Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa
File: 2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa (raw, json)
Hash identifier: Dl7qDmE/jLoe0abkFXvtN9m8R5QtVl31hRq+JZMxUtE=
Subject key identifier: DA:01:E0:10:AB:0A:A1:94:81:D3:23:89:83:98:26:42:72:37:31:85
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F47F5E05A65DC4682F4BBDB70B74CA8E0
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa
Signing time: Thu 09 Jul 2026 17:38:43 +0000
ROA not before: Thu 09 Jul 2026 17:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274923
IP address blocks: 109.66.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e0:5a:65:dc:46:82:f4:bb:db:70:b7:4c:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 9 17:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da01e010ab0aa19481d323898398264272373185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:1f:6e:f1:63:3b:40:d6:02:60:24:d4:02:
4c:6a:32:50:1f:56:a9:db:fa:91:41:19:79:90:e6:
fe:aa:71:7a:f1:ad:ec:a3:7f:d3:a1:5a:02:91:1b:
50:7a:e4:24:ac:6b:a6:c2:5d:a5:07:a0:38:c6:e0:
11:32:95:a0:ba:b7:9f:64:cf:92:a6:93:b5:35:e8:
0a:a6:65:fa:5e:ac:7a:ac:11:d8:a1:f8:ff:ce:31:
9b:cb:96:03:f8:9b:45:58:50:1b:5f:cb:37:fc:fc:
8d:b9:df:27:1f:67:93:5d:8c:bc:29:9a:2e:fd:16:
94:ba:68:a2:62:96:c4:99:9e:37:fa:ea:7c:a1:61:
9a:c8:54:33:66:18:63:af:e2:1a:bd:b7:ba:07:ff:
64:66:9e:d5:12:9f:4e:c5:13:71:30:66:97:92:8f:
3b:1d:3c:66:0e:ec:ec:b6:5d:db:4c:2a:68:53:a6:
8a:30:7a:97:b0:27:2a:1b:80:54:b6:57:76:ea:b5:
08:55:28:fb:49:ca:73:51:85:cd:a7:65:d3:1c:09:
9f:7a:86:a0:10:68:2c:94:4f:f4:18:a6:b7:ca:81:
1b:e8:0e:1a:b8:58:5b:c1:a6:26:5a:6e:ad:09:6b:
20:30:ad:83:d1:cd:6a:7e:dc:73:00:53:a1:93:20:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:E0:10:AB:0A:A1:94:81:D3:23:89:83:98:26:42:72:37:31:85
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/2gHgEKsKoZSB0yOJg5gmQnI3MYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.16.0/23
Signature Algorithm: sha256WithRSAEncryption
46:58:05:53:4b:55:8d:58:db:4f:49:33:f3:a5:5c:57:6b:d3:
75:8e:99:02:2c:f8:6d:15:13:bf:01:11:32:94:70:25:50:f7:
09:85:e8:42:4d:13:e1:5c:15:c5:5a:f1:b6:2a:93:d9:4d:da:
cd:17:89:0f:c3:e6:5d:3f:8b:47:ff:8a:8a:40:b9:37:6e:96:
b0:ac:a4:12:2e:ca:17:80:97:74:b9:08:84:91:98:e2:86:12:
58:25:af:5c:15:f0:8f:61:70:47:aa:d4:0c:f8:c1:39:ec:d5:
fb:9f:e9:4a:7b:f0:e0:64:75:7f:5d:88:d5:50:00:ab:bd:c4:
b6:4a:b1:64:72:e6:de:6f:4f:a3:90:0a:09:83:d5:56:76:c5:
1b:d3:31:21:21:48:a7:d9:40:b2:63:db:05:77:6b:39:d6:28:
7f:f6:5c:3b:7c:a1:70:91:db:dc:5e:a6:c5:1f:1b:37:a0:b5:
d0:1f:27:e7:58:ba:fe:41:a7:33:fa:46:05:d5:2d:50:4e:1e:
52:4d:0d:43:c1:b7:e4:95:4a:7e:2f:0e:a9:27:a9:87:95:cf:
70:87:74:b4:94:27:3a:54:db:85:5c:a8:64:e4:1f:8f:31:f5:
9c:4b:ae:9c:64:a0:08:d2:74:b1:24:35:7a:d9:ea:19:3a:63:
06:a6:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:48 2026 by rpki-client