Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/o3r3LVeAg0XhbGCZk-y6DwCxou4.roa
File: o3r3LVeAg0XhbGCZk-y6DwCxou4.roa (raw, json)
Hash identifier: uuHSHcLGNqdUCeJk1xcr0aW7E5+DD4Bm+aWpzxn7+gg=
Subject key identifier: A3:7A:F7:2D:57:80:83:45:E1:6C:60:99:93:EC:BA:0F:00:B1:A2:EE
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 019F406DC6F461E29C4777B013CE5B592F1C
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/o3r3LVeAg0XhbGCZk-y6DwCxou4.roa
Signing time: Wed 08 Jul 2026 06:32:43 +0000
ROA not before: Wed 08 Jul 2026 06:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207369
IP address blocks: 91.205.48.0/22 maxlen: 22
95.215.244.0/22 maxlen: 22
178.216.208.0/21 maxlen: 21
185.39.79.0/24 maxlen: 24
185.138.184.0/22 maxlen: 22
185.138.184.0/23 maxlen: 23
185.138.184.0/24 maxlen: 24
185.138.186.0/23 maxlen: 23
185.138.187.0/24 maxlen: 24
2a10:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:6d:c6:f4:61:e2:9c:47:77:b0:13:ce:5b:59:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Jul 8 06:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a37af72d57808345e16c609993ecba0f00b1a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:a6:b3:6a:f9:f7:44:fd:65:8a:d4:ae:f1:
4d:c1:91:82:12:ea:e9:19:ba:e2:48:0e:89:3d:52:
96:7e:4e:4e:b2:0f:98:fc:c9:5e:d2:bf:a1:00:75:
b5:0a:0a:aa:a3:65:03:b2:bb:a0:0e:51:ac:15:cc:
54:68:55:6e:86:e7:ea:f0:2d:ae:98:cd:70:5d:43:
9f:19:73:64:88:c7:3f:82:af:c8:71:d9:4a:00:a7:
3f:86:e9:71:96:61:8e:cd:ac:6b:ab:56:79:99:03:
24:83:c1:75:81:d5:9d:7a:48:a0:00:2b:8f:0e:35:
7d:96:98:7d:f6:58:74:11:04:b3:f8:17:06:b7:6e:
ef:62:00:d7:3e:bb:c6:8e:44:3b:09:dc:8d:77:12:
66:11:04:85:5f:93:80:64:e1:97:c2:33:b4:ed:37:
ae:0b:db:0e:3e:66:01:39:f7:21:6e:65:de:6a:0c:
97:46:20:8e:67:1b:d4:ae:bd:f1:e9:22:78:91:7f:
bd:86:5f:b1:f2:8a:8b:0e:0a:33:47:82:5c:22:03:
b7:b0:4e:ba:0d:56:2d:dc:1c:9f:ee:3c:62:2f:e4:
8c:ea:5f:23:b4:05:13:4f:b5:0e:aa:12:48:fb:d3:
bf:a2:3a:20:df:f2:08:94:17:96:09:a5:ba:27:26:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:F7:2D:57:80:83:45:E1:6C:60:99:93:EC:BA:0F:00:B1:A2:EE
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/o3r3LVeAg0XhbGCZk-y6DwCxou4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.48.0/22
95.215.244.0/22
178.216.208.0/21
185.39.79.0/24
185.138.184.0/22
IPv6:
2a10:680::/32
Signature Algorithm: sha256WithRSAEncryption
7e:99:0c:25:96:d5:2a:27:34:57:e7:1a:57:8e:19:d6:4e:12:
27:ec:0a:15:ef:32:b2:bd:36:75:81:e5:3f:61:63:3b:4a:35:
67:53:8f:18:88:c6:2d:46:09:62:a8:26:b9:1e:7d:da:7a:2f:
2b:7c:cb:32:1e:ac:4d:28:c0:04:6b:35:2e:46:bb:1a:26:ea:
7c:c6:2a:9a:ec:2b:94:82:d0:f3:a1:f6:50:26:f6:f4:9a:a9:
79:18:bb:f4:11:5a:cd:2a:0c:c5:91:86:fd:ce:31:8a:1f:11:
ec:ef:fd:68:21:c5:49:35:30:98:06:78:8e:73:46:ba:88:34:
5c:b4:f2:8c:00:56:15:c7:4c:a7:95:99:10:47:1b:17:3d:03:
97:b0:7b:48:9f:89:ee:6e:4c:82:7f:e9:84:46:2b:68:10:a8:
28:e8:d3:da:89:21:66:dd:c9:87:b1:bd:6d:dc:bc:63:b8:65:
fe:ac:af:71:53:a9:a2:46:1a:ca:81:78:9a:1f:14:f0:e1:fc:
47:34:16:b7:6b:af:4b:c5:91:05:ea:08:d0:e5:51:7a:f0:c2:
97:83:db:fa:e3:75:36:6b:93:01:08:bc:45:b6:3f:c0:e0:82:
73:e6:69:b6:4e:0a:6b:86:c6:ca:1e:f2:20:3c:5f:6b:c3:5d:
8d:1a:a1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:34 2026 by rpki-client