Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/I33pjVnLifAKrDDK5SI7-V47yag.roa
File: I33pjVnLifAKrDDK5SI7-V47yag.roa (raw, json)
Hash identifier: quYdAyXAuVMJx403iknj9JqLtxaoyd+2N7sJUyF6gSY=
Subject key identifier: 23:7D:E9:8D:59:CB:89:F0:0A:AC:30:CA:E5:22:3B:F9:5E:3B:C9:A8
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F9B62D8ED0994697EA230C90087976392
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/I33pjVnLifAKrDDK5SI7-V47yag.roa
Signing time: Sat 25 Jul 2026 22:26:14 +0000
ROA not before: Sat 25 Jul 2026 22:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 201.3.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9b:62:d8:ed:09:94:69:7e:a2:30:c9:00:87:97:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 25 22:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=237de98d59cb89f00aac30cae5223bf95e3bc9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:d1:64:e2:7e:2c:42:ca:b7:81:55:88:eb:
80:cd:29:7d:8e:49:9a:5d:27:11:df:f6:5b:b0:b1:
ad:cb:fb:5e:7b:29:83:ef:7c:29:6b:48:c2:95:84:
e1:37:17:a8:fa:0f:07:cf:1d:a2:88:14:58:67:3d:
30:99:fa:85:41:52:47:f2:32:19:3b:e5:60:ca:1e:
32:fd:10:07:5e:61:21:27:ed:a2:d3:f5:c0:c5:7f:
6d:85:21:31:33:12:c5:7a:07:8b:4d:49:ea:c7:9d:
b8:1e:5f:c3:aa:6e:d8:36:64:0c:05:e7:80:bd:39:
35:0a:93:c0:87:64:45:bc:6a:c0:34:55:ae:b1:f0:
63:4d:ab:e8:ac:d4:11:95:25:69:82:a7:d8:d3:d5:
e5:33:75:99:b6:5d:9f:8f:47:22:23:fc:b3:17:5c:
a8:9c:1e:e9:35:4e:50:9f:81:0d:c6:5c:18:62:1a:
46:18:c0:ac:c4:36:50:9e:e0:d8:03:3a:9f:18:3b:
9f:39:80:c6:07:8f:4a:1a:a1:24:22:d6:e4:f5:37:
46:90:df:e4:28:a8:71:90:19:ec:d1:9a:ac:da:be:
46:1a:c3:5b:60:ff:67:93:1a:75:dd:22:f5:a8:ed:
0a:de:6e:c3:21:e2:ec:cb:08:06:df:c9:bb:1a:9a:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7D:E9:8D:59:CB:89:F0:0A:AC:30:CA:E5:22:3B:F9:5E:3B:C9:A8
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/I33pjVnLifAKrDDK5SI7-V47yag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.238.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:dc:ec:7e:07:f5:51:ad:91:9b:ab:97:a1:ba:ac:57:02:
dc:a6:3b:a3:6d:4d:4a:79:4c:01:36:d2:e2:46:ab:67:6f:cd:
ce:2e:7c:dc:77:a8:39:4d:4a:be:71:5c:4e:e0:93:f5:61:47:
30:59:e6:7d:92:82:a9:81:60:78:32:08:f6:81:e3:fc:2d:fe:
d2:33:96:17:f7:8e:6e:c5:27:6c:7d:a2:1e:e2:e5:ac:70:83:
bc:05:e5:24:ac:d2:92:22:90:29:fa:46:eb:68:cd:e7:06:0b:
2c:38:dd:20:10:24:44:98:07:e6:3c:27:d3:d8:06:3e:f7:03:
9a:7b:55:ad:ca:e3:0f:1d:5c:2e:0e:d1:a4:65:66:b1:dd:ce:
71:d6:f4:96:65:0d:fc:a7:42:d5:91:09:4d:b9:d5:5a:6f:b4:
78:6a:33:e1:94:af:a8:ec:d3:07:bd:b5:58:22:b1:9e:84:3e:
67:0d:28:35:47:0b:7f:40:7a:80:1c:57:30:29:ca:7a:0b:d3:
7e:97:99:89:c2:fb:2b:cd:e7:17:ed:8d:8a:c0:a2:1e:f2:99:
b3:fc:5d:f3:00:96:48:ba:e5:96:ec:86:a4:b0:b0:b2:78:c0:
bc:35:f1:23:38:c6:9c:72:9b:ab:40:c5:f1:51:82:d1:2b:58:
24:f2:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:07:30 2026 by rpki-client