Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa
File: 3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa (raw, json)
Hash identifier: rJHtn8lGExcQ1k9wE7wx+7iji7/5AXFn9zAwDRMm85s=
Subject key identifier: DD:77:3D:5E:43:75:31:EA:80:1E:32:2C:E0:F7:A4:15:10:FE:C4:72
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019FAD7D665C3B12022A03B525091BE128B5
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa
Signing time: Wed 29 Jul 2026 10:48:24 +0000
ROA not before: Wed 29 Jul 2026 10:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199239
IP address blocks: 91.92.115.0/24 maxlen: 24
109.68.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:7d:66:5c:3b:12:02:2a:03:b5:25:09:1b:e1:28:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Jul 29 10:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd773d5e437531ea801e322ce0f7a41510fec472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:fb:67:54:f3:94:ce:d0:45:16:75:c4:69:
be:9d:bf:2e:27:b3:f2:3d:f6:63:53:58:9f:44:a7:
e3:5b:c1:b7:8a:6b:30:0e:02:7d:19:33:85:6d:f1:
49:f3:11:fa:4a:f5:33:3b:88:c6:84:5f:0b:fc:96:
fa:3f:8a:f3:e5:e6:cb:d2:f7:9c:c0:c4:c4:5f:d0:
99:1c:1c:a7:71:fa:bf:bd:58:0e:d1:39:3f:bc:fc:
6b:42:02:24:33:c3:6d:b3:e5:09:ff:89:40:45:cb:
a2:b5:e1:d1:58:55:b4:3e:f5:7f:cd:8b:5e:37:25:
55:88:02:02:db:a2:c2:49:96:46:cd:78:16:26:86:
ed:5f:5d:86:5d:ef:cd:e7:cc:67:eb:55:80:6a:4d:
c1:c3:c7:52:4a:3a:12:f5:2d:3a:df:18:ef:6d:99:
f1:90:fe:38:32:3d:68:c6:16:46:aa:87:60:e0:97:
ac:69:ea:28:14:31:ad:f9:d0:7e:49:28:f0:14:ac:
34:65:e8:a8:bb:26:a8:bc:95:28:08:3c:40:02:a5:
9a:63:a9:11:a3:29:73:a5:db:90:6d:3e:2b:6f:a9:
82:e1:93:32:fa:96:b0:ec:67:dd:1c:f0:ca:d7:09:
b4:b5:5b:76:9c:85:ea:07:38:04:4b:7a:c5:89:8e:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:3D:5E:43:75:31:EA:80:1E:32:2C:E0:F7:A4:15:10:FE:C4:72
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/3Xc9XkN1MeqAHjIs4PekFRD-xHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
109.68.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3c:94:2e:5d:f5:64:b4:1d:9c:e5:e5:82:bf:8d:51:19:e3:
90:b0:54:7e:62:e1:e6:f0:c4:de:a0:c8:fd:2f:bf:40:f2:a2:
81:b3:a1:36:b3:f2:ff:d9:4f:ba:07:56:9f:a7:b4:56:56:39:
50:90:45:2e:76:47:0c:ae:5e:b6:4c:0f:75:18:2c:73:27:65:
b9:a6:9a:9f:61:b7:e0:e5:5f:4d:c2:34:01:3d:9b:55:15:2b:
78:0d:d4:ae:ce:5b:e4:29:26:b8:ae:3b:51:85:bd:ed:a2:22:
e1:0b:d4:28:ce:96:75:f1:c9:a5:a9:dd:6f:b7:b0:c7:30:c9:
35:36:25:9d:5b:3d:b2:4f:bb:ec:7e:f1:91:41:b3:45:1f:2a:
59:5f:a9:da:49:98:de:55:74:d5:90:ed:2b:ce:de:66:9a:09:
ba:47:da:70:bf:25:a3:a1:19:ea:72:ee:7c:3b:71:91:11:02:
11:4d:53:fc:e8:ac:96:ac:ed:1d:98:ca:04:4e:7a:2b:17:ad:
15:cf:71:93:cb:67:6d:49:0e:3b:12:84:61:b6:75:27:e0:db:
6f:30:de:57:47:d7:55:32:ea:13:98:43:4d:5a:60:51:eb:c0:
a6:b9:3d:f1:08:32:0e:a1:38:9b:6a:2e:f3:c4:c5:f5:67:29:
4a:32:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:15:11 2026 by rpki-client