Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/lP-bwsrPs8NhaEDiQ8lPOcNBDMU.roa
File: lP-bwsrPs8NhaEDiQ8lPOcNBDMU.roa (raw, json)
Hash identifier: MzwaDFcRJSXiHREPlsRhYeZ5uZA5XDQZnaEp7gHmjYk=
Subject key identifier: 94:FF:9B:C2:CA:CF:B3:C3:61:68:40:E2:43:C9:4F:39:C3:41:0C:C5
Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84
Certificate serial: 019C716D4759E7F41FFD261D3CE74E10C497
Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/lP-bwsrPs8NhaEDiQ8lPOcNBDMU.roa
Signing time: Wed 18 Feb 2026 15:45:12 +0000
ROA not before: Wed 18 Feb 2026 15:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200871
IP address blocks: 138.226.224.0/24 maxlen: 24
138.226.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:6d:47:59:e7:f4:1f:fd:26:1d:3c:e7:4e:10:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb62724132824e54906e240a88036419a365b84
Validity
Not Before: Feb 18 15:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94ff9bc2cacfb3c3616840e243c94f39c3410cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:22:f7:5e:3b:3f:1f:2f:d0:b9:71:43:38:
32:30:f2:4f:42:c2:58:03:0a:18:29:49:52:98:f6:
1f:dd:aa:1f:38:3d:d1:1c:25:1c:b5:2a:13:f1:ad:
a3:55:69:83:1e:98:3e:6b:33:26:5e:65:b2:3d:51:
6d:48:f1:39:c9:f6:63:80:21:8a:e8:7b:c7:7e:96:
28:24:65:7a:fb:58:01:0c:85:25:6c:d5:4c:89:d4:
fd:5a:35:f9:ef:d6:4e:66:29:56:49:90:f2:d9:87:
c5:45:b0:ac:75:2d:c2:51:03:57:72:7e:f1:84:20:
8b:89:5d:24:c6:83:f0:3c:2a:67:b4:5c:fd:ce:aa:
6e:c0:22:04:63:b3:ce:dd:f6:db:2b:c5:82:19:0c:
73:75:cf:ed:b1:dc:fb:4d:d3:07:d9:ec:3f:76:57:
a2:d8:4b:6b:7d:0b:4d:15:67:50:72:fe:fa:a0:41:
2c:a5:f8:89:47:17:1f:b3:9a:48:df:63:e1:ea:30:
fc:8b:93:92:ad:8b:5b:11:f2:79:91:b5:48:c3:55:
f1:8f:28:c2:d0:18:45:3f:ac:29:1a:7c:18:6f:c5:
a3:6f:68:49:90:06:61:02:26:28:7d:44:ba:f9:be:
4f:22:a0:07:6b:12:f3:b5:2e:e5:d0:b6:ba:6d:7a:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FF:9B:C2:CA:CF:B3:C3:61:68:40:E2:43:C9:4F:39:C3:41:0C:C5
X509v3 Authority Key Identifier:
keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/lP-bwsrPs8NhaEDiQ8lPOcNBDMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.224.0/24
138.226.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2e:84:1a:ba:f1:c6:34:88:e5:f0:cd:73:22:2f:19:f7:c1:
9c:ff:53:5f:a5:93:49:56:b0:a3:25:cb:fe:f8:88:d3:c0:e5:
39:96:2d:75:5f:e2:52:e7:ae:36:f6:38:52:dd:d6:1b:0b:9e:
cf:02:9f:25:0d:e9:83:62:c1:85:24:25:10:01:43:b9:28:5d:
25:90:29:22:67:79:31:09:55:06:42:04:b9:64:b2:7c:c8:af:
f7:75:cc:a0:16:eb:33:8c:2d:67:b2:93:78:6f:51:75:98:65:
89:3e:57:1e:8c:ec:b3:e5:bd:89:e1:5f:5c:59:e8:a2:9c:e2:
d8:06:45:c6:ed:d0:73:69:1d:94:c6:f4:d7:f1:4f:fc:b8:6f:
7d:dd:8d:c5:dd:05:7c:7c:56:6f:61:6e:37:f3:58:7a:4a:17:
63:72:74:cf:89:cc:00:fa:cd:6e:52:c0:e4:c6:2c:9c:f7:b9:
b3:b1:21:fe:76:89:2d:3b:a9:26:5a:9c:33:17:c1:ce:b2:e8:
ea:5a:4e:d1:bb:1d:73:5d:3d:5f:e3:70:9a:29:41:b2:d9:7e:
61:3d:21:d0:44:25:75:ab:e0:8a:58:8f:53:21:a8:81:fa:8f:
fe:34:2a:27:2d:45:08:5d:a7:54:4a:06:ad:4b:6b:5c:4b:f2:
70:de:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:37:59 2026 by rpki-client