Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bPueULg0eMGNRhRD2KHDK2Yh0I.roa
File: 3bPueULg0eMGNRhRD2KHDK2Yh0I.roa (raw, json)
Hash identifier: ujwBjL90MzdVOHGQGsKIGOU6rrDMU+qLYr/JORSCU/w=
Subject key identifier: DD:B3:EE:79:42:E0:D1:E3:06:35:18:51:0F:62:87:0C:AD:98:87:42
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D15DABD5DEF2E2D6E2B3A44578F496E77
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bPueULg0eMGNRhRD2KHDK2Yh0I.roa
Signing time: Sun 22 Mar 2026 14:02:29 +0000
ROA not before: Sun 22 Mar 2026 14:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 78.17.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:15:da:bd:5d:ef:2e:2d:6e:2b:3a:44:57:8f:49:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 22 14:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb3ee7942e0d1e3063518510f62870cad988742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:a4:42:55:c3:59:fb:f4:fc:2f:53:73:f4:
f6:0c:71:d1:09:5c:4f:91:6c:0b:d4:07:e3:1b:bc:
51:43:a8:42:e2:dd:e2:df:73:9f:44:26:e8:2f:7b:
16:a5:ae:5a:ab:1a:2f:66:11:45:f1:e1:31:6a:59:
34:5f:52:44:06:da:1a:f6:83:c0:ac:03:0b:5f:0a:
fc:f0:1c:e6:ad:46:07:7d:38:63:82:d4:ed:4d:2d:
b7:af:66:26:11:56:f5:33:6b:68:5d:8d:3d:35:8c:
ee:ad:35:a2:92:3e:fc:9b:48:46:60:8a:85:7a:fc:
75:3a:86:7a:1f:10:93:6c:e8:c1:57:a6:5d:e6:7f:
4f:f8:64:ca:67:10:2e:df:26:87:e1:b2:1d:28:90:
8b:83:e4:b8:24:a2:42:82:09:82:1b:f4:b2:87:42:
05:b1:00:d8:4e:e5:96:85:8d:9b:bb:0e:6e:2f:9e:
cf:b5:e3:f0:3e:8c:9a:db:d2:e8:d4:9f:71:b4:1b:
4f:7e:a1:0f:22:7e:4f:56:ab:80:de:d9:df:63:73:
3a:1f:c5:21:ec:71:36:fb:1f:18:e4:7e:db:20:21:
da:96:92:7d:64:a8:2b:b0:30:c4:a4:de:0c:2c:27:
a8:1f:ab:24:c8:54:42:9b:85:bf:5b:4f:6e:e3:50:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B3:EE:79:42:E0:D1:E3:06:35:18:51:0F:62:87:0C:AD:98:87:42
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bPueULg0eMGNRhRD2KHDK2Yh0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.17.7.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c4:45:ea:4f:2c:7b:41:35:22:37:98:1c:ea:38:9c:32:1b:
32:4c:f4:1b:14:bd:ad:1e:e7:1f:14:dd:b4:cb:a8:a1:b1:98:
3b:e1:20:d5:7f:96:6c:ba:02:e5:2b:2a:64:4f:ee:7c:05:53:
55:11:a8:a3:8f:45:03:be:4f:13:13:75:dc:10:83:b9:b0:00:
0e:9e:67:f3:24:29:06:54:c9:a7:31:99:0f:b9:98:dc:9b:66:
26:4b:ff:11:9f:2b:69:37:0e:7a:09:54:a0:7d:59:b4:de:25:
db:96:e3:3d:91:68:43:51:9a:fc:c1:d6:ec:de:e9:be:ac:b2:
57:72:e9:2f:9f:99:c0:bb:3d:57:a0:97:08:70:e8:48:c1:63:
cd:68:5b:ce:2f:9c:ea:1f:42:11:45:a2:eb:c5:09:80:f4:bc:
74:39:9c:27:66:d9:2f:93:41:de:8a:89:8e:59:15:30:89:0b:
a9:1d:e7:98:42:64:f7:43:fb:41:37:b1:c3:d1:ad:a8:37:7f:
8b:3c:08:d6:27:bb:44:67:09:eb:40:be:b6:52:72:45:f9:ca:
53:22:f6:29:71:83:22:7e:51:94:ca:f2:55:57:cf:f7:e9:18:
2e:b2:8d:a5:3c:de:0f:82:77:b3:a3:a7:c0:cb:74:60:d0:67:
b1:3a:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:55 2026 by rpki-client