Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa
File: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (raw, json)
Hash identifier: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=
Subject key identifier: DD:D9:CB:FF:38:B7:14:D9:D3:6B:3D:26:74:C5:12:DA:C4:7C:FA:1E
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019B7B3655AB4EFA1FF49917712536B5102D
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa
Signing time: Thu 01 Jan 2026 20:18:37 +0000
ROA not before: Thu 01 Jan 2026 20:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39360
IP address blocks: 213.226.80.0/22 maxlen: 22
213.226.80.0/24 maxlen: 24
2a09:4980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:55:ab:4e:fa:1f:f4:99:17:71:25:36:b5:10:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Jan 1 20:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddd9cbff38b714d9d36b3d2674c512dac47cfa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:fc:e3:93:29:5b:da:c8:47:32:96:70:fe:
76:07:fb:68:9c:40:3b:e3:06:ed:96:62:15:fe:4e:
26:8a:67:10:f8:c5:5e:86:eb:19:1b:18:ca:32:3b:
67:9f:90:d7:2e:0a:a8:83:3a:f4:91:66:9c:e7:af:
34:96:da:f1:a1:55:0e:31:a5:a3:eb:7d:8f:2c:48:
3e:fc:ae:05:17:8e:ab:63:a1:d4:a3:da:a4:1d:6e:
45:ff:82:82:dc:55:95:47:00:8c:e0:26:78:e2:37:
9e:03:43:5d:53:75:f5:23:39:3e:86:d1:d6:81:c3:
1f:1f:08:e2:e8:30:8b:cc:ac:b8:01:8d:29:90:24:
fe:63:94:5d:38:3b:df:92:7c:d7:58:86:6c:d6:7c:
e6:fa:f1:6d:7f:a7:fa:41:71:11:20:38:66:30:98:
df:cd:2c:20:32:da:8d:e4:0f:28:24:0e:9b:ef:6f:
6c:0a:f1:8c:47:13:00:54:34:b7:ce:e6:c0:61:a8:
44:c7:38:e7:92:36:49:ce:b5:3d:52:f5:6c:b3:a6:
2c:41:ca:03:7b:9e:41:c1:ce:aa:a5:19:85:b7:92:
57:64:61:78:c9:6c:13:8f:38:05:d0:bc:41:31:88:
75:ae:0c:36:d3:2d:12:09:b3:0d:b4:e2:12:06:70:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:CB:FF:38:B7:14:D9:D3:6B:3D:26:74:C5:12:DA:C4:7C:FA:1E
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.80.0/22
IPv6:
2a09:4980::/32
Signature Algorithm: sha256WithRSAEncryption
96:89:15:ec:c4:86:e0:e3:81:c3:0d:9b:81:3e:20:49:3f:64:
ef:60:8a:28:46:53:40:56:a4:52:e1:14:e9:8d:12:50:1c:76:
08:ea:e9:20:75:d9:2c:bf:d9:f3:ca:53:4b:12:51:88:0f:40:
3e:63:93:02:c3:0a:26:0b:b3:5e:1d:a4:0a:8d:65:24:1f:e5:
04:48:6d:93:fd:78:47:d7:1b:9e:89:58:fb:b5:0f:5c:41:83:
d5:77:bb:a9:f1:01:ed:96:a3:78:da:17:6f:5e:a0:f8:54:88:
d2:95:7a:64:3f:8b:74:2e:16:e5:5e:57:d3:d6:4d:08:cd:40:
f8:13:40:83:6f:6e:0f:16:84:66:b6:75:b6:2d:75:9a:0a:f6:
00:6a:0f:97:c0:ed:a2:a3:d6:c3:ee:93:36:fd:49:f6:5e:8b:
5f:29:90:22:dc:d9:20:6b:d9:ea:88:c4:43:f7:50:45:74:f5:
d5:fa:55:f4:e8:f8:14:c7:57:9d:55:e0:f4:77:6a:8d:dc:a3:
ee:e8:79:cd:6e:a9:f2:7f:66:26:f1:4f:ab:94:3a:91:62:49:
f7:87:e1:84:3f:16:9b:68:38:93:f0:51:36:e5:b4:e0:43:e5:
69:f0:8b:8e:c9:9b:b6:3d:5b:f4:24:7b:3f:d0:80:2f:ee:6b:
c7:ac:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:36 2026 by rpki-client