Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/3Xes1MHD_a5bIGduyNKw431Rgic.roa
File: 3Xes1MHD_a5bIGduyNKw431Rgic.roa (raw, json)
Hash identifier: Wc2i+E+YpkqUKLdM48sp0OfQBJ7K/jV9MpkIdBzD9ls=
Subject key identifier: DD:77:AC:D4:C1:C3:FD:AE:5B:20:67:6E:C8:D2:B0:E3:7D:51:82:27
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 019B7CEDDD20A0382958C662B9A5D8E4F99C
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/3Xes1MHD_a5bIGduyNKw431Rgic.roa
Signing time: Fri 02 Jan 2026 04:18:41 +0000
ROA not before: Fri 02 Jan 2026 04:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29266
IP address blocks: 159.20.0.0/21 maxlen: 21
195.85.253.0/24 maxlen: 24
195.137.194.0/23 maxlen: 23
2a03:2180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ed:dd:20:a0:38:29:58:c6:62:b9:a5:d8:e4:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jan 2 04:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd77acd4c1c3fdae5b20676ec8d2b0e37d518227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1c:73:7c:66:41:f9:c1:cf:c6:59:bb:fe:b5:
c3:d3:2f:9c:d6:07:37:d8:b1:3a:67:1c:de:5f:7b:
5a:c9:8c:4a:2c:df:4b:36:55:e9:b1:16:f5:6c:4f:
b1:df:ef:0c:ff:0c:e2:96:c5:16:c6:af:35:fe:e4:
19:54:dc:0a:3a:6d:41:e6:c9:d7:6e:56:97:d9:3a:
34:f6:c0:bd:7e:63:1a:dc:ad:f4:32:d7:89:d2:ba:
eb:b0:37:25:c1:a3:ce:4c:ed:9c:8e:1c:50:aa:9c:
49:25:87:5e:bd:b3:62:10:0a:6b:81:43:e6:81:35:
fd:38:69:21:87:cb:1f:c5:af:11:88:b8:58:f0:31:
4a:31:39:04:44:41:ee:1c:91:90:25:eb:a8:38:fd:
20:92:11:2e:08:26:d8:53:db:d6:40:fb:fd:26:80:
7c:b4:0b:10:7e:7c:53:c6:57:66:e0:bf:15:4e:84:
b4:a1:65:ed:3f:39:11:0a:8f:e8:4b:8c:be:b9:81:
67:0c:ae:4a:89:39:af:6b:4a:a9:26:9f:95:c0:30:
e3:1a:40:6c:58:55:61:f9:94:24:89:24:3a:03:18:
88:38:f4:86:a0:3f:35:b7:37:03:66:15:9b:a0:6c:
76:66:44:04:ee:ae:61:51:9c:c4:8c:25:c1:f8:cc:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:AC:D4:C1:C3:FD:AE:5B:20:67:6E:C8:D2:B0:E3:7D:51:82:27
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/3Xes1MHD_a5bIGduyNKw431Rgic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.20.0.0/21
195.85.253.0/24
195.137.194.0/23
IPv6:
2a03:2180::/32
Signature Algorithm: sha256WithRSAEncryption
0a:3a:88:48:a5:c7:ea:d0:b3:c9:b6:97:e4:89:ec:28:c4:f2:
f6:f2:04:f6:e7:a4:a9:7e:4d:9a:0a:21:e3:74:31:c4:a3:a7:
89:dd:56:4f:46:db:35:00:81:19:8f:12:c1:81:fa:b8:5a:c1:
68:69:69:f2:19:e5:c5:d0:c4:42:eb:00:2d:14:7c:cd:d0:20:
7e:d5:b2:cb:a9:1a:9f:27:9f:9c:3b:ef:3c:a2:9c:10:ae:1a:
bd:12:19:0e:96:82:7a:53:3c:91:74:52:d4:0a:5b:8c:b7:a1:
6f:5e:01:14:68:3f:6e:8e:41:97:56:38:bd:2e:34:99:70:4e:
65:6a:2b:a6:50:08:6d:19:9e:ed:74:9a:89:08:47:12:73:d0:
59:cf:40:df:8a:7f:32:7b:16:7e:a7:93:4a:c9:00:37:4a:f9:
b2:01:73:e9:0a:ba:ed:2c:bf:d0:47:c2:01:b4:fc:4d:9f:5e:
a3:00:df:13:e4:42:ac:4b:c8:4c:54:3c:e3:72:78:63:5d:6c:
b2:7f:bc:77:9d:d7:ab:d5:e1:bc:9e:5e:94:7a:ee:ca:47:c7:
b6:89:1c:85:32:5f:93:66:a6:6b:23:2d:e2:cb:79:fc:4b:72:
1b:80:fa:cd:bf:d7:32:5e:86:ca:90:7c:01:ad:89:cd:fc:df:
aa:9e:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:46:56 2026 by rpki-client