Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/P-CDAHiv1mFMJ55JuWg6DjL8jB0.roa
File: P-CDAHiv1mFMJ55JuWg6DjL8jB0.roa (raw, json)
Hash identifier: W9+QEUkhpgMwr/bef/mckkgJOBKFHSjsONZ0Wce/mEY=
Subject key identifier: 3F:E0:83:00:78:AF:D6:61:4C:27:9E:49:B9:68:3A:0E:32:FC:8C:1D
Certificate issuer: /CN=f3e21c801655f73f458b6e2dfdc7ce7d7ef276f0
Certificate serial: 019F236876BC3D546DF46570DD312014DA3E
Authority key identifier: F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/P-CDAHiv1mFMJ55JuWg6DjL8jB0.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205282
IP address blocks: 5.181.161.0/24 maxlen: 24
194.48.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:bc:3d:54:6d:f4:65:70:dd:31:20:14:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e21c801655f73f458b6e2dfdc7ce7d7ef276f0
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fe0830078afd6614c279e49b9683a0e32fc8c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:e1:71:12:59:0f:0f:30:91:f4:a8:44:0a:
e3:ed:a8:eb:43:c7:81:7c:80:02:dc:1a:e1:a7:5f:
93:bf:3a:1a:50:af:11:e1:46:40:97:95:d9:9c:2b:
65:0e:34:21:d4:d5:4b:0f:4d:bf:77:3b:bc:5d:25:
2f:6f:66:0e:25:68:2c:6e:e9:f1:73:93:39:1a:65:
5f:5e:7d:94:49:72:0f:d7:42:d8:b7:96:93:22:47:
01:a3:9b:bb:29:c5:12:17:5a:f9:8d:51:7b:08:84:
a6:d5:d9:21:3c:ab:f1:70:cc:1a:6a:1b:b0:2c:db:
dd:e1:a8:cf:74:e0:88:68:cf:1a:90:8e:77:23:4e:
e1:eb:3d:a9:69:5d:30:5d:13:32:22:2b:46:69:20:
a3:d3:cf:b6:88:40:1e:c1:f0:d9:08:23:04:e4:ce:
eb:3e:db:71:29:8e:1c:b3:e9:27:c3:08:31:64:94:
68:92:44:28:5c:8f:03:65:e2:41:fe:9c:b7:3e:3d:
f3:e4:4d:90:1c:bf:31:8b:19:80:92:0c:cc:2f:0c:
46:3e:79:ee:a4:08:1c:63:08:6b:32:ad:39:35:5d:
58:ea:7c:93:92:0f:8f:30:db:07:26:2f:c1:06:9e:
33:47:67:5f:ed:b4:87:07:f3:0d:3a:60:b6:f6:9e:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E0:83:00:78:AF:D6:61:4C:27:9E:49:B9:68:3A:0E:32:FC:8C:1D
X509v3 Authority Key Identifier:
keyid:F3:E2:1C:80:16:55:F7:3F:45:8B:6E:2D:FD:C7:CE:7D:7E:F2:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-IcgBZV9z9Fi24t_cfOfX7ydvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/P-CDAHiv1mFMJ55JuWg6DjL8jB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/8-IcgBZV9z9Fi24t_cfOfX7ydvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.161.0/24
194.48.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:00:c4:32:c0:c3:f4:09:f9:ae:92:cd:cc:35:95:f5:54:07:
1c:35:4d:0e:0e:ba:cc:72:17:2f:a6:ee:a8:18:fa:fd:db:fd:
59:9c:d2:83:35:81:53:75:cc:d1:16:c8:ba:63:58:e4:9d:b3:
5c:e5:70:1e:c0:04:73:19:e2:ce:26:a7:c3:31:9b:3c:f9:cc:
46:53:bb:cd:7d:38:67:e3:9f:de:19:88:db:bb:9d:09:00:33:
5e:4d:60:41:dd:67:93:ba:03:68:46:6d:99:f4:de:d3:60:20:
b6:32:46:91:be:da:07:d2:c2:19:c1:ac:7c:8c:1f:88:73:91:
8d:a7:6b:98:2f:df:44:d3:6b:58:7b:84:fc:94:3a:af:3d:61:
37:b0:bf:1c:a1:f3:25:59:a0:11:8a:2e:5c:d2:20:7f:da:75:
93:81:d6:be:69:27:8c:c8:48:61:09:64:06:32:2c:de:b4:fe:
60:ab:3f:ea:f4:65:3f:9e:49:13:aa:b7:93:1f:51:ae:c9:9c:
a5:16:b6:4c:ab:5e:9c:7f:31:eb:47:5b:83:3b:3b:c0:2d:1c:
6b:fc:62:83:20:05:4b:50:ed:ab:e6:a8:83:a4:37:2c:d9:b3:
30:3d:a4:ac:09:a5:71:e7:c2:47:46:3a:74:96:d8:66:33:3b:
21:b3:55:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:58 2026 by rpki-client