Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3TH5OqPU5IEHoDGoE7evCxfsacM.roa
File: 3TH5OqPU5IEHoDGoE7evCxfsacM.roa (raw, json)
Hash identifier: tzFOCPNnM4pwfTgjVQPcVsH21adLlAsroONG2PUi6nI=
Subject key identifier: DD:31:F9:3A:A3:D4:E4:81:07:A0:31:A8:13:B7:AF:0B:17:EC:69:C3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0A080738C4E11293D244B046448243F06
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3TH5OqPU5IEHoDGoE7evCxfsacM.roa
Signing time: Mon 14 Sep 2026 15:19:27 +0000
ROA not before: Mon 14 Sep 2026 15:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218891
IP address blocks: 45.149.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:80:73:8c:4e:11:29:3d:24:4b:04:64:48:24:3f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 14 15:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd31f93aa3d4e48107a031a813b7af0b17ec69c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:a2:c2:da:a0:5b:12:20:c4:eb:a1:ca:65:
01:1d:56:8a:3b:4e:a8:ff:6f:78:76:bf:70:06:0b:
f3:69:7c:5f:ae:7a:55:59:1e:ca:e2:bc:5d:7f:29:
2e:2e:34:a8:c2:15:2f:c1:8b:05:8a:9a:93:7a:b0:
98:99:21:94:7d:64:9b:e5:db:9c:f7:96:0b:3f:64:
d1:2d:1e:29:e4:af:6b:a1:84:31:07:39:c5:8f:35:
c8:31:42:5b:a8:dc:10:a7:ed:e1:60:e9:ad:ac:d9:
2e:68:3a:9b:0a:47:69:64:5d:5b:dd:1d:02:5a:1c:
0a:8d:47:45:ed:41:57:bc:3d:8d:87:50:81:e8:47:
0a:14:03:9c:58:b5:5c:0f:2f:86:2d:2d:cc:12:1e:
68:79:39:0b:1b:1b:c2:a2:b0:59:03:ba:d8:05:25:
bf:76:95:a9:aa:5f:7b:67:b3:42:43:78:ea:c8:19:
27:ec:5b:5f:48:18:a7:c0:3f:d4:69:a2:c0:6d:90:
54:c0:d5:b6:61:11:bb:2b:06:5a:94:7d:b3:99:dc:
cc:9d:04:14:c6:ed:77:05:a7:2e:66:dd:c1:84:53:
cf:3b:9d:9d:7c:4f:a3:fb:25:42:0e:90:76:a8:e6:
83:b5:34:c8:57:3b:93:1e:ec:7e:5a:90:eb:53:96:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:31:F9:3A:A3:D4:E4:81:07:A0:31:A8:13:B7:AF:0B:17:EC:69:C3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/3TH5OqPU5IEHoDGoE7evCxfsacM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c6:3a:66:cf:c9:cf:4e:f0:81:9e:e4:a4:88:6e:42:b0:22:
3b:0b:50:0d:94:27:bf:67:93:83:a8:17:1d:f9:48:a8:02:34:
dd:06:0e:9f:5e:60:83:e5:6f:77:55:40:cf:ad:19:f4:19:f6:
14:ae:ff:c9:ee:a6:81:60:8a:a7:30:55:40:2d:79:72:a4:8d:
fb:df:bc:23:f6:47:ef:0a:be:42:de:31:93:7b:81:0d:7e:21:
ed:ae:24:cd:05:de:fd:f8:81:90:98:72:1a:11:d1:df:b8:80:
3f:c2:44:80:64:ef:da:59:fa:10:0a:17:06:83:ad:52:cf:3c:
7b:fb:fa:31:43:5c:cd:8e:92:ac:15:0e:3b:80:a9:e4:bb:19:
4e:74:4c:23:6c:da:10:53:36:98:95:58:23:d3:7e:80:4b:37:
85:f8:01:a2:27:7a:cd:e8:21:50:01:71:38:2d:96:0e:b1:c4:
df:6b:7e:d4:25:5c:a4:96:71:9b:e1:5a:1d:65:5d:e0:4d:87:
70:4e:2c:b0:ae:3b:01:b5:08:8a:f2:35:b2:54:36:56:fc:a5:
26:e1:c0:29:fe:94:30:98:88:a6:ce:ed:27:90:72:75:32:00:
3d:79:10:69:9d:d1:d4:f2:12:04:d6:45:2b:ea:fc:2a:09:6d:
64:a9:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:36 2026 by rpki-client