Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3_u1JnB1outB2ShH-cX8ikWmiTM.roa
File: 3_u1JnB1outB2ShH-cX8ikWmiTM.roa (raw, json)
Hash identifier: ygKy3fTE28e3FgdFdMC6kOMnwXXCP4+v9lDKoVlkGjU=
Subject key identifier: DF:FB:B5:26:70:75:A2:EB:41:D9:28:47:F9:C5:FC:8A:45:A6:89:33
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01A0C393A215064953548E19DFBB040396AB
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3_u1JnB1outB2ShH-cX8ikWmiTM.roa
Signing time: Mon 21 Sep 2026 10:47:07 +0000
ROA not before: Mon 21 Sep 2026 10:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151576
IP address blocks: 93.113.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:93:a2:15:06:49:53:54:8e:19:df:bb:04:03:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Sep 21 10:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dffbb5267075a2eb41d92847f9c5fc8a45a68933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:ec:5c:d6:cd:03:c7:ff:3c:28:37:0b:30:
38:3c:ca:93:5c:5f:30:09:eb:ed:b7:e2:27:6f:6d:
8d:39:37:68:a4:8f:34:16:2a:7e:34:29:e3:5e:33:
ce:9b:48:a9:54:c5:fa:24:bf:ee:5d:71:ee:f1:2a:
94:a7:8b:c1:8e:2f:b6:4d:f4:1e:0c:15:4d:45:89:
30:46:4b:d9:bc:b0:31:47:5a:43:28:95:18:fa:77:
e3:13:44:10:30:d7:43:a1:56:e2:d5:34:d0:47:0a:
fe:2e:21:3a:01:d9:3d:ec:53:5e:50:08:32:36:85:
1a:f2:d5:67:5d:a9:0b:d4:cd:26:71:8e:fa:3c:5f:
b8:de:61:bf:6a:84:9a:de:a1:88:30:b4:6c:17:41:
cc:e2:64:6b:d8:3d:a8:a5:cb:83:84:8b:4d:9d:a5:
e3:ef:e1:ad:f7:fd:99:6e:44:17:2f:48:42:83:28:
51:66:e6:97:d3:48:9e:a8:4b:35:a5:ff:a0:4e:54:
0b:3d:48:7d:c9:bf:94:3b:2a:fc:45:c0:54:c8:ad:
99:d8:d4:8f:fc:04:d8:e8:ee:da:0d:47:c8:3a:d8:
6f:07:54:f2:aa:1e:8e:d4:88:0f:9c:88:3e:2a:13:
17:bb:5f:87:2a:2c:78:78:e7:64:63:62:a9:33:fc:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:B5:26:70:75:A2:EB:41:D9:28:47:F9:C5:FC:8A:45:A6:89:33
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/3_u1JnB1outB2ShH-cX8ikWmiTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f7:4c:12:33:35:3a:7e:61:58:2b:24:d2:97:45:5c:f4:1d:
f5:cd:83:04:cd:6c:de:59:ca:e1:ce:2e:36:7c:97:70:53:5c:
38:1e:c3:3d:b9:3d:a2:b8:f2:c6:33:5f:73:d3:b2:0a:ca:1d:
14:25:85:e1:ad:61:fb:85:27:c4:bf:20:af:d7:0d:7e:c8:da:
8d:56:33:25:81:f8:cc:d0:65:3d:1e:75:10:cd:2b:af:f5:10:
c0:68:36:e4:8c:5f:06:5a:b9:b6:65:a4:06:31:21:35:3f:ab:
91:07:7d:c9:15:cb:69:10:a0:84:ae:69:44:d0:4f:fb:d7:9b:
a6:58:9d:25:4d:c0:5f:80:b5:38:a0:84:7b:df:7f:9a:f9:f4:
0a:08:39:ca:65:ad:64:7f:22:ed:ed:d7:c3:9e:05:1c:80:8a:
f0:7c:9b:34:61:06:1a:dc:52:3c:4a:ca:23:5d:c6:2e:e0:b7:
92:d8:e7:10:b2:0f:41:54:ad:6e:fe:38:54:57:6f:a3:24:a4:
ed:b1:83:ef:91:6f:4e:c2:2d:5e:6c:d3:e6:f6:d9:f7:e5:11:
41:49:7b:94:89:19:d8:ad:3e:21:9e:eb:89:0c:4c:c8:15:e1:
12:3c:e2:87:4e:94:dc:2d:27:39:40:ea:8a:c5:ee:4a:0c:2c:
96:78:95:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:16 2026 by rpki-client