Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/3Rhi5_ps9SqWelSSqWsozqaT8zo.roa
File: 3Rhi5_ps9SqWelSSqWsozqaT8zo.roa (raw, json)
Hash identifier: yQMP5GWWYy6KCkcECGI8p4f08bj4jOetLb0smfTHwxk=
Subject key identifier: DD:18:62:E7:FA:6C:F5:2A:96:7A:54:92:A9:6B:28:CE:A6:93:F3:3A
Certificate issuer: /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial: 019D8FF745D441ABB8BD96D569DED444E22D
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/3Rhi5_ps9SqWelSSqWsozqaT8zo.roa
Signing time: Wed 15 Apr 2026 07:07:20 +0000
ROA not before: Wed 15 Apr 2026 07:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203133
IP address blocks: 185.217.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:f7:45:d4:41:ab:b8:bd:96:d5:69:de:d4:44:e2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Validity
Not Before: Apr 15 07:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd1862e7fa6cf52a967a5492a96b28cea693f33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:b3:a3:2e:48:9c:2d:de:00:76:d0:8d:3a:
4d:5f:c9:1b:96:48:16:8f:f8:ce:64:d9:8e:99:47:
28:cf:5a:b1:76:49:fc:65:51:6c:1c:48:82:03:45:
b1:f2:d7:fd:85:5e:32:9b:5f:46:25:a1:56:ac:5e:
80:5c:12:96:ad:10:be:cd:54:c2:81:ed:5c:c9:9d:
19:ec:ff:f1:7e:17:4d:30:db:bd:a7:62:54:09:17:
62:af:de:71:37:c6:14:43:4d:55:f8:88:1e:fb:d9:
23:e0:6f:6b:e4:bf:9c:99:c9:cb:cd:b2:4e:41:d0:
d1:6e:a1:f0:22:6a:2e:5b:a4:81:10:03:8d:dc:ad:
f2:27:ac:c1:5f:d7:7b:71:2a:64:38:60:de:50:cf:
c9:f3:fd:f5:6d:3f:11:79:70:81:3c:1f:f0:8d:21:
af:13:80:bf:30:31:e4:7c:96:99:24:2a:42:0b:2e:
8c:0e:11:f8:d1:79:e7:c5:dc:8d:0a:88:61:18:f6:
0a:df:ed:97:05:17:52:84:bf:26:67:6b:79:a7:63:
78:13:86:e7:3c:ec:5a:cf:a2:bf:c7:cf:ae:71:e4:
ed:0e:b8:1d:e6:99:ff:be:d7:e1:7c:50:83:51:35:
d0:b1:01:20:47:27:40:49:67:9f:02:06:ed:fe:4e:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:62:E7:FA:6C:F5:2A:96:7A:54:92:A9:6B:28:CE:A6:93:F3:3A
X509v3 Authority Key Identifier:
keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/3Rhi5_ps9SqWelSSqWsozqaT8zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.216.0/24
Signature Algorithm: sha256WithRSAEncryption
74:01:14:f1:91:4c:32:60:31:38:cc:e3:83:7e:15:eb:68:32:
b3:50:f5:8d:c9:c9:af:8f:32:ac:3e:0a:50:b8:36:c0:a7:55:
4d:c2:55:bc:83:2e:5c:21:3d:3a:2d:ce:9a:49:a6:4b:14:91:
87:66:98:02:0b:c3:47:a2:85:a7:7a:6c:64:10:13:53:68:d4:
1e:89:e0:9f:d2:15:91:64:b7:d9:30:04:6b:8a:82:86:bf:43:
19:ba:51:19:a1:b2:69:1f:75:76:c7:4d:81:5e:12:2c:4c:ea:
b8:b2:44:46:53:b6:93:d4:91:c7:95:ba:b4:fb:3e:d8:98:38:
ac:9c:af:a4:7b:11:44:dc:17:0c:54:b7:f1:bb:f9:20:44:8b:
22:10:74:2d:17:4a:18:7d:93:8c:3f:f2:f6:4f:93:32:6b:2e:
0a:75:5c:6b:27:1a:96:c1:2e:49:03:c4:d6:5e:26:bd:c7:74:
86:f9:3a:3d:d3:db:b2:25:ed:04:88:a4:92:44:45:1a:76:df:
f9:57:52:95:2b:96:1a:ed:c7:bb:bb:51:48:d1:b3:43:4a:2c:
5e:36:f7:8b:52:c3:96:f6:cf:2b:8c:76:89:e8:31:57:13:d7:
bb:b2:5f:ad:43:4d:11:8c:c6:04:6e:05:d5:f7:b9:a7:34:be:
3f:43:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:46:52 2026 by rpki-client