Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa
File: 3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa (raw, json)
Hash identifier: 2IQDnLhNyA34O5bJzqWzi9HQ0yGGc44mUPUXNHhkzZE=
Subject key identifier: DF:FA:AA:E1:29:71:31:CB:F0:AD:BB:DF:74:D0:D8:0D:64:34:AE:05
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01A182FFB96E336F1B87899FA701C59B582B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa
Signing time: Wed 28 Oct 2026 14:52:39 +0000
ROA not before: Wed 28 Oct 2026 14:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 193.135.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:ff:b9:6e:33:6f:1b:87:89:9f:a7:01:c5:9b:58:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Oct 28 14:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dffaaae1297131cbf0adbbdf74d0d80d6434ae05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:f1:79:3f:04:3f:6a:42:ea:f1:66:47:59:
69:c3:e9:b4:22:53:48:81:69:0a:30:ed:ac:7f:f2:
2e:fb:fc:db:24:8c:9d:c1:81:2e:d9:e6:e2:32:b5:
4b:d1:9e:e9:70:8e:0a:1f:a3:10:50:e0:b2:6e:c9:
d6:f2:74:3c:78:3f:2a:d7:90:85:a5:66:9b:45:36:
c8:31:58:57:12:ca:a1:af:95:5d:14:00:91:3d:6b:
9b:ba:d0:66:33:a5:cd:c5:ed:55:77:b2:cc:6e:30:
cb:1c:cd:fb:6f:d0:f6:86:a8:84:ee:08:b3:79:42:
26:7f:c0:40:17:8e:fa:63:be:91:5b:b2:50:76:fc:
89:ab:58:d6:cb:7f:b9:ae:35:fb:18:47:7c:a1:a4:
34:41:f4:0c:bb:2e:f8:4d:a8:71:ce:83:d7:9a:8b:
96:a0:ee:9a:fb:96:09:22:29:f7:70:e4:97:b6:92:
3f:89:1a:c9:7c:13:d9:ba:26:e4:ae:ba:82:a3:20:
1c:4b:77:7a:e7:f4:4a:a6:fb:cf:e6:2b:e0:28:96:
96:1f:87:a3:66:a7:a2:69:2c:9d:e7:c3:19:fa:4e:
ce:82:e8:08:5a:2d:86:c8:73:d2:8d:7f:df:a0:c4:
e1:df:3e:e4:ab:cb:cf:e2:3f:9b:c1:b5:5b:4e:a4:
42:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:AA:E1:29:71:31:CB:F0:AD:BB:DF:74:D0:D8:0D:64:34:AE:05
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/3_qq4SlxMcvwrbvfdNDYDWQ0rgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b6:07:8e:99:88:71:1f:c0:e1:83:0a:6a:d3:c7:a9:97:4c:
cb:34:c4:57:ca:42:a7:8c:28:b9:e6:75:6c:60:25:e2:18:71:
fa:b7:07:37:0d:78:a6:52:21:88:38:78:2d:44:58:5f:1f:c6:
da:83:30:9c:bd:10:44:7b:bf:d5:cc:7f:ba:60:b4:5b:8a:77:
b1:35:68:9b:ed:2e:21:02:7c:80:27:fc:54:a2:e2:c3:b1:a4:
b5:28:35:fc:19:f2:a0:c5:29:e7:14:fa:43:00:cb:21:e4:94:
c8:42:54:d5:ed:78:88:de:75:79:a3:74:83:db:72:7c:2d:72:
7f:18:c4:cb:fa:e7:38:a5:d3:f1:b5:1f:db:d5:33:04:6f:31:
ec:8c:c8:88:70:f1:23:c1:fd:7a:ab:21:34:32:85:2b:f9:6a:
0f:cc:c7:15:a2:8d:19:ec:36:96:e2:94:4c:48:56:10:fe:40:
ea:05:b0:2c:b6:dd:2c:c0:6a:a6:f1:f9:38:e8:c7:6c:a3:45:
5a:b0:ff:31:71:bd:73:a3:47:1e:27:3c:9f:4d:ff:55:3c:59:
34:af:84:06:65:8c:c2:a2:28:72:26:8c:89:02:ce:74:a7:16:
72:e8:7f:b4:e9:92:4a:fc:19:86:0a:d9:85:6f:77:26:2a:ab:
38:b8:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:06:01 2026 by rpki-client