Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/StvAsE8dqcbcJCGc9s0d-K3IMUw.roa
File: StvAsE8dqcbcJCGc9s0d-K3IMUw.roa (raw, json)
Hash identifier: gIggPBm4zeijGxMTzdgWV5ekCK3aV4Cyh43PttmoHL8=
Subject key identifier: 4A:DB:C0:B0:4F:1D:A9:C6:DC:24:21:9C:F6:CD:1D:F8:AD:C8:31:4C
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F1C72A9712493CB14F7916B94CFA34456
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/StvAsE8dqcbcJCGc9s0d-K3IMUw.roa
Signing time: Wed 01 Jul 2026 06:51:44 +0000
ROA not before: Wed 01 Jul 2026 06:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402306
IP address blocks: 109.66.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:72:a9:71:24:93:cb:14:f7:91:6b:94:cf:a3:44:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 1 06:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4adbc0b04f1da9c6dc24219cf6cd1df8adc8314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:37:a0:7c:ab:33:ff:1f:4d:c7:ee:27:50:
2d:6b:07:c5:3d:5e:0e:3f:7a:2b:ae:cf:32:2e:85:
51:d2:8e:29:7e:08:04:65:e9:a1:a3:6e:73:3b:e4:
63:6a:20:e4:ac:68:5f:45:3e:06:9f:59:7c:44:50:
f6:38:83:cb:81:f6:7b:7c:0a:78:d7:06:54:1f:19:
a1:cf:37:bf:b4:9e:12:36:f0:b1:65:e1:a6:b8:bd:
34:3a:0b:c3:d4:5f:25:17:f0:69:5f:df:a1:70:79:
cf:d2:a2:8e:db:2d:85:d8:9c:0c:56:5c:cb:37:08:
71:4a:86:ad:fc:0b:c6:c5:83:fb:e8:d5:fb:80:91:
71:51:c8:12:4d:c2:ed:31:17:70:e6:78:5f:b9:7b:
39:6c:88:7f:7b:97:62:5a:4a:83:4c:7a:52:86:5f:
9a:81:e6:46:71:33:e3:7f:09:0f:ea:36:0e:58:e5:
27:71:c5:91:29:1a:67:63:9e:36:c1:9f:30:63:8b:
1e:99:83:a9:40:2b:02:21:6d:60:e7:01:e5:f7:11:
84:e7:21:34:05:d9:80:98:fa:44:60:d8:5f:c8:b3:
14:3b:90:be:a2:bd:72:ee:60:43:bc:2c:ee:bc:44:
16:f4:78:8f:07:c0:01:3d:04:c8:73:8a:ba:4d:fb:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:C0:B0:4F:1D:A9:C6:DC:24:21:9C:F6:CD:1D:F8:AD:C8:31:4C
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/StvAsE8dqcbcJCGc9s0d-K3IMUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.8.0/22
Signature Algorithm: sha256WithRSAEncryption
82:0c:43:bb:08:a3:c6:45:c5:f5:b5:d9:41:72:88:47:c0:42:
69:3b:9b:0c:03:d7:c6:0a:1d:6d:b5:00:d4:7e:33:ef:a9:66:
24:72:e2:53:d9:b6:c1:e8:8c:c4:81:65:68:2b:77:ce:31:d0:
a8:bd:6b:f6:62:0a:d2:a8:4b:4b:a9:8a:c5:90:2e:33:7f:70:
5b:b1:0f:49:9e:6d:46:93:ef:c7:ad:d0:15:12:08:51:bd:b9:
f6:fd:06:c2:df:65:1e:01:31:f7:4f:92:14:45:66:52:dc:38:
0f:c1:26:d7:e3:6b:a1:f2:e0:d7:2c:6d:0a:8c:e6:12:12:e2:
ad:1d:fe:db:2f:61:90:06:f5:7f:ef:24:90:ea:63:65:ee:ca:
bc:0a:69:e0:90:95:63:01:91:4d:5d:dd:e9:b9:de:a4:4b:98:
29:3f:e1:c1:50:7e:0e:53:8e:1a:85:9a:cd:0b:90:3b:d9:ac:
39:e0:d4:50:1e:e4:78:3f:e6:c9:26:10:4b:2e:cc:de:24:8a:
c4:d0:fc:05:ac:3a:02:85:18:e6:eb:c3:a8:62:69:ab:98:83:
e9:b8:49:a4:2a:45:26:94:79:1a:7e:a4:57:17:19:49:54:e2:
62:a9:97:f7:70:db:bf:25:55:e0:20:c1:00:dc:e9:70:3a:3f:
64:81:72:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ccqlxJJPLFPeRa5TPo0RWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzAxMDY1MTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWRiYzBiMDRmMWRhOWM2ZGMyNDIxOWNmNmNkMWRmOGFkYzgzMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfU3oHyrM/8fTcfuJ1AtawfFPV4O
P3orrs8yLoVR0o4pfggEZemho25zO+RjaiDkrGhfRT4Gn1l8RFD2OIPLgfZ7fAp4
1wZUHxmhzze/tJ4SNvCxZeGmuL00OgvD1F8lF/BpX9+hcHnP0qKO2y2F2JwMVlzL
NwhxSoat/AvGxYP76NX7gJFxUcgSTcLtMRdw5nhfuXs5bIh/e5diWkqDTHpShl+a
geZGcTPjfwkP6jYOWOUnccWRKRpnY542wZ8wY4semYOpQCsCIW1g5wHl9xGE5yE0
BdmAmPpEYNhfyLMUO5C+or1y7mBDvCzuvEQW9HiPB8ABPQTIc4q6Tft9RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErbwLBPHanG3CQhnPbNHfityDFMMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvU3R2QXNFOGRxY2JjSkNHYzlzMGQtSzNJTVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUIIMA0G
CSqGSIb3DQEBCwUAA4IBAQCCDEO7CKPGRcX1tdlBcohHwEJpO5sMA9fGCh1ttQDU
fjPvqWYkcuJT2bbB6IzEgWVoK3fOMdCovWv2YgrSqEtLqYrFkC4zf3BbsQ9Jnm1G
k+/HrdAVEghRvbn2/QbC32UeATH3T5IURWZS3DgPwSbX42uh8uDXLG0KjOYSEuKt
Hf7bL2GQBvV/7ySQ6mNl7sq8CmngkJVjAZFNXd3pud6kS5gpP+HBUH4OU44ahZrN
C5A72aw54NRQHuR4P+bJJhBLLszeJIrE0PwFrDoChRjm68OoYmmrmIPpuEmkKkUm
lHkafqRXFxlJVOJiqZf3cNu/JVXgIMEA3OlwOj9kgXKk
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:49:09 2026 by rpki-client