Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3l_vstDoSnrocqXAn30A9u0H0mU.roa
File: 3l_vstDoSnrocqXAn30A9u0H0mU.roa (raw, json)
Hash identifier: Y0BmLhcuu2M+sEbTuNCBAHp5PzglUGsGD5yWLbUA/oQ=
Subject key identifier: DE:5F:EF:B2:D0:E8:4A:7A:E8:72:A5:C0:9F:7D:00:F6:ED:07:D2:65
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1895DD3820CA62B8E49F630CE3F9D2ABA
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3l_vstDoSnrocqXAn30A9u0H0mU.roa
Signing time: Thu 29 Oct 2026 20:33:09 +0000
ROA not before: Thu 29 Oct 2026 20:33:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205261
IP address blocks: 85.31.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:5d:d3:82:0c:a6:2b:8e:49:f6:30:ce:3f:9d:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 29 20:33:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de5fefb2d0e84a7ae872a5c09f7d00f6ed07d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:41:73:ce:65:81:5b:0c:6a:4e:43:b0:86:af:
fd:7c:7f:1f:fc:4e:80:78:a9:6d:0c:63:ca:74:c2:
b7:7d:d3:cd:07:97:54:9e:7a:71:6a:da:67:7e:0a:
96:a5:cc:a4:70:8f:4b:dd:2f:93:eb:d0:74:63:14:
0e:1d:77:2f:48:e1:b8:b3:16:d2:77:43:83:95:fa:
4a:47:e5:c3:b2:4d:c5:d3:32:17:c6:8c:c6:5c:67:
f9:36:43:b6:61:12:40:f0:ad:26:8a:73:27:80:6f:
80:0f:77:0d:9e:a2:af:2a:c2:09:70:36:2c:e8:eb:
45:45:a5:0a:22:ac:7a:86:99:6d:bd:04:33:7f:24:
76:6c:e6:09:1c:59:84:55:83:14:e9:d9:a9:01:54:
f6:36:91:8c:3a:6e:a1:1f:2d:5f:4b:a9:6e:59:d6:
e6:e6:00:f2:2c:4d:6c:df:14:70:c4:07:0c:6c:0e:
7c:5f:b5:ed:ae:02:a6:99:e9:49:ea:ae:59:23:3a:
65:7a:03:44:83:04:7d:1d:05:9c:00:5d:9c:da:92:
7d:d0:2d:83:45:3b:f6:e6:d0:ad:ec:74:18:9e:09:
d8:07:9e:e9:79:51:7c:98:7b:5d:13:ca:8b:9a:d8:
c7:a8:8b:1e:8e:f3:6d:9b:51:90:d6:ef:67:62:33:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:EF:B2:D0:E8:4A:7A:E8:72:A5:C0:9F:7D:00:F6:ED:07:D2:65
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/3l_vstDoSnrocqXAn30A9u0H0mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.55.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ef:82:61:26:4d:89:89:4c:66:31:ef:c9:b8:42:6b:ce:f7:
11:14:8f:f3:ac:c3:81:4a:a2:f6:5f:8a:e3:4c:22:a4:8f:14:
02:11:2c:91:52:57:10:4d:9b:7f:89:03:9f:9a:6e:98:fa:f5:
0b:83:43:bc:aa:5e:f6:21:25:a5:77:20:e3:fb:08:36:e2:1d:
21:88:a8:35:d4:38:97:b0:1f:6a:11:da:28:54:f8:da:fc:4e:
3a:aa:39:77:d9:0b:09:cb:7e:fe:a6:51:3f:94:12:f0:72:1d:
93:b1:55:07:34:f8:2e:e2:00:63:33:0c:75:5b:89:c8:c6:ca:
2e:b6:34:d0:aa:2d:6d:44:d5:28:68:1a:7f:95:83:82:fd:7b:
56:48:f0:9d:8e:c6:3e:25:c5:28:43:24:b3:eb:2e:bc:de:ca:
30:f3:74:6b:15:fe:03:6c:a2:d8:0b:6c:d1:61:64:d2:ae:16:
b6:76:44:eb:0f:2a:18:53:cd:78:70:57:aa:2f:97:22:0b:cf:
b0:6b:2a:51:95:62:78:6b:68:ce:26:50:cc:32:78:27:e1:b0:
6d:74:ec:29:2b:80:bd:ec:6f:0b:24:9d:3e:5f:02:cd:47:db:
9c:8b:d5:a2:6f:93:8c:63:de:fe:db:9c:b0:45:2f:92:99:34:
24:33:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:18 2026 by rpki-client