Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3uJHtZ41h8w0RsXboYWslmIIeik.roa
File: 3uJHtZ41h8w0RsXboYWslmIIeik.roa (raw, json)
Hash identifier: aBuJe7PngSDzOFyKaAuEZiyNe3+CdGuzqLquD1pYwFY=
Subject key identifier: DE:E2:47:B5:9E:35:87:CC:34:46:C5:DB:A1:85:AC:96:62:08:7A:29
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C3CE17190E6C32DE69E20E1AA4770B5AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3uJHtZ41h8w0RsXboYWslmIIeik.roa
Signing time: Sun 08 Feb 2026 10:52:13 +0000
ROA not before: Sun 08 Feb 2026 10:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214033
IP address blocks: 185.13.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3c:e1:71:90:e6:c3:2d:e6:9e:20:e1:aa:47:70:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 8 10:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dee247b59e3587cc3446c5dba185ac9662087a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:7f:a7:df:e5:54:c8:f6:11:2d:db:60:c0:
a1:cf:60:dd:77:f7:17:1c:0f:9a:b6:e4:4c:0c:91:
79:22:67:65:ef:1b:cd:b1:ff:13:26:43:df:9f:f4:
9d:f5:46:b5:94:d3:8f:b2:2b:54:e1:2c:78:d7:78:
71:f2:10:75:95:27:43:49:e2:3b:2b:d1:20:bf:50:
a1:53:ca:43:4d:77:87:40:7c:aa:67:c6:a8:c5:56:
b8:35:d3:76:7a:be:ab:9e:66:b3:a4:0b:ea:bf:8f:
f5:20:6f:3b:93:67:fb:ab:8a:af:75:e2:e2:44:f3:
f1:23:93:97:c2:bc:75:b5:d4:86:a1:01:e7:ff:02:
67:db:c7:17:20:2c:a1:12:b4:5e:38:a1:c4:10:a7:
a6:0c:59:f5:62:d3:05:b0:a1:41:9f:f4:a8:cd:39:
43:e3:da:79:47:91:39:be:28:79:b0:11:7f:55:d9:
93:27:7f:d6:7b:28:95:e3:df:22:25:be:bc:1a:e6:
55:20:51:c3:22:94:31:88:c0:4c:a1:1b:75:92:ab:
6f:2f:74:c6:88:90:d0:5b:af:f2:0c:72:00:e1:2e:
b7:4a:84:ea:d1:71:07:67:37:6e:18:21:97:78:5e:
5c:e6:b6:f5:54:70:30:77:0a:40:c8:6c:eb:97:2d:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:47:B5:9E:35:87:CC:34:46:C5:DB:A1:85:AC:96:62:08:7A:29
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3uJHtZ41h8w0RsXboYWslmIIeik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:78:34:e3:a3:2d:80:2d:39:1b:92:a2:30:12:89:4c:23:bf:
d8:94:3b:5c:c4:41:2f:4d:67:ce:a2:e6:66:47:49:1d:16:4e:
be:cf:d1:eb:80:7d:c9:14:03:97:03:ec:2b:37:fd:92:4e:17:
3f:2b:67:62:4f:a4:d8:3f:da:0f:74:2c:5f:14:bd:9a:6d:28:
5b:01:f1:07:b0:2d:d4:f5:e1:0e:dc:4f:02:67:14:3c:3f:89:
b4:e0:2c:4b:12:b8:65:9c:f2:66:b8:fe:16:de:4f:01:b7:79:
2e:df:7d:38:b2:88:03:d2:78:bb:e1:85:57:5b:f6:3e:1e:80:
20:15:3b:62:10:00:5e:fd:4f:01:1c:02:ef:ab:17:85:9a:0e:
97:b5:85:df:18:74:73:95:34:f8:ac:e6:a1:b7:08:17:3c:ec:
d0:a5:5a:77:b0:f7:ce:02:21:b8:74:a0:e7:fe:32:44:96:43:
e6:1f:3b:15:4d:61:ec:ce:64:c2:92:01:d2:26:a3:dc:ed:6e:
5f:31:75:3f:22:6a:82:28:30:77:a3:54:8b:2a:91:ca:8e:a9:
f5:08:81:9f:fe:39:93:1a:2b:ed:6f:af:ab:79:d2:96:6f:33:
d7:47:92:a8:99:7e:0d:50:9a:c7:06:67:a8:a4:33:5f:09:81:
a5:88:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:35 2026 by rpki-client