Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa
File: fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa (raw, json)
Hash identifier: vEp2ptdzeVxduX9m+vMz5pf87te8Ro1XCCaMK9okgo8=
Subject key identifier: 7C:32:A0:1C:99:6C:89:2E:6E:22:26:8C:E6:55:1D:44:BB:90:8D:34
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A19F0CE261160C4796FC01269AE0C00202
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa
Signing time: Tue 03 Nov 2026 01:36:24 +0000
ROA not before: Tue 03 Nov 2026 01:36:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 63.246.144.0/24 maxlen: 24
103.216.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:0c:e2:61:16:0c:47:96:fc:01:26:9a:e0:c0:02:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 3 01:36:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c32a01c996c892e6e22268ce6551d44bb908d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:4e:02:90:39:39:2f:9d:18:9f:6a:03:31:
66:d9:4f:e7:0b:d2:3a:75:89:7d:74:ce:26:ec:75:
3d:51:13:59:44:ff:9c:fe:2a:a5:b3:4e:de:fb:b4:
5a:59:0a:0d:57:13:47:62:39:a7:c4:7d:d6:18:08:
d4:6f:d7:df:95:63:43:2c:1d:98:dd:75:54:6d:83:
ee:ba:9e:ea:3e:b8:16:85:dc:83:8c:e9:71:e8:d1:
50:bb:cc:cc:1f:9d:8b:44:88:5e:f8:88:ca:b8:8b:
a8:f2:ab:42:2e:10:70:93:61:82:b6:b7:be:88:52:
aa:a2:72:66:63:5e:16:8a:41:54:07:2f:50:75:1c:
22:c4:43:c1:d4:53:fd:aa:1d:1a:9e:a0:79:46:3d:
99:63:a7:c9:52:96:2f:bc:a2:e1:ef:07:69:b4:e7:
ba:21:7c:e5:57:1b:ad:a7:7e:92:48:18:23:be:6b:
fb:d7:78:19:f2:95:aa:d6:62:b8:a8:74:f0:b6:e1:
93:44:a6:b6:86:d8:0e:98:ac:51:03:aa:df:ea:fc:
77:8a:49:6b:7f:04:eb:17:93:6d:27:e0:2a:5d:6a:
9a:43:a0:4d:ed:b9:53:67:13:61:f7:83:3d:95:36:
9f:db:8b:92:66:98:90:8c:a8:28:51:68:92:a8:f2:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:A0:1C:99:6C:89:2E:6E:22:26:8C:E6:55:1D:44:BB:90:8D:34
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/fDKgHJlsiS5uIiaM5lUdRLuQjTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.144.0/24
103.216.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e0:68:06:2e:b0:ca:c3:ad:55:96:18:4f:39:db:88:03:78:
94:1d:88:5b:84:ba:84:b6:f9:e2:56:af:7a:77:ea:c0:6b:aa:
39:5a:ca:c7:c6:7d:34:b9:e9:5e:11:00:2d:63:0c:07:bf:89:
69:73:6a:54:03:66:50:a8:a2:11:e9:35:c3:77:d0:03:43:7f:
07:1d:01:ed:06:93:01:59:fd:6b:3b:d1:f3:ca:13:1a:54:fa:
71:92:d5:4b:a9:fe:99:a3:f0:34:ec:05:4a:09:62:d0:2f:ed:
44:77:8b:48:d7:3a:22:51:e4:92:75:bb:c0:23:c8:35:73:a2:
1d:b3:83:b4:f5:dd:73:72:0f:39:93:bb:c9:1d:c6:8a:2a:03:
cd:74:d0:12:6c:62:00:f1:64:1b:ac:c5:ee:7b:91:bb:bf:34:
40:6a:ad:8e:40:15:ca:e0:6c:bb:6c:12:c3:2c:0a:fa:cd:d4:
1c:d3:06:b9:8c:75:5e:1e:99:97:fb:74:ac:2d:0d:f2:69:d9:
c0:81:15:c2:8f:09:94:a9:a4:a5:21:5d:24:a9:b5:bb:e7:04:
a7:ea:03:45:02:f1:0f:aa:08:c4:c0:b3:b4:08:ce:79:82:ad:
b8:15:91:64:b7:2d:a2:fc:dd:1b:3e:e6:fa:54:e0:88:7b:b2:
ed:3b:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:11:28 2026 by rpki-client