Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3T1D9lT8RB5wItSoEYrigs3DWQ0.roa
File: 3T1D9lT8RB5wItSoEYrigs3DWQ0.roa (raw, json)
Hash identifier: yRwUlHhJcvWHz48rFS9JEEK1rv+ApKR6JDk0vbz/aQk=
Subject key identifier: DD:3D:43:F6:54:FC:44:1E:70:22:D4:A8:11:8A:E2:82:CD:C3:59:0D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EBD75C362740CF1A09422873C7F332F06
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3T1D9lT8RB5wItSoEYrigs3DWQ0.roa
Signing time: Fri 12 Jun 2026 20:11:12 +0000
ROA not before: Fri 12 Jun 2026 20:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197402
IP address blocks: 78.154.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:75:c3:62:74:0c:f1:a0:94:22:87:3c:7f:33:2f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 12 20:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd3d43f654fc441e7022d4a8118ae282cdc3590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:9b:a2:bd:4b:37:38:0e:87:3e:61:c9:83:
c8:09:89:11:9d:f7:b6:71:47:e3:dc:7a:2a:f0:3e:
fc:ed:93:12:18:05:a6:7a:4c:3a:b5:b6:1d:c1:6f:
d4:f6:f2:f4:f4:c0:b1:da:f9:70:38:1b:bc:05:d4:
38:75:c1:31:05:4d:23:e6:95:aa:16:56:c4:b1:9b:
8d:e6:b9:49:fc:f3:8a:de:1b:cb:42:37:57:2e:52:
8f:ba:62:23:dc:e9:9f:57:5f:ad:76:92:11:48:11:
4d:79:14:b9:98:a5:71:94:b1:98:8e:39:c4:1d:5e:
00:22:f7:6b:2d:ab:ea:20:54:84:76:ce:a7:47:a4:
5e:ca:cc:fd:56:0b:17:dc:17:f7:70:aa:92:a3:46:
a2:d9:d0:36:07:46:00:2c:2a:e9:a8:e1:56:e5:9f:
06:0d:cb:db:ce:92:eb:35:b4:89:78:43:7e:eb:4f:
1c:5a:66:06:11:8b:6e:c6:56:3e:57:82:1c:69:b3:
f6:b8:05:08:d5:ec:13:12:30:ff:b3:5e:4f:2f:c2:
bb:8e:96:99:a5:61:e3:bf:d1:8a:5a:ec:95:5d:fc:
f1:ba:87:36:95:17:34:bb:80:5c:1c:a2:bd:3e:c6:
df:64:e4:75:cb:08:36:13:3d:f4:c2:56:b8:ab:f7:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:43:F6:54:FC:44:1E:70:22:D4:A8:11:8A:E2:82:CD:C3:59:0D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3T1D9lT8RB5wItSoEYrigs3DWQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e4:fc:6f:bf:5d:9c:6b:a3:f2:3d:c5:4d:0a:c8:4c:99:78:
07:11:26:39:4a:c9:48:73:e6:fe:6b:ae:73:cb:da:5b:05:de:
e4:7b:45:6b:68:59:ba:c2:da:5a:ff:bb:82:37:21:e3:27:bf:
4d:47:6f:04:42:44:02:07:5a:75:a3:df:83:4f:24:10:d2:48:
80:9f:d9:7c:fd:e4:7f:8d:36:35:4c:6c:b8:32:96:f4:a8:ac:
cc:55:dc:5a:45:f4:ba:1f:3d:3e:c9:b3:e8:04:45:a5:fe:5f:
e5:5e:5e:c1:cb:20:a9:ea:74:c0:67:52:e0:9e:b9:2f:0c:99:
cb:ad:79:ed:ad:10:c9:33:55:b8:3f:3a:ef:52:70:87:92:f3:
57:c7:7e:73:ae:53:21:d0:94:4b:1b:b5:1d:de:b9:c4:be:bd:
ba:85:66:76:6d:77:f3:2a:07:7a:f0:0b:3b:fb:77:9d:45:26:
f6:82:b0:3d:bd:48:4a:fd:cc:80:af:08:f8:0c:c5:32:a6:3e:
1f:31:d0:0e:6f:3a:19:24:94:77:a2:ec:8c:11:bb:a9:4d:95:
6f:bf:77:be:c5:95:5c:51:cb:3b:b8:c3:e4:43:5d:19:b1:b1:
37:51:a8:0a:5b:8c:f1:23:a6:e6:b3:8c:30:51:84:a4:bd:44:
92:91:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:20:55 2026 by rpki-client