Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa
File: d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa (raw, json)
Hash identifier: L2bYkRPxIfdroO/ek/GYaqfRDly3hzf3FYx29kpKNk0=
Subject key identifier: 77:72:4C:1C:6A:79:C1:8A:03:B3:D2:A7:1A:22:12:2A:A1:B3:FD:7C
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 019B7E37B04A6B5C57BF91C722CEFB9E6312
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa
Signing time: Fri 02 Jan 2026 10:18:57 +0000
ROA not before: Fri 02 Jan 2026 10:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199116
IP address blocks: 195.14.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:b0:4a:6b:5c:57:bf:91:c7:22:ce:fb:9e:63:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Jan 2 10:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77724c1c6a79c18a03b3d2a71a22122aa1b3fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:9d:9a:06:52:4d:3a:d4:6d:44:d6:13:bf:
b3:56:cc:b1:ee:86:d5:51:e3:bb:ac:26:4e:25:e9:
e5:38:a6:33:93:da:a1:4d:4c:65:6f:f2:19:c4:fe:
49:a8:d6:4d:44:0a:75:51:35:c0:a3:0e:b0:46:a3:
10:a0:91:05:9c:0f:f6:c5:db:7f:2d:43:df:01:18:
1e:b5:6f:0f:37:c8:c1:49:a8:0f:b2:54:a8:b6:77:
74:01:30:82:8d:57:b8:8f:d9:23:06:ba:a8:7e:f6:
05:59:c5:a5:8e:5e:3c:ec:8c:42:eb:9b:5a:f4:fe:
96:c9:40:1a:e8:f5:c1:6b:78:55:3b:53:0a:2d:da:
20:0b:9a:e7:e4:37:81:b6:fc:39:5b:94:44:fa:0f:
e6:01:fa:5f:5c:07:05:88:51:d3:3e:67:61:23:7b:
3d:f5:4d:1c:0a:42:cc:4b:f9:1b:d0:86:29:ac:d4:
c8:40:31:6f:f1:2c:70:ed:78:0a:ba:5c:cb:13:0c:
f5:be:81:13:ff:fd:55:3d:af:dc:3e:90:c1:60:aa:
f3:36:d7:2c:07:bc:c3:12:ce:d1:9b:8d:84:32:6d:
8e:c7:15:0c:af:73:01:b5:fb:09:8c:3e:e9:0b:8b:
94:2b:af:59:ee:40:6c:2d:e1:ac:d6:c4:8c:d1:2c:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:4C:1C:6A:79:C1:8A:03:B3:D2:A7:1A:22:12:2A:A1:B3:FD:7C
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/d3JMHGp5wYoDs9KnGiISKqGz_Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.28.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d3:f3:6c:d8:df:cd:bf:7d:b3:fb:9a:de:f7:aa:70:89:dd:
37:ae:12:b1:ea:f4:b1:f1:44:d1:0d:42:3e:62:91:48:3b:89:
95:a1:90:cb:e4:a6:0a:a8:7b:30:88:8a:8c:d4:c3:52:fa:36:
7c:b3:6d:4b:f6:c6:ac:fe:90:58:5d:e7:86:f7:58:01:39:40:
68:db:3b:f4:28:17:5b:2e:92:8e:d7:60:fc:7f:10:6f:ff:1d:
e9:4f:c8:ee:7b:95:f3:71:69:05:fe:e3:7b:5d:b2:f3:66:c1:
cd:f5:e7:78:68:60:3a:71:b5:fc:a5:d3:f9:08:b2:40:2a:ef:
26:47:b5:be:f4:c7:cc:eb:ef:7d:c2:a3:82:2f:20:32:a8:52:
8f:51:c2:02:db:e1:00:41:30:8f:a8:54:11:91:2e:57:7f:d0:
dd:0e:b0:6b:c8:69:57:b2:e0:57:8b:46:65:b3:27:0b:bd:3f:
70:88:16:82:04:9f:e5:d6:cf:66:9e:79:15:53:ad:63:04:17:
4d:f5:b9:ad:28:cf:8b:68:9d:a1:2c:69:3f:7b:35:a5:04:be:
16:92:6a:d1:de:06:4a:cd:f3:8d:e6:09:df:9f:22:70:2e:c2:
f6:6b:ce:23:f9:37:4a:15:e2:36:cc:d7:c4:fe:52:ed:df:87:
09:34:06:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:04:04 2026 by rpki-client