Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3ISXpZffBm7D3OuYPTZL5axZWT0.roa
File: 3ISXpZffBm7D3OuYPTZL5axZWT0.roa (raw, json)
Hash identifier: RW8hhRWv+krhYZ1tPDpC9dXCXBhdGP5mAHEj2f3cAcE=
Subject key identifier: DC:84:97:A5:97:DF:06:6E:C3:DC:EB:98:3D:36:4B:E5:AC:59:59:3D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A08CCBE417A080CAAFAEC517E19C9996B3
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3ISXpZffBm7D3OuYPTZL5axZWT0.roa
Signing time: Thu 10 Sep 2026 19:29:27 +0000
ROA not before: Thu 10 Sep 2026 19:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 89.21.84.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:cb:e4:17:a0:80:ca:af:ae:c5:17:e1:9c:99:96:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 10 19:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc8497a597df066ec3dceb983d364be5ac59593d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:27:12:6b:ed:10:0f:24:3e:65:83:5e:41:
db:af:60:03:08:8a:8c:93:70:07:f1:ab:cf:44:27:
37:11:51:1c:bf:6e:cf:0b:c7:ff:a8:68:5e:68:f6:
79:c5:3e:cb:9b:5e:24:92:b5:9d:40:4b:7a:91:48:
71:cc:af:95:37:5a:d3:d4:d8:b8:ae:e4:29:4a:28:
b6:e2:5e:05:2c:f5:01:a7:8c:78:c0:9f:70:4b:70:
1e:0a:23:05:24:2b:c4:0f:3d:db:8f:f0:93:96:b1:
9e:81:83:ad:6e:cd:8d:7e:6e:58:d7:87:90:8d:42:
d4:11:f6:b3:e4:96:d7:33:8f:14:05:70:3c:3b:44:
3a:3a:c8:42:6f:03:2b:b5:2e:3b:c6:33:8c:4f:4b:
0c:5a:1e:84:8d:79:2c:22:85:5a:2c:31:17:fe:a1:
48:85:a4:9d:1d:d9:3b:be:4d:a2:be:0f:31:f4:44:
e4:2b:5e:23:4a:fe:13:5a:9d:4c:6f:08:98:e0:7d:
49:2a:09:f4:94:ea:06:22:74:28:0c:02:82:e4:9d:
78:91:98:ad:6b:a7:b6:be:37:2f:f3:b8:e3:3f:70:
44:7d:fb:6b:0a:0f:30:49:c6:80:18:6b:5f:6d:c6:
9a:f1:63:e9:4d:d1:da:f8:06:04:98:0b:83:82:5b:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:84:97:A5:97:DF:06:6E:C3:DC:EB:98:3D:36:4B:E5:AC:59:59:3D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3ISXpZffBm7D3OuYPTZL5axZWT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
89.251.31.0/24
91.226.57.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
58:74:59:d7:21:91:04:c1:da:51:78:5f:13:59:ff:de:a7:7f:
0b:d4:14:6a:bc:76:d3:b7:d8:ba:96:e2:25:16:f3:05:95:ae:
2f:1b:68:dc:3a:21:81:45:0f:00:4b:87:99:2f:6e:31:0d:5a:
4c:59:e7:83:b8:4e:c3:cc:63:c8:c0:ed:13:f8:e5:e7:11:e0:
ff:ac:5c:1f:61:13:38:e4:d3:c3:8e:75:d9:f7:65:2b:37:2e:
16:b9:4f:5e:e9:54:42:3e:0a:2b:05:e6:a9:57:78:33:38:bc:
27:eb:02:05:31:5d:5f:31:56:79:80:12:f2:42:63:84:08:b3:
2a:88:8f:e7:f2:be:3f:24:2c:b0:a2:8e:b5:67:44:c0:98:11:
f3:bb:f6:8f:67:14:2d:83:1b:06:38:9a:6c:46:9e:f5:ba:fc:
bc:2a:a6:a8:c1:65:cb:4c:9e:0a:da:e4:82:e1:94:d2:2e:0a:
4f:97:4f:c2:d4:c9:db:82:00:80:76:67:ec:10:ba:6e:4e:a2:
48:e6:91:4a:47:fa:96:59:2f:ba:62:5b:e9:2d:1d:39:ea:45:
61:59:98:7c:a8:87:64:68:c0:91:b8:b6:37:d3:6e:e9:67:6d:
2f:2a:2a:38:11:46:b6:1c:5e:6d:97:02:b2:d4:fc:cd:f1:35:
c1:cf:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:13:13 2026 by rpki-client