Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dplSV16graOip3fgUqKXfH_rscU.roa
File: dplSV16graOip3fgUqKXfH_rscU.roa (raw, json)
Hash identifier: V3ZWCNwTzSeDPLB0T22nMJp5gTMwi3855VzYgGy1LNQ=
Subject key identifier: 76:99:52:57:5E:A0:AD:A3:A2:A7:77:E0:52:A2:97:7C:7F:EB:B1:C5
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A5C331DBFF2B9B15D089D60BBFE78549
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dplSV16graOip3fgUqKXfH_rscU.roa
Signing time: Tue 15 Sep 2026 15:50:27 +0000
ROA not before: Tue 15 Sep 2026 15:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 109.66.20.0/23 maxlen: 24
109.66.40.0/23 maxlen: 24
109.66.60.0/24 maxlen: 24
109.66.96.0/23 maxlen: 24
109.66.110.0/23 maxlen: 24
109.66.152.0/23 maxlen: 24
109.66.204.0/23 maxlen: 24
109.66.220.0/23 maxlen: 24
109.66.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:c3:31:db:ff:2b:9b:15:d0:89:d6:0b:bf:e7:85:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 15:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=769952575ea0ada3a2a777e052a2977c7febb1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:6c:89:91:39:78:2f:79:4f:e8:55:6b:07:
67:91:e9:cb:be:22:d3:af:9c:00:1a:38:fe:84:e8:
47:20:7c:cf:ec:04:ed:ea:eb:c8:cf:f3:97:e7:3a:
9c:bb:0b:3c:ac:74:71:af:28:3d:d6:5c:69:10:a8:
d4:73:4a:3e:c4:1c:7d:06:d0:d5:e8:21:20:a2:55:
83:0b:11:66:4c:db:67:3b:2f:3e:7f:a3:86:31:58:
fc:9b:1d:2c:89:6a:2c:d1:92:99:63:20:d4:d7:d6:
e4:ca:a1:5a:35:2b:28:42:8c:28:99:6f:be:2e:2b:
24:1e:8d:9e:73:9c:da:0e:39:c6:0a:d1:e0:1b:fd:
9a:ae:f5:1b:30:42:f0:51:b3:09:f8:e6:8e:c3:04:
9d:91:ba:72:ed:33:d8:16:8f:af:c5:f5:2b:0b:ca:
a0:03:e4:e7:40:00:3d:b2:de:b5:87:3e:67:0c:65:
00:cb:1a:ee:b1:e4:d5:70:8c:b5:15:98:1b:16:05:
d1:41:24:cd:1d:78:9d:e4:ca:28:cd:b8:b9:e0:2a:
a3:02:9b:10:4a:c2:88:86:aa:04:80:8d:56:b0:cc:
cd:9b:bc:b2:90:42:bb:1c:f1:89:51:7c:12:f7:c9:
cf:dc:2e:02:a9:e2:b5:e8:47:81:64:1c:0c:85:e5:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:52:57:5E:A0:AD:A3:A2:A7:77:E0:52:A2:97:7C:7F:EB:B1:C5
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/dplSV16graOip3fgUqKXfH_rscU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.20.0/23
109.66.40.0/23
109.66.60.0/24
109.66.96.0/23
109.66.110.0/23
109.66.152.0/23
109.66.204.0/23
109.66.220.0/23
109.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ee:71:7d:31:c3:e9:2e:c2:98:27:9e:6e:07:eb:58:99:2d:
87:c0:bb:0f:51:dc:cf:df:ac:68:06:ba:e4:ac:41:47:f1:c5:
79:f4:c3:f7:c9:34:a0:b5:1b:84:bd:84:f1:3d:ef:10:0e:61:
64:82:ea:61:4f:be:7e:5d:bb:5b:91:b0:07:50:65:fc:90:c6:
e2:4e:af:e6:44:f2:e3:13:df:16:43:f4:23:67:9d:85:cc:d9:
b5:37:4d:03:0d:bf:46:e3:ce:b4:8d:44:51:30:09:30:05:53:
4e:13:8f:8d:27:7f:bf:67:87:fa:0f:5f:d2:2b:93:2b:3a:3f:
3b:05:5c:03:df:85:c1:bf:2b:2d:96:6c:5f:38:c1:4d:0e:ff:
b9:cd:7b:73:a8:22:a0:f9:8c:43:09:7c:05:09:84:46:54:28:
2a:32:8a:68:f8:cb:c3:21:7b:87:8c:20:37:29:56:eb:b1:12:
a7:5b:c4:63:bd:85:da:37:cc:5e:72:37:30:35:90:00:0c:c5:
4f:09:1d:5f:09:c3:15:c6:c4:b0:01:9f:79:38:78:60:cb:fa:
44:42:db:42:a8:87:79:23:be:35:73:52:2d:40:1f:9c:99:54:
01:80:9d:ef:7d:e2:37:79:66:aa:93:dc:0f:2b:b2:78:e2:18:
3b:de:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:37:30 2026 by rpki-client