Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/43jD70nxjDt8CvUnP6f_8Hr0imA.roa
File: 43jD70nxjDt8CvUnP6f_8Hr0imA.roa (raw, json)
Hash identifier: JQkmSJMn+rtoFqaD2I0l0rJUF6o8ZlOkdptsnrhMvv4=
Subject key identifier: E3:78:C3:EF:49:F1:8C:3B:7C:0A:F5:27:3F:A7:FF:F0:7A:F4:8A:60
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A15991422825A323FBD1004C07E2FE1EF8
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/43jD70nxjDt8CvUnP6f_8Hr0imA.roa
Signing time: Tue 20 Oct 2026 13:47:34 +0000
ROA not before: Tue 20 Oct 2026 13:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203532
IP address blocks: 64.39.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:91:42:28:25:a3:23:fb:d1:00:4c:07:e2:fe:1e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 20 13:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e378c3ef49f18c3b7c0af5273fa7fff07af48a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:4e:2b:c6:9c:a1:04:f8:94:97:fd:94:aa:
4a:70:09:ab:65:3b:31:02:0b:92:63:00:a4:0d:d0:
e5:1c:4c:f3:45:23:f3:ae:0f:50:92:d6:be:79:08:
9f:12:15:6b:51:76:8a:ca:7b:8c:d4:38:d1:ac:29:
52:4a:e7:fa:d1:f8:73:88:3c:c9:5d:f4:4b:07:2b:
86:9d:2a:ac:fb:e6:78:39:4f:a7:11:aa:b6:51:76:
01:50:78:e2:96:6c:5c:e3:3c:0a:2a:9e:c5:b5:f0:
49:cd:4b:49:bb:fb:ae:c2:b9:b0:06:cb:e6:3c:39:
9f:9b:5b:6e:aa:1b:26:44:46:8a:d0:04:55:12:c8:
fb:c5:9e:41:73:72:7e:e4:c8:c7:57:81:08:0f:7a:
9b:71:29:b7:4f:e3:88:77:c6:5b:7f:eb:6f:dc:7c:
f0:6e:b4:d1:d1:5b:19:1f:48:b1:5b:cb:48:fa:6e:
8a:8e:dc:62:89:5a:1e:0f:80:11:d1:b5:44:02:49:
55:40:09:c4:6e:91:d6:d9:b1:a3:89:ce:ce:5c:58:
b4:12:08:b0:58:f1:93:db:64:2c:91:f2:77:67:6f:
70:2d:bb:89:db:65:1f:44:e1:fe:f1:3f:e2:cb:b5:
08:40:ea:bd:15:78:e0:9e:5b:24:2a:4e:ee:0f:79:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:C3:EF:49:F1:8C:3B:7C:0A:F5:27:3F:A7:FF:F0:7A:F4:8A:60
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/43jD70nxjDt8CvUnP6f_8Hr0imA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.39.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:05:6c:59:3d:4f:18:38:77:dd:e3:de:ce:6e:66:b5:7c:25:
06:b3:ee:09:72:f3:0d:41:6b:8a:f8:17:20:cc:54:39:43:f5:
0b:53:37:06:62:34:4e:8f:4b:4c:b1:20:c9:3d:40:fc:62:31:
4c:3d:f9:07:ad:c1:12:e3:21:8d:ae:f3:c8:ab:cd:10:23:0c:
00:86:4d:27:25:71:f5:3e:6d:a2:90:50:bd:70:4d:60:ab:61:
f2:e3:cc:5e:94:2e:92:0d:b5:20:a1:2f:6d:d8:73:e6:69:0f:
fc:52:1b:ef:81:2d:98:50:c1:c3:2b:01:03:88:3e:a2:89:5f:
ef:41:4e:2c:bb:b8:4c:9b:82:fe:58:fa:b8:d4:2d:e4:c0:40:
8f:db:5a:f6:f6:fe:00:50:ec:82:a2:f1:c7:4b:b9:3a:db:6a:
62:e3:4a:15:fc:f2:1f:8e:a8:f2:17:eb:00:18:c4:86:b7:ee:
c5:5c:22:f7:fc:90:ff:2e:4b:20:dd:16:1a:7c:68:12:27:d2:
b3:77:19:4e:3b:a1:5a:5c:db:05:bc:35:94:a8:44:f5:5e:0d:
af:72:f2:7b:f9:55:ae:df:33:48:fe:58:54:cb:eb:e6:35:0f:
a8:5d:83:3f:ff:60:40:59:54:b1:6b:c0:40:ad:22:59:21:67:
db:87:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:16:32 2026 by rpki-client