Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3h4WTidFEK5MwQqcWECC_fEqbxw.roa
File: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (raw, json)
Hash identifier: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=
Subject key identifier: DE:1E:16:4E:27:45:10:AE:4C:C1:0A:9C:58:40:82:FD:F1:2A:6F:1C
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A0FB3BDCC53A05418803AB94CCC4E1339A
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3h4WTidFEK5MwQqcWECC_fEqbxw.roa
Signing time: Fri 02 Oct 2026 06:09:59 +0000
ROA not before: Fri 02 Oct 2026 06:09:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:3b:dc:c5:3a:05:41:88:03:ab:94:cc:c4:e1:33:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 2 06:09:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de1e164e274510ae4cc10a9c584082fdf12a6f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:dd:ee:29:3f:1f:24:c4:76:f9:74:5f:d3:
da:51:3b:bd:94:57:92:09:72:3b:d3:ea:91:0c:ec:
0f:dc:d8:5d:e1:1a:46:80:4d:dd:49:30:97:8f:c5:
f6:5d:2b:b9:5e:18:b0:c0:21:bf:e4:a6:a4:38:aa:
4f:1a:8e:e6:1c:8f:84:fb:0d:0a:7f:f9:ca:9d:8b:
9c:45:43:4f:d1:3c:55:df:bc:ac:84:d4:2e:3e:44:
6a:01:10:ac:8a:6e:27:ef:ff:e9:28:53:41:36:2a:
58:cd:db:a7:24:4d:ab:69:bd:c6:04:44:99:cd:ac:
8e:68:17:20:67:a6:52:97:60:c3:22:67:ac:8a:14:
b0:5b:49:22:43:e9:be:14:19:4a:42:55:20:cd:87:
5d:ef:a9:19:ca:1b:6d:5c:5f:26:ae:32:93:9e:39:
a3:9c:1c:11:e9:58:8b:ae:ec:5f:91:41:a0:19:c6:
71:4f:b8:0b:dc:1f:6c:a0:7c:6e:1f:91:dc:ab:b6:
b1:d6:1b:07:92:c2:aa:9b:71:cd:93:8f:a0:75:5c:
7a:4b:b8:81:10:83:31:87:87:0d:e7:3c:96:74:de:
d1:b3:be:6f:4d:81:7c:75:ca:15:57:b0:cb:3b:7d:
38:e3:5c:0a:ef:ac:17:f5:da:bb:bd:ff:36:b1:1e:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:16:4E:27:45:10:AE:4C:C1:0A:9C:58:40:82:FD:F1:2A:6F:1C
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/3h4WTidFEK5MwQqcWECC_fEqbxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9c:1a:ba:e7:64:c8:76:aa:64:9b:8c:83:33:4f:ed:bb:09:
64:10:e9:b0:51:81:a0:8a:eb:d4:62:64:0d:fe:56:1b:a0:f7:
6b:9e:ea:be:90:b9:fa:fe:10:47:1f:9e:a1:85:98:d6:38:19:
e2:03:a9:39:63:d8:ea:22:d6:42:34:45:71:2f:ac:2e:e1:94:
4e:ba:1d:5e:bf:54:4d:9d:72:e0:ad:ba:2e:05:9e:83:1a:6d:
52:10:cd:45:74:57:05:18:55:28:56:bf:57:cf:4e:6d:35:7d:
66:f6:d5:4b:64:29:e4:8b:e6:9e:f5:37:bb:24:aa:e5:be:28:
e0:10:53:6d:0e:d4:20:1b:7e:4b:a4:a4:6c:7c:45:58:d0:63:
cc:8f:0a:3a:36:80:54:2a:33:c7:3a:8c:68:c2:5c:7e:f6:1c:
b8:14:6b:12:b7:49:7b:5d:bc:51:a8:94:40:24:d0:aa:ad:8f:
94:0a:e7:b4:b3:ca:54:b9:b6:b9:58:09:84:8a:49:a9:89:27:
cc:64:91:10:c9:ea:3e:94:1e:6a:33:6c:c1:34:7a:a5:1a:38:
5a:71:65:7f:f4:47:e3:1c:63:be:fc:fc:c5:22:9c:17:fd:3a:
ab:75:8c:25:b7:3a:2e:68:f2:e2:ba:2e:fb:dd:6d:14:62:d2:
43:81:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:25:27 2026 by rpki-client