Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V3YqRPKSUH-foFbHPxvbyjVKdpY.roa
File: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (raw, json)
Hash identifier: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=
Subject key identifier: 57:76:2A:44:F2:92:50:7F:9F:A0:56:C7:3F:1B:DB:CA:35:4A:76:96
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019C24E36E18DEDDB387EC82984A2A9BF9C5
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V3YqRPKSUH-foFbHPxvbyjVKdpY.roa
Signing time: Tue 03 Feb 2026 19:03:30 +0000
ROA not before: Tue 03 Feb 2026 19:03:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 152.89.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:e3:6e:18:de:dd:b3:87:ec:82:98:4a:2a:9b:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Feb 3 19:03:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57762a44f292507f9fa056c73f1bdbca354a7696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:15:8d:0f:59:88:90:9d:04:b1:c1:94:2b:
54:23:6f:9b:97:43:0e:fb:7b:eb:c1:99:3b:6a:0e:
72:e2:38:e5:27:93:0c:4a:04:ae:fa:a0:95:ca:34:
31:55:0a:25:03:33:ee:3a:f6:5c:d5:cf:a7:8c:3f:
ee:50:53:bf:b5:f7:e2:49:95:d3:05:32:13:2e:94:
87:22:03:29:ac:09:53:a7:6b:9f:e5:70:e0:bb:10:
05:ac:c0:e4:35:90:a1:ab:60:97:95:66:f4:69:ab:
cd:7a:56:e5:01:12:4d:92:49:37:4a:f9:fc:5c:2c:
bf:ef:6b:90:4b:89:41:fc:e0:31:52:6a:a0:3e:27:
53:f6:f0:00:85:8e:57:25:c3:53:b8:a8:f9:4a:06:
cb:2a:1e:da:81:50:fe:69:35:74:12:11:25:65:7d:
eb:a8:2a:e5:01:e0:d4:08:f8:d3:61:27:7a:32:ac:
99:53:b4:91:b2:17:08:c6:68:73:66:97:61:6c:07:
b7:c3:62:f2:e0:86:1e:3c:43:d1:20:e8:52:94:1b:
4b:ef:2c:9b:be:73:32:9c:4a:e7:b0:15:81:89:59:
37:02:66:1f:42:96:b7:28:b1:e2:c3:05:03:24:89:
56:12:f1:7e:fe:92:83:8c:88:b6:a3:03:21:a4:9f:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:76:2A:44:F2:92:50:7F:9F:A0:56:C7:3F:1B:DB:CA:35:4A:76:96
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/V3YqRPKSUH-foFbHPxvbyjVKdpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:40:41:25:cf:63:8f:98:54:b1:b9:7d:e6:3e:b1:e3:22:42:
12:27:25:20:20:a3:0d:bd:12:be:d7:e9:81:34:61:9e:2c:91:
71:01:63:e9:69:85:5a:65:b3:74:06:bf:75:50:6d:ca:62:ff:
ec:99:7a:0a:64:71:5e:df:d4:95:04:32:a4:ee:b1:25:a1:df:
ba:41:3d:e0:79:bd:39:28:6c:6a:45:c4:83:e3:d8:fb:41:f7:
f1:40:11:bb:e5:c8:8c:6e:ca:a9:15:bf:e5:98:92:ec:52:f0:
55:e0:1f:16:1f:5b:f0:cb:9d:58:43:33:9a:51:06:f4:97:f0:
e2:2c:d9:92:67:7d:b6:d8:7d:a5:b6:90:f9:de:17:76:b1:ca:
09:dd:3c:c7:a0:4d:05:77:ae:61:ea:38:da:17:c0:4a:e1:c2:
28:28:10:e5:72:b3:71:d9:8e:5d:79:2c:e2:ba:e1:51:87:7b:
3d:b4:e0:f8:d7:fa:aa:f6:94:da:5b:f0:cf:bd:a3:8e:9e:70:
84:cc:73:72:68:f0:98:c5:83:f1:82:5b:f6:e7:9c:3e:ec:24:
4f:83:33:96:98:c8:04:27:e8:9f:42:62:01:af:63:d8:d8:70:
b7:64:51:84:4a:33:bc:a7:5c:71:ec:2e:19:84:cc:60:05:48:
e5:23:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:03 2026 by rpki-client