Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/tn3pSILsodE83qD62n9ko4tKfw4.roa
File: tn3pSILsodE83qD62n9ko4tKfw4.roa (raw, json)
Hash identifier: EcQBq4mZ/P31mVUxCqCb9CbySxP5notCVg7BJL4Va/c=
Subject key identifier: B6:7D:E9:48:82:EC:A1:D1:3C:DE:A0:FA:DA:7F:64:A3:8B:4A:7F:0E
Certificate issuer: /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial: 01A04331C252A77B0C8DF4A70A4E071BBA96
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/tn3pSILsodE83qD62n9ko4tKfw4.roa
Signing time: Thu 27 Aug 2026 12:28:49 +0000
ROA not before: Thu 27 Aug 2026 12:28:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218857
IP address blocks: 185.114.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:31:c2:52:a7:7b:0c:8d:f4:a7:0a:4e:07:1b:ba:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Validity
Not Before: Aug 27 12:28:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b67de94882eca1d13cdea0fada7f64a38b4a7f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:c3:9c:c4:4f:70:e6:20:bb:43:35:42:b6:
ab:87:d5:a2:99:d3:16:9d:28:6c:65:c4:8f:a9:e5:
74:ff:3d:60:1d:42:54:80:39:89:eb:39:46:d3:de:
e8:af:46:0f:4b:10:11:df:78:81:83:d4:0f:df:eb:
8b:ec:e3:64:3f:1c:f2:f6:09:b8:5f:0a:7e:1e:07:
2a:f4:27:a7:a3:b0:31:65:9f:7a:ad:63:ed:54:56:
ce:2b:6a:5c:31:b2:24:5d:77:e6:0b:83:1c:d6:9d:
8b:38:2e:d1:55:c2:3b:78:36:64:af:44:13:0f:10:
38:3a:8d:f0:32:ab:19:ad:e2:31:82:59:a7:63:5f:
6b:e9:96:f2:54:38:0b:d0:1f:c2:fa:3a:11:5b:c3:
31:39:c4:26:dd:57:86:a2:36:2f:b6:72:70:17:9e:
92:50:18:20:95:d4:f7:98:b0:80:d9:39:c7:32:2c:
21:c7:de:db:aa:b5:6f:80:0e:66:d2:63:93:41:08:
da:f1:d4:aa:ca:26:71:61:2a:ed:e3:83:63:ff:1b:
05:a3:60:f3:82:5c:0d:e3:5e:15:09:ac:03:a4:09:
88:16:5c:ba:39:8f:89:7e:13:c5:08:28:dd:fd:a7:
98:5b:51:2f:0c:f5:41:a5:3d:af:b3:82:0d:8e:0a:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7D:E9:48:82:EC:A1:D1:3C:DE:A0:FA:DA:7F:64:A3:8B:4A:7F:0E
X509v3 Authority Key Identifier:
keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/tn3pSILsodE83qD62n9ko4tKfw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:95:44:2d:8a:4a:d7:27:a6:c9:f4:a5:3a:c1:1d:b4:4d:f2:
b1:08:87:0b:d9:c3:be:6a:aa:65:03:56:ef:38:9a:10:18:f2:
13:a4:e5:33:47:2e:6a:f4:1a:ce:9c:c6:88:d0:a5:e3:e9:40:
40:03:64:85:1d:89:d4:de:10:ca:a0:b0:f3:ff:4f:74:4f:e8:
1c:72:aa:4f:d1:e5:78:ed:6e:e4:ef:18:50:b5:07:40:c3:d0:
26:ad:bc:a6:87:90:0a:a1:5e:1a:30:75:55:14:be:bd:fd:aa:
3f:00:dc:a6:74:9c:26:bc:ea:b0:65:6a:c2:09:85:78:5d:fc:
87:0f:c9:cd:bf:b0:5a:c4:59:79:89:66:30:3f:25:ca:c5:9f:
28:ff:b2:f7:5d:44:bc:16:4e:88:56:91:1c:02:e5:d7:a3:01:
db:27:c5:2f:43:6a:6e:f7:a4:91:bf:36:38:77:8f:8d:f0:39:
d8:5f:bf:f3:fb:c7:26:ed:3e:13:d0:6f:d8:5c:b7:fb:03:66:
2b:3d:80:98:7f:e1:b2:92:bb:ff:db:e5:43:03:65:78:6e:98:
0b:a8:6d:6b:dd:77:26:fc:d4:91:b4:6b:3a:8d:54:46:ea:b1:
3e:fa:35:64:d3:ab:11:91:e9:16:b1:58:96:b2:dc:97:61:a3:
9a:0b:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:39 2026 by rpki-client