Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/3Mvxq4kxnuxzMfr_kjqV4cMRikI.roa
File: 3Mvxq4kxnuxzMfr_kjqV4cMRikI.roa (raw, json)
Hash identifier: +igtsUUfLazqhri/aezA6y3ptLk502TgUX/WiMXl03o=
Subject key identifier: DC:CB:F1:AB:89:31:9E:EC:73:31:FA:FF:92:3A:95:E1:C3:11:8A:42
Certificate issuer: /CN=c412d5fa57006a38d591c25773a0e1f85239ac03
Certificate serial: 01A11012B1E568305B54878675F5D8B10A93
Authority key identifier: C4:12:D5:FA:57:00:6A:38:D5:91:C2:57:73:A0:E1:F8:52:39:AC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/3Mvxq4kxnuxzMfr_kjqV4cMRikI.roa
Signing time: Tue 06 Oct 2026 07:17:03 +0000
ROA not before: Tue 06 Oct 2026 07:17:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60706
IP address blocks: 185.26.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:12:b1:e5:68:30:5b:54:87:86:75:f5:d8:b1:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412d5fa57006a38d591c25773a0e1f85239ac03
Validity
Not Before: Oct 6 07:17:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccbf1ab89319eec7331faff923a95e1c3118a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:8a:99:e8:e4:6e:af:b4:60:29:40:7e:cb:
4f:c1:f8:27:5b:0f:56:ef:e7:2b:7c:9b:e1:49:af:
0a:90:a6:bd:19:e8:19:99:3d:34:48:8f:77:77:ca:
4e:e8:40:1c:3e:b5:9b:b9:04:a4:26:35:b8:4a:11:
43:29:6d:2b:cb:43:df:a4:54:ca:a6:03:f1:7d:e1:
ce:bc:7c:68:2b:26:8e:34:fa:5b:02:5b:42:56:dd:
15:b6:7d:49:3f:4f:28:3a:dd:42:0e:05:40:57:66:
df:53:2a:21:8b:c7:a9:de:18:81:aa:d8:0a:54:61:
4e:04:c5:3d:2d:21:bb:85:d0:38:34:ee:f4:54:21:
94:13:e1:d5:b1:29:64:01:b3:66:6d:eb:1b:d5:55:
5a:b5:07:7d:05:50:a3:d4:38:0d:61:5e:95:af:95:
31:6e:06:ca:6b:0e:24:41:fa:b6:43:db:37:5d:97:
05:0f:8d:f6:94:80:60:bb:42:63:a9:2c:93:17:5e:
36:d5:ea:86:52:cc:7e:0e:aa:05:1b:57:5d:66:d8:
60:ae:a5:3b:92:5f:8c:02:ff:c3:a5:b9:31:00:3c:
31:74:0e:d7:05:7e:df:df:2b:9a:74:83:49:ee:8e:
80:82:5f:da:b4:03:46:b6:a8:e8:34:a1:3f:42:aa:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:F1:AB:89:31:9E:EC:73:31:FA:FF:92:3A:95:E1:C3:11:8A:42
X509v3 Authority Key Identifier:
keyid:C4:12:D5:FA:57:00:6A:38:D5:91:C2:57:73:A0:E1:F8:52:39:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBLV-lcAajjVkcJXc6Dh-FI5rAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/3Mvxq4kxnuxzMfr_kjqV4cMRikI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/955ac7-6de3-46b7-9534-9af66b1a50b6/1/xBLV-lcAajjVkcJXc6Dh-FI5rAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.196.0/23
Signature Algorithm: sha256WithRSAEncryption
07:44:14:10:80:41:47:1d:02:a5:1c:82:fe:76:81:0a:b3:42:
1d:8e:1c:4b:64:b1:ff:d0:b7:68:3c:be:b4:0e:23:9c:1a:db:
15:3e:82:17:e9:c7:9c:75:d3:dc:7a:45:0e:1a:46:59:88:4c:
20:dc:dc:86:9c:d3:c6:49:45:ce:4f:b9:29:14:36:11:10:d9:
c2:5f:95:cb:85:d4:4d:1c:b0:03:8d:83:4f:9c:9b:44:5e:bc:
58:9b:a5:0c:bf:1d:3c:32:de:da:1b:e5:d6:da:f6:cc:b7:f0:
15:a0:4b:07:5d:70:45:95:c3:8d:56:ff:92:82:59:f6:d0:b7:
41:18:4a:ed:b0:a6:b3:d6:99:5f:ff:28:5a:9f:f8:0c:24:46:
be:63:21:eb:6c:3b:0e:e4:9c:81:0c:9f:af:66:b7:0e:3b:34:
74:dd:16:5f:16:f1:1e:34:f2:c8:05:43:d4:f9:e2:b5:ee:bb:
e5:8a:c3:79:0a:80:7b:f9:a8:42:3e:b3:67:ce:9b:b4:b5:df:
00:53:db:8f:15:d6:28:b7:dd:6c:a4:3c:63:7a:e9:35:16:72:
bc:8e:0d:03:8c:58:23:90:95:e9:b6:47:32:28:e4:0d:5f:bf:
e7:dd:3d:35:ee:9c:57:24:3a:ae:4d:4c:79:7b:56:bd:ed:14:
b0:5e:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:32:10 2026 by rpki-client