Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3i8cbUHKiByHYWzhNOAmUSh2M0I.roa
File: 3i8cbUHKiByHYWzhNOAmUSh2M0I.roa (raw, json)
Hash identifier: K3FqG8olk1ZeOxrUTHU+SnSZrfFLPT7Y/j/o3TbUX+w=
Subject key identifier: DE:2F:1C:6D:41:CA:88:1C:87:61:6C:E1:34:E0:26:51:28:76:33:42
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A141D7DAA73B591E68A1AF89ED9515DE6C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3i8cbUHKiByHYWzhNOAmUSh2M0I.roa
Signing time: Thu 15 Oct 2026 23:13:47 +0000
ROA not before: Thu 15 Oct 2026 23:13:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 80.64.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:d7:da:a7:3b:59:1e:68:a1:af:89:ed:95:15:de:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 15 23:13:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2f1c6d41ca881c87616ce134e0265128763342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:6a:18:e1:80:6b:3b:4a:8d:bf:41:17:ff:
03:4c:70:17:a7:ed:61:95:40:1e:66:31:4f:3c:e3:
5e:5c:17:0e:8f:c2:e1:e1:90:59:53:25:9a:c6:c2:
1f:18:b0:eb:b0:52:3d:26:26:48:e0:ea:d4:71:23:
7f:8c:3c:15:60:9b:a5:8b:7b:97:99:1e:1e:92:3a:
69:04:07:b0:bc:3a:dd:1b:3f:01:e9:99:1b:93:59:
f4:cb:e0:71:82:ee:e3:df:77:a5:96:34:85:2a:d1:
b9:7b:6c:69:eb:c4:75:0e:79:f5:99:d8:a8:36:77:
4a:4e:12:db:21:6e:3f:3a:1a:5d:88:5a:15:08:23:
ac:cd:5e:84:91:e2:97:ba:13:e9:29:26:c0:cc:e3:
bf:09:3b:20:43:b3:c3:48:e0:28:65:fc:89:05:ab:
68:76:10:5b:a3:55:bf:75:23:0a:39:56:8d:35:8d:
65:1b:60:2c:cf:25:21:03:fc:b9:12:0e:76:5f:02:
2b:a9:35:db:a2:c1:49:28:98:16:0c:d3:09:4d:52:
fe:ea:27:01:25:8d:2d:fb:f8:94:55:49:3a:89:f6:
b9:98:b0:17:28:c2:f9:03:55:97:23:e8:80:b1:60:
2a:de:fd:be:69:d6:bc:a2:c2:77:cc:d8:bf:45:cf:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:1C:6D:41:CA:88:1C:87:61:6C:E1:34:E0:26:51:28:76:33:42
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3i8cbUHKiByHYWzhNOAmUSh2M0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:21:0a:d9:5b:76:08:ac:9f:ec:e3:8e:20:6b:86:d6:11:13:
5f:1c:a0:8b:03:92:4a:7a:f1:d4:e6:05:48:43:16:70:c9:3d:
06:93:34:85:36:b4:ff:c1:2c:6c:0e:56:51:b2:87:94:d5:a6:
3d:d7:34:24:81:58:d1:d5:d0:2d:9e:2e:a8:4c:82:3d:49:c2:
af:ed:98:8c:87:df:0c:2e:27:f6:e7:65:e1:95:15:65:5f:12:
7c:61:76:93:74:8d:93:e3:1c:78:b3:4e:ab:21:7f:57:1a:b6:
76:fb:15:62:7d:b3:07:a4:94:a5:0c:b6:3c:0c:f6:88:a1:6d:
7b:f1:80:88:a9:df:9d:86:4e:c3:ab:d4:80:0b:9e:e4:aa:17:
e1:a7:b5:db:35:a5:8b:85:17:2f:57:a2:f6:77:04:56:92:cd:
5d:72:4f:8a:31:4f:bb:18:cd:f9:4f:e1:03:d9:de:61:9f:c6:
1f:e0:50:5d:43:95:e8:b1:d4:69:40:b3:79:7e:04:de:a0:e8:
5c:74:b1:8c:25:f2:49:b1:2a:88:2f:27:30:89:62:2d:b1:c3:
a2:9a:8b:9e:59:f3:99:ca:47:3b:98:13:d8:c1:7e:7b:65:27:
c3:a3:ea:a1:03:ea:e0:51:52:b4:ca:b6:25:c2:0f:a4:ac:b9:
b0:aa:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:18 2026 by rpki-client