Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/41p3kpRJWL2MgitfF2i70VkmycM.roa
File: 41p3kpRJWL2MgitfF2i70VkmycM.roa (raw, json)
Hash identifier: gLJxBjMA5TyS6tzrLh6xE9DIPjxuKa3Tf9+7RkGDxRs=
Subject key identifier: E3:5A:77:92:94:49:58:BD:8C:82:2B:5F:17:68:BB:D1:59:26:C9:C3
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 01A080BA2EA40C56868AE25E6A36637CB18C
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/41p3kpRJWL2MgitfF2i70VkmycM.roa
Signing time: Tue 08 Sep 2026 11:14:40 +0000
ROA not before: Tue 08 Sep 2026 11:14:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.63.34.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:ba:2e:a4:0c:56:86:8a:e2:5e:6a:36:63:7c:b1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Sep 8 11:14:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35a7792944958bd8c822b5f1768bbd15926c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:b0:da:db:9f:a4:48:05:72:ee:be:0c:fe:
cf:ae:d6:c0:73:aa:c9:a5:96:34:36:3b:de:ac:61:
d6:f7:e8:85:e5:09:3e:5c:52:32:63:53:cc:cc:9f:
05:f5:27:e3:af:54:61:b2:00:7e:2b:88:15:8a:a8:
1c:a0:de:2f:a1:4d:b2:67:f2:60:77:d8:bc:11:bb:
17:00:6d:4f:69:ae:fc:b1:ba:e2:e4:81:70:d0:7c:
09:ce:92:36:9d:9f:6f:5a:ca:2c:b2:69:8f:e3:83:
86:c0:b6:27:de:a0:62:d5:76:43:4d:1c:42:a1:4c:
0d:94:e5:ff:f9:fd:57:9b:97:4d:0d:7a:3e:63:a5:
da:fe:5d:d2:94:55:1c:33:8f:21:da:40:82:e2:31:
57:f6:47:4a:f3:a1:65:75:48:e6:42:ee:0f:85:50:
ed:f6:99:22:3c:2c:95:9f:db:bc:22:c0:88:14:06:
fc:7c:0f:53:b3:bb:24:75:11:9e:e3:85:05:4b:f9:
fb:b9:bf:bb:53:a1:37:08:d6:7a:ba:03:6f:bc:2c:
04:7e:a4:83:0d:8a:49:0b:5d:f9:c4:08:8d:70:c1:
f1:f8:7c:83:f5:0b:67:3f:ca:25:ec:f2:96:69:ec:
77:e8:b3:3c:60:16:ee:f4:23:3a:37:16:06:70:52:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5A:77:92:94:49:58:BD:8C:82:2B:5F:17:68:BB:D1:59:26:C9:C3
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/41p3kpRJWL2MgitfF2i70VkmycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.34.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:b6:9a:d8:a6:a2:85:39:3a:ea:de:7e:64:c2:c4:7f:23:fa:
7b:3a:53:09:e2:61:d4:64:22:26:0e:d3:f3:a8:10:6c:d5:53:
60:3c:c4:75:98:78:39:38:28:3f:8f:8d:df:04:e4:ff:28:00:
22:41:49:09:9a:ff:4d:bd:08:a6:3e:c0:4c:58:24:33:bc:31:
ad:c4:8f:46:cb:58:26:11:f3:c4:f3:27:ed:d3:8e:4f:b2:60:
00:7e:b1:e5:eb:ad:97:81:13:b4:b0:d2:50:31:a5:5b:30:9f:
b8:32:fc:f2:e9:e9:c7:cb:58:f3:4d:fc:9b:0c:c8:c0:6c:b9:
b1:07:28:ee:9a:b4:cd:0f:8b:f7:1e:24:78:43:95:83:ce:33:
79:1c:54:a6:26:b6:ed:99:36:32:1f:c0:82:79:7c:b2:b2:79:
b0:cc:9f:9b:a1:3a:96:08:4a:9a:ed:0e:99:e9:6d:21:62:46:
fe:f2:d6:10:0f:b7:48:d2:45:34:30:d4:51:26:e2:57:b6:a7:
e3:54:33:b6:ce:fa:ff:39:f3:8f:f5:d9:15:ee:f4:b3:c0:8c:
23:9d:59:92:2f:dc:04:0c:27:fb:69:fe:0c:ee:e5:47:24:69:
85:81:ad:c9:71:08:f6:b4:57:0d:d1:78:8c:fe:0a:1e:3b:39:
f1:5d:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:39 2026 by rpki-client