Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/3P4cCBu38EJugxeCpjstaJhevzU.roa
File: 3P4cCBu38EJugxeCpjstaJhevzU.roa (raw, json)
Hash identifier: qPPAYChci1BjI8OFuTU/CsZA0DBvN2/vpi/SyKtNWw0=
Subject key identifier: DC:FE:1C:08:1B:B7:F0:42:6E:83:17:82:A6:3B:2D:68:98:5E:BF:35
Certificate issuer: /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial: 019F227C0FC80676F2282827E7AC86688655
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/3P4cCBu38EJugxeCpjstaJhevzU.roa
Signing time: Thu 02 Jul 2026 10:59:43 +0000
ROA not before: Thu 02 Jul 2026 10:59:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62313
IP address blocks: 91.209.240.0/24 maxlen: 24
193.22.141.0/24 maxlen: 24
193.188.248.0/24 maxlen: 24
212.46.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:7c:0f:c8:06:76:f2:28:28:27:e7:ac:86:68:86:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
Validity
Not Before: Jul 2 10:59:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfe1c081bb7f0426e831782a63b2d68985ebf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:aa:c8:25:cd:74:b7:13:56:1f:73:92:e4:
89:ca:7e:ee:a6:67:a4:f6:37:36:e4:9e:ed:79:0d:
44:be:3a:e1:28:10:af:40:7a:0a:07:3d:44:fd:45:
59:b9:95:52:dc:76:95:b4:e6:f5:c6:a5:48:0d:15:
17:5b:67:97:2b:45:61:5c:8a:68:4e:89:aa:e6:f5:
82:73:62:e7:86:a7:66:6a:11:a5:f8:3e:a1:ff:5a:
71:03:f8:39:4c:46:49:27:f4:dd:68:e8:94:06:ad:
d4:24:1b:ec:29:81:dd:bd:cd:4b:06:42:97:e2:b9:
cd:95:78:99:75:23:6b:1f:ea:36:72:16:6b:cd:a4:
0c:dd:09:b7:e5:1e:e7:81:12:e1:ef:fc:6c:96:8c:
88:04:ac:99:b1:7d:45:84:ae:a7:f3:98:d8:06:73:
5c:37:78:dd:62:62:65:fd:3e:1d:2a:68:be:61:49:
7c:91:95:a7:32:1d:17:ea:35:b4:b9:c3:21:d1:67:
12:74:a2:e8:60:c5:a3:5e:ab:4b:a8:52:47:a7:da:
67:55:a8:59:d1:6e:af:26:71:65:bc:51:8c:67:9d:
9b:0d:22:42:3b:00:1e:aa:84:22:cb:b4:95:9b:1d:
bb:9d:cc:e6:29:c7:e5:95:b5:91:10:b3:57:c5:69:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:1C:08:1B:B7:F0:42:6E:83:17:82:A6:3B:2D:68:98:5E:BF:35
X509v3 Authority Key Identifier:
keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/3P4cCBu38EJugxeCpjstaJhevzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.240.0/24
193.22.141.0/24
193.188.248.0/24
212.46.51.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9d:55:e1:22:b4:9c:0f:b2:bc:35:da:00:5e:c8:6b:a5:97:
53:f0:c9:21:65:0b:71:b3:9d:80:91:9d:8a:e7:75:5b:f8:64:
6d:8d:ec:5c:fb:66:37:d5:70:e6:48:8c:33:73:36:86:06:df:
1c:c2:71:1b:31:5e:a0:0c:a7:5f:eb:a8:69:bd:c3:20:f4:b0:
a0:b4:85:20:06:9b:93:07:a4:f3:a6:a1:97:33:7e:49:8a:6a:
0a:28:1b:4f:ab:45:28:09:91:2e:ce:e4:65:75:f3:47:68:00:
a5:18:db:99:10:2c:d2:b9:de:a2:d8:5e:27:4d:0a:7e:5d:63:
53:44:9d:9e:09:33:8a:14:9c:14:8d:f3:b2:a8:56:7c:a7:03:
64:4c:bd:cb:03:f3:8f:f6:f1:53:56:cd:52:7b:ed:43:85:f7:
41:b1:d9:52:67:fb:55:ae:b0:a8:bd:1d:69:27:18:c3:ce:b8:
80:38:6d:d7:a4:03:05:89:26:96:9e:1d:d6:f3:58:59:14:74:
10:c1:7a:aa:11:1e:c3:28:f6:41:d9:de:36:ab:63:bc:f6:00:
88:45:d6:0b:f7:6d:5d:93:89:f9:4c:7b:29:e9:49:b2:0b:4a:
3c:f0:4a:8c:dc:b5:ad:b9:98:79:d3:50:fe:e8:67:f9:db:b1:
63:9d:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:36 2026 by rpki-client