Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/CT3dS6C-LLdGxg4ufjXioY_GRbY.roa
File: CT3dS6C-LLdGxg4ufjXioY_GRbY.roa (raw, json)
Hash identifier: 2OWY/qBFg0EKWwzsD1nTcACFUzcmAJDh5fmSfds1Lpc=
Subject key identifier: 09:3D:DD:4B:A0:BE:2C:B7:46:C6:0E:2E:7E:35:E2:A1:8F:C6:45:B6
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019EA1EE00FBDE94EEAB8B92D5647506F0BD
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/CT3dS6C-LLdGxg4ufjXioY_GRbY.roa
Signing time: Sun 07 Jun 2026 11:53:09 +0000
ROA not before: Sun 07 Jun 2026 11:53:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57900
IP address blocks: 193.27.7.0/24 maxlen: 24
195.34.68.0/24 maxlen: 24
195.34.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:ee:00:fb:de:94:ee:ab:8b:92:d5:64:75:06:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jun 7 11:53:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=093ddd4ba0be2cb746c60e2e7e35e2a18fc645b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:40:6f:9c:29:8b:8e:be:6f:28:2d:71:25:
39:b6:43:48:df:bb:5e:05:43:bb:62:73:08:af:86:
dd:92:8f:83:41:bb:74:68:fc:13:11:b6:dc:01:ed:
70:67:9d:6a:77:93:97:8c:d9:19:92:09:93:90:05:
7f:e6:94:71:ed:b2:73:a4:45:0b:97:46:99:c4:bd:
a5:92:79:1b:8f:fc:ae:ab:d0:f0:34:6d:35:a2:de:
68:fe:17:58:22:cb:48:ae:11:01:2d:76:53:bd:73:
fc:a4:2c:d3:d7:91:ae:a1:c9:8a:db:21:cb:b1:ad:
d8:cc:4e:a4:88:7a:d8:3d:e2:e3:be:c6:0c:00:4e:
64:5f:8b:7e:a2:36:73:42:99:c4:51:b6:7c:ce:8c:
e0:65:1a:db:ef:07:17:7a:4b:3a:bd:4f:d4:8b:ec:
fa:91:51:26:19:27:36:51:44:e3:8d:53:93:ec:40:
fa:2a:8f:85:3d:20:9b:14:a2:4b:5a:9d:3a:2f:71:
d6:30:17:37:d9:27:aa:0f:dd:da:f2:ec:74:64:32:
ad:4e:cc:16:7c:13:52:75:eb:ad:55:98:1a:fb:00:
43:8b:df:98:50:17:40:4c:23:69:df:2c:1a:2b:37:
8e:e3:22:6a:e3:4f:3e:ef:21:f5:33:0b:3e:fc:5b:
8a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:DD:4B:A0:BE:2C:B7:46:C6:0E:2E:7E:35:E2:A1:8F:C6:45:B6
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/CT3dS6C-LLdGxg4ufjXioY_GRbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.7.0/24
195.34.68.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:f6:9c:58:2f:ea:a7:11:c2:c7:d7:1c:f6:34:1d:7d:62:4d:
e0:e4:c3:b1:ca:6e:23:f1:9c:0c:a3:d4:5f:b4:e2:d4:95:43:
0e:d1:4b:f4:37:41:c0:96:4f:de:ff:6b:6c:8e:0b:95:fb:52:
e9:29:0b:61:48:55:28:34:90:a1:fc:8b:15:32:96:54:92:51:
7e:eb:35:28:a9:c5:6f:b0:32:fc:6e:7b:d3:a0:79:a6:b1:ee:
2d:ee:7a:bd:1f:99:94:cc:5d:12:38:f3:08:5e:38:e3:55:aa:
ac:7a:c2:48:a6:ba:9d:c8:ff:fd:d3:89:3a:a9:2f:48:fc:9e:
e4:87:85:e0:e9:f2:ac:ce:6e:45:90:93:57:0c:80:9f:08:3f:
4d:35:b4:0d:4c:14:60:39:b2:75:5a:3a:a5:86:03:90:7f:1d:
18:41:78:b1:28:0c:76:bb:f1:10:0f:ea:f7:ee:f4:5d:52:86:
d7:65:80:13:1a:d8:67:4b:41:32:f9:d3:41:34:7a:76:06:ab:
9c:a6:ca:27:9c:c4:91:e2:f4:8a:7a:1b:87:84:34:91:07:70:
46:d3:6a:62:80:23:26:fd:53:97:c7:86:e3:af:86:70:47:21:
db:2d:b6:f9:65:65:16:66:f0:43:ea:8d:ce:1a:b5:26:df:ea:
e2:20:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:54:26 2026 by rpki-client