Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/3Yg8ZI_M55yTnDX3fw66DFkuevk.roa
File: 3Yg8ZI_M55yTnDX3fw66DFkuevk.roa (raw, json)
Hash identifier: 9HTIHR/0mEzqSqmXuRSbxyoZq8o5zsBm7Dh1wZjR4mc=
Subject key identifier: DD:88:3C:64:8F:CC:E7:9C:93:9C:35:F7:7F:0E:BA:0C:59:2E:7A:F9
Certificate issuer: /CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Certificate serial: 019FA817B81AE4DB1845B4C5B9D7AB2FC431
Authority key identifier: C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/3Yg8ZI_M55yTnDX3fw66DFkuevk.roa
Signing time: Tue 28 Jul 2026 09:39:14 +0000
ROA not before: Tue 28 Jul 2026 09:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 138.4.0.0/16 maxlen: 16
138.100.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:17:b8:1a:e4:db:18:45:b4:c5:b9:d7:ab:2f:c4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c896cff9c251fecd2edafd31ed468f1a3f57a091
Validity
Not Before: Jul 28 09:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd883c648fcce79c939c35f77f0eba0c592e7af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:6f:23:02:c1:da:53:f6:16:ac:dc:db:36:
e4:25:8b:a1:29:66:d4:ba:f0:87:b8:d5:09:d9:c8:
a6:18:aa:85:cf:ad:fb:69:e0:c1:e6:ba:50:69:ec:
b0:0d:53:03:f6:81:3a:d5:fb:4a:fc:f8:b1:28:3e:
d3:d3:2b:f9:8b:5e:bf:74:6e:7c:36:9d:9b:d6:5a:
1f:e4:1f:79:84:6a:2a:7b:2b:b5:07:29:a4:6e:47:
cf:da:69:75:9e:fe:f9:4d:dd:57:a1:6c:db:04:9c:
fa:d8:94:58:6e:5d:4a:ca:58:d8:b8:9f:52:ca:4c:
8e:e1:58:7d:32:15:e0:09:35:4a:4e:c4:7d:a6:3f:
30:2d:7c:95:37:31:9b:08:d6:ba:97:b6:69:44:63:
8d:29:fd:db:41:12:e0:0f:28:65:87:90:23:c5:21:
02:2a:bc:d4:e8:7b:bc:e4:2e:6c:16:68:cb:45:82:
58:3f:70:26:48:95:ba:fd:84:81:8b:f3:25:4a:f6:
46:b8:f1:bf:b3:ef:c2:66:8f:26:3f:b2:ad:f3:26:
75:01:1a:6c:d2:f0:f4:93:4f:ff:7f:8c:bb:cd:2e:
ec:38:c7:a7:35:03:84:78:4e:18:67:f0:ba:25:27:
00:bd:fc:8c:46:f1:ca:a9:24:b0:6e:24:42:c2:7d:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:3C:64:8F:CC:E7:9C:93:9C:35:F7:7F:0E:BA:0C:59:2E:7A:F9
X509v3 Authority Key Identifier:
keyid:C8:96:CF:F9:C2:51:FE:CD:2E:DA:FD:31:ED:46:8F:1A:3F:57:A0:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJbP-cJR_s0u2v0x7UaPGj9XoJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/3Yg8ZI_M55yTnDX3fw66DFkuevk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fea3cb-6906-4aaa-9877-c97c9cdd9141/1/yJbP-cJR_s0u2v0x7UaPGj9XoJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.4.0.0/16
138.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:a4:cd:6a:27:39:c9:f1:1c:46:0f:7f:fa:a3:73:80:50:32:
d2:3c:a3:48:01:e5:71:4b:66:62:e3:30:9a:d9:19:67:a1:c8:
76:d8:8a:b2:55:cd:83:f9:16:13:a4:a6:e2:11:1f:24:d5:e2:
e7:36:50:44:67:47:29:8f:91:d6:e0:e2:da:a8:83:a0:1d:b6:
6c:c7:8e:9b:d1:6f:ac:0d:4c:f7:1d:ff:39:ab:09:8b:4e:58:
20:04:c1:02:d9:6c:ba:cc:e9:49:2f:71:74:ad:e4:af:79:97:
b9:b5:d6:aa:03:78:6b:35:51:79:7a:3d:de:46:e2:ca:a5:f2:
c4:1c:de:d3:6c:18:e5:d7:47:e2:6d:2a:ec:a6:bf:b1:94:47:
05:80:c0:d5:57:f5:7c:6c:ed:b1:d1:93:56:50:57:8b:10:5a:
c6:07:b3:bb:01:7b:e5:8f:9a:de:35:b7:c2:64:aa:b8:f7:ee:
ce:9d:ea:99:ca:e3:77:22:1c:4c:e2:d4:0b:a8:51:3a:e5:fa:
b4:ff:e2:b4:03:f8:3e:81:55:4e:48:4e:19:ef:25:2e:37:55:
30:11:73:69:e5:68:1b:e1:cb:4f:9b:b8:81:4f:51:c2:be:12:
f4:1c:08:04:ea:0b:1e:3b:ad:09:de:e0:32:e7:9e:4b:00:95:
ad:0a:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:50 2026 by rpki-client