Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa
File: _6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa (raw, json)
Hash identifier: 6mJhKXkfTm6Z9f3tQOF1JBIIXDGP02J3lqdrEbYkL5w=
Subject key identifier: FF:AA:EF:9A:D3:66:AE:7B:C6:2A:2C:3F:8B:22:8E:E4:96:FA:52:C4
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F7FE8DA8491EF4C1F5DCC22D3E72D7835
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa
Signing time: Mon 20 Jul 2026 14:23:14 +0000
ROA not before: Mon 20 Jul 2026 14:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 109.66.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:e8:da:84:91:ef:4c:1f:5d:cc:22:d3:e7:2d:78:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 20 14:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffaaef9ad366ae7bc62a2c3f8b228ee496fa52c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:14:43:e1:61:9d:2e:af:0b:3f:95:0b:69:
4c:c8:b3:f1:81:77:78:6a:ab:93:50:62:de:de:b5:
e7:45:ce:78:df:dd:ab:c6:50:19:3a:60:7f:61:01:
cb:68:f3:1e:f2:c6:b5:11:db:80:34:ad:0f:8a:15:
38:05:a7:67:6f:2e:28:78:f2:ce:43:10:fc:fb:88:
bf:10:16:7f:51:af:8c:de:3b:38:0a:a4:64:0f:25:
90:b4:db:fe:26:8e:19:f1:d0:1a:5e:c8:db:de:94:
d1:70:b9:0c:14:64:2e:61:bb:2e:51:44:33:00:0d:
58:24:33:bc:57:e9:34:9f:13:e0:75:be:93:e4:17:
77:26:a0:9c:c6:d4:a1:49:0d:22:cd:85:9a:5d:e6:
5a:15:b4:70:d3:9b:e2:12:65:93:a0:97:25:d8:5a:
d9:df:e3:66:64:7e:f8:18:81:5c:d5:56:ad:84:39:
19:26:bc:67:73:6d:16:80:f3:60:23:96:f6:28:71:
33:d1:14:c1:2b:69:b7:62:65:f0:7c:45:ad:ba:1e:
15:db:53:05:a6:b5:57:fa:12:12:55:99:4d:2e:98:
08:b0:da:28:3c:b6:91:e7:6b:a0:71:e1:5c:1e:31:
b9:c9:58:42:3f:83:cc:59:f8:9c:73:50:08:4f:76:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:EF:9A:D3:66:AE:7B:C6:2A:2C:3F:8B:22:8E:E4:96:FA:52:C4
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_6rvmtNmrnvGKiw_iyKO5Jb6UsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.26.0/23
Signature Algorithm: sha256WithRSAEncryption
50:46:3e:94:c2:33:a6:e8:68:a8:7d:de:ba:bc:93:8d:e4:43:
49:f8:46:f2:6b:a8:fb:c3:fe:94:82:e1:ae:bc:d3:a9:5a:67:
33:7f:2b:cc:f8:66:2e:25:49:3e:06:ba:1c:61:6c:5a:8a:81:
58:c9:4f:18:bd:c1:36:e1:58:a6:06:23:7b:e7:48:18:8b:33:
07:df:20:83:78:6e:16:27:e1:c8:fa:1e:07:b9:17:e0:a9:c7:
ec:32:8f:0e:6d:ae:f4:53:27:e9:8d:d5:88:4a:16:24:29:e3:
c7:e4:42:33:03:d1:6e:9d:ef:cb:00:da:0f:6a:a4:db:72:2c:
90:cc:93:8d:82:da:24:56:5a:00:df:f4:91:59:11:66:ba:6f:
9b:86:ca:22:6b:40:3c:3d:86:2b:62:69:55:c1:1d:ad:e7:a0:
7f:a5:7e:37:6a:01:aa:58:dd:ee:32:25:15:dc:b1:ff:ce:20:
c8:c6:8a:16:3d:ab:1d:1d:a2:8e:b9:b3:1c:ff:c4:8f:e1:99:
d5:9b:d9:e5:20:5e:ce:6f:e9:37:8e:d4:4f:df:4a:a6:88:1c:
82:67:ff:cf:9e:9b:13:05:77:0c:f3:c8:1e:3d:9b:d3:22:d1:
a1:4c:d6:35:df:e5:44:0a:ac:53:64:6c:a7:ae:03:da:ae:b0:
0b:0d:82:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9/6NqEke9MH13MItPnLXg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzIwMTQyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmFhZWY5YWQzNjZhZTdiYzYyYTJjM2Y4YjIyOGVlNDk2ZmE1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxcUQ+FhnS6vCz+VC2lMyLPxgXd4
aquTUGLe3rXnRc54392rxlAZOmB/YQHLaPMe8sa1EduANK0PihU4Badnby4oePLO
QxD8+4i/EBZ/Ua+M3js4CqRkDyWQtNv+Jo4Z8dAaXsjb3pTRcLkMFGQuYbsuUUQz
AA1YJDO8V+k0nxPgdb6T5Bd3JqCcxtShSQ0izYWaXeZaFbRw05viEmWToJcl2FrZ
3+NmZH74GIFc1VathDkZJrxnc20WgPNgI5b2KHEz0RTBK2m3YmXwfEWtuh4V21MF
prVX+hISVZlNLpgIsNooPLaR52ugceFcHjG5yVhCP4PMWficc1AIT3b9pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP+q75rTZq57xiosP4sijuSW+lLEMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvXzZydm10Tm1ybnZHS2l3X2l5S081SmI2VXNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUIaMA0G
CSqGSIb3DQEBCwUAA4IBAQBQRj6UwjOm6Giofd66vJON5ENJ+Ebya6j7w/6UguGu
vNOpWmczfyvM+GYuJUk+BrocYWxaioFYyU8YvcE24VimBiN750gYizMH3yCDeG4W
J+HI+h4HuRfgqcfsMo8Oba70UyfpjdWIShYkKePH5EIzA9Fune/LANoPaqTbciyQ
zJONgtokVloA3/SRWRFmum+bhsoia0A8PYYrYmlVwR2t56B/pX43agGqWN3uMiUV
3LH/ziDIxooWPasdHaKOubMc/8SP4ZnVm9nlIF7Ob+k3jtRP30qmiByCZ//PnpsT
BXcM88gePZvTItGhTNY13+VECqxTZGynrgParrALDYLU
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:18 2026 by rpki-client