Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/h3TopCexEANJtQqh5V_FOZwJdac.roa
File: h3TopCexEANJtQqh5V_FOZwJdac.roa (raw, json)
Hash identifier: yFbiua8AaSUqoPeKbQbN2UgZ2ZXPXf7GTDHVzEOJJPI=
Subject key identifier: 87:74:E8:A4:27:B1:10:03:49:B5:0A:A1:E5:5F:C5:39:9C:09:75:A7
Certificate issuer: /CN=d9743b665b878583aa26f80f232fed3a4338b422
Certificate serial: 01A0B51B66FD17149712B4994ABD47CA9E55
Authority key identifier: D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/h3TopCexEANJtQqh5V_FOZwJdac.roa
Signing time: Fri 18 Sep 2026 15:21:07 +0000
ROA not before: Fri 18 Sep 2026 15:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43298
IP address blocks: 171.22.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:1b:66:fd:17:14:97:12:b4:99:4a:bd:47:ca:9e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9743b665b878583aa26f80f232fed3a4338b422
Validity
Not Before: Sep 18 15:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8774e8a427b1100349b50aa1e55fc5399c0975a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:56:d7:22:4c:75:b0:cb:0f:e9:0b:14:6b:
04:c9:28:e7:7b:e5:6b:0a:69:c9:95:a5:f5:fd:2a:
87:c8:29:bc:24:94:5f:ab:87:1c:ac:38:97:ff:9d:
cb:b6:cb:53:62:31:a6:f4:d3:ff:95:3a:e5:ef:9f:
52:fa:6c:2e:f9:03:3c:8d:20:5e:37:30:28:2f:09:
d5:61:8a:96:cf:19:dc:63:dd:aa:60:57:b9:f0:53:
45:bc:5b:3e:94:df:39:a4:52:ae:41:07:6a:f4:3c:
d7:ca:6c:c0:92:54:f8:ad:70:28:f7:d0:d8:18:71:
83:6b:d6:25:74:b5:5f:e1:24:f2:37:b0:10:47:4b:
8a:5f:30:74:8b:f3:ae:c7:6e:c6:b3:7a:ac:9c:d5:
78:62:99:e4:73:83:35:45:33:98:6b:4f:b5:a7:40:
f1:de:18:89:c5:a9:4f:ce:d4:f8:29:d5:ae:0b:76:
80:af:36:7b:3b:00:4f:39:bf:e4:c6:e1:77:1d:1a:
73:2e:4b:e0:22:38:8f:ee:20:8a:d2:09:ca:ca:b1:
55:8c:c1:05:3d:4b:c9:ab:e8:08:42:20:83:23:0c:
09:49:37:53:6b:9a:32:f7:a5:18:3c:85:66:09:1f:
cb:b4:59:2f:bb:0c:f8:e5:85:4a:16:73:20:6b:83:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:E8:A4:27:B1:10:03:49:B5:0A:A1:E5:5F:C5:39:9C:09:75:A7
X509v3 Authority Key Identifier:
keyid:D9:74:3B:66:5B:87:85:83:AA:26:F8:0F:23:2F:ED:3A:43:38:B4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/h3TopCexEANJtQqh5V_FOZwJdac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30ed27-5adb-4d9c-9486-537e67b6e374/1/2XQ7ZluHhYOqJvgPIy_tOkM4tCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.242.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9d:0e:89:63:09:47:b6:e8:3f:6f:3b:0a:0c:37:f2:8e:cb:
fd:26:02:f7:fb:5f:e6:96:39:79:f0:6f:ee:5c:bb:af:b0:15:
43:8f:11:d7:24:5b:00:39:42:d8:a0:91:a6:0a:dc:1b:23:79:
7e:2f:fe:b9:12:3d:2c:64:98:80:3e:4b:81:d2:6f:f0:05:35:
56:05:1e:c2:ca:09:88:6e:9e:08:7d:1b:d4:2c:fa:11:f3:bc:
db:d1:40:f8:7a:4f:30:f4:36:2b:80:39:4f:86:bb:c1:25:a2:
f6:f1:71:0d:ea:23:ab:80:a5:e7:b0:f0:96:f0:31:a9:47:51:
ec:a9:ce:4e:44:13:de:7f:bd:b0:d5:42:1d:36:50:f1:cb:5d:
5f:3e:eb:45:0b:ac:6e:87:73:67:5a:74:6f:89:f3:17:d4:e4:
28:07:93:c8:20:ec:77:d7:f6:be:07:da:9b:c9:fd:04:0b:b0:
b9:9f:5d:90:64:37:df:34:d8:54:b1:4d:7d:ad:39:f7:b8:2d:
2c:a7:fd:b1:ec:1b:b3:8d:02:7a:31:2d:87:b0:3f:93:41:74:
fd:6a:fa:55:5e:d8:62:51:dd:1e:49:2d:fe:f8:81:18:c9:31:
89:59:50:4b:04:3e:aa:71:22:5c:0e:82:7d:7f:19:61:47:3b:
fd:ef:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:04 2026 by rpki-client