:33:d2:
2c:3f:93:9f:f9:ad:67:ab:10:ca:fd:d4:5c:bd:fd:
c0:5d:14:6c:5f:4f:c3:9a:05:cb:00:db:75:2e:53:
13:05:f8:08:bc:50:be:fd:8a:1c:5b:e0:ac:d3:75:
f9:75:ab:02:b0:e6:76:c6:9b:bb:4e:56:57:f5:85:
a8:04:da:56:34:93:28:0f:ac:b5:6c:f8:eb:93:d5:
d6:8a:43:ed:1d:c0:17:95:db:b0:1d:fe:99:c0:09:
d2:c1:54:59:a3:3c:dc:2a:e2:3b:2d:ea:aa:84:79:
2c:f1:33:5c:cc:fa:f4:86:69:14:50:55:58:24:19:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:32:31:FE:1B:8A:DB:7B:8F:02:51:B5:C5:1E:0A:55:22:B3:EE
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/3hoyMf4bitt7jwJRtcUeClUis-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:73:da:44:7f:a3:47:15:57:66:5d:ed:92:74:d9:ef:58:3c:
d0:3f:05:a0:0a:32:fb:16:88:42:09:93:d1:49:a8:40:b9:d4:
72:57:e1:6b:6d:e8:29:75:f3:f1:b0:98:52:ec:f0:bd:c0:00:
93:1a:f9:ad:fc:2a:28:3f:9b:1a:63:de:5a:47:fe:87:fe:9e:
34:4d:77:b8:1c:c2:ef:85:14:3a:df:f2:a5:47:95:00:3d:50:
4a:db:1d:eb:fc:1f:6c:3b:6e:4c:45:c3:ed:77:6e:cc:ab:14:
cc:43:e5:60:42:be:41:d8:82:68:27:dc:e9:35:ac:a5:87:d4:
b5:bb:5b:83:ea:5d:c1:dd:13:4f:66:ff:ca:a2:f5:be:92:11:
b1:c5:fd:dc:08:6b:7d:a4:dd:bc:62:f8:c9:b1:f1:26:37:1f:
7b:d0:a9:2a:7d:79:b8:8b:f3:3e:23:d7:d7:5b:1a:48:8e:a8:
e6:da:e8:42:a8:29:5f:b2:95:a7:e2:16:66:bc:00:f5:1d:4d:
7e:90:ce:95:cc:70:7e:4b:fa:d1:4b:9e:e2:c8:f8:55:8b:7d:
17:23:11:1a:26:97:0c:5b:6f:de:fa:77:a9:df:8a:9b:6b:86:
1b:33:a7:01:c2:4f:42:c8:1e:03:6e:24:d3:b2:db:68:a2:be:
c4:5c:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:25 2026 by rpki-client