Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/A3hrVmEvCXPX1ZQG-OaZsTDfDUc.roa
File: A3hrVmEvCXPX1ZQG-OaZsTDfDUc.roa (raw, json)
Hash identifier: FG186+ox/gx9ktlZdWlCw8zEoNjMpH+Cay0N5FQgQVY=
Subject key identifier: 03:78:6B:56:61:2F:09:73:D7:D5:94:06:F8:E6:99:B1:30:DF:0D:47
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019F8DCA036480D335A070154271F4145119
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/A3hrVmEvCXPX1ZQG-OaZsTDfDUc.roa
Signing time: Thu 23 Jul 2026 07:04:14 +0000
ROA not before: Thu 23 Jul 2026 07:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 213.238.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:ca:03:64:80:d3:35:a0:70:15:42:71:f4:14:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jul 23 07:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03786b56612f0973d7d59406f8e699b130df0d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:b8:70:b2:b9:af:50:5f:d4:8e:9d:95:6e:
6c:0b:24:4e:d6:e0:1a:57:34:4e:c6:41:e0:21:72:
80:f8:07:c7:e4:39:03:7e:ef:d9:15:97:92:47:19:
23:01:45:18:44:e3:b6:15:63:f2:68:78:ac:32:bb:
17:5b:e3:ae:44:3e:eb:20:5d:39:99:3c:3b:0f:89:
db:eb:f9:70:66:7a:a1:cd:45:80:76:d3:70:54:e0:
81:c0:6b:d2:df:7b:4c:2a:18:e0:80:f3:43:48:4c:
72:43:a2:ef:01:ba:9d:15:c1:50:1b:56:0e:60:ab:
c3:05:9d:0a:23:37:c1:a1:c8:c8:39:87:8f:bb:45:
1a:fc:e2:e6:40:8a:e9:b6:56:b9:f8:c2:3d:09:07:
90:40:3b:87:28:3b:90:b1:6c:78:08:c1:79:1b:53:
c8:01:a9:48:a3:5b:be:76:d0:0a:19:7b:3f:09:19:
fa:ab:53:19:5f:0c:74:b3:66:24:89:02:70:86:6b:
64:8b:88:77:a5:c7:cd:a8:f0:aa:ab:c0:20:43:10:
08:f0:71:e2:e1:c7:d4:1e:2c:b3:4f:7c:09:d4:7e:
0d:85:85:b9:71:88:0f:a8:49:b1:c8:d2:78:39:bd:
29:df:10:9a:23:b8:25:16:63:90:b1:9d:cb:e9:63:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:78:6B:56:61:2F:09:73:D7:D5:94:06:F8:E6:99:B1:30:DF:0D:47
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/A3hrVmEvCXPX1ZQG-OaZsTDfDUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:09:bd:98:08:f3:a9:39:70:d1:d7:c1:85:ec:00:c0:ae:3f:
0d:35:56:e3:21:fb:90:6d:ea:34:dc:7e:e9:b6:c9:c8:04:ca:
00:ac:6e:81:b5:d8:36:fd:66:18:9c:99:d5:f3:7f:09:46:80:
1a:cc:73:9d:ef:c6:bc:35:87:47:15:e3:2b:4f:e2:b6:e5:71:
39:8c:72:89:07:82:a4:3c:b9:75:ff:3a:6b:63:17:b3:e3:6b:
67:89:be:0e:24:2e:b0:5c:df:22:af:cc:42:2a:c8:18:cb:de:
a5:93:6d:04:ea:85:4e:ed:91:e4:07:56:06:39:4c:90:9a:43:
d5:8a:97:98:01:e1:94:94:e7:2d:ac:6a:7d:b5:08:e7:69:66:
ed:ef:74:36:41:0b:12:64:76:aa:9c:14:9e:93:3a:5f:8a:dd:
b5:cc:81:64:55:a6:87:6a:ae:f9:f8:72:a5:fe:52:1a:27:f5:
73:45:f5:da:bf:0e:86:9e:db:fb:ab:db:ef:f8:b6:9e:a9:eb:
6a:79:88:69:2c:1e:92:46:b6:87:e6:91:a3:ed:6e:8e:00:3a:
ae:24:90:d9:5b:8c:13:40:e5:3d:ad:ec:b3:da:84:9a:22:af:
ae:04:5a:48:66:73:09:f7:a9:7b:58:fb:98:9a:ec:da:81:7e:
f9:00:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:52 2026 by rpki-client