Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/3e7vn0gMWTX4xlbGZNjmmNvageE.roa
File: 3e7vn0gMWTX4xlbGZNjmmNvageE.roa (raw, json)
Hash identifier: pKinQ92qPKme6P+JXQ0o29GW5WCuFqvQkCK6U5s4Mag=
Subject key identifier: DD:EE:EF:9F:48:0C:59:35:F8:C6:56:C6:64:D8:E6:98:DB:DA:81:E1
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 019B7910D67DF91E6957D83023FEE16AA8D0
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/3e7vn0gMWTX4xlbGZNjmmNvageE.roa
Signing time: Thu 01 Jan 2026 10:18:25 +0000
ROA not before: Thu 01 Jan 2026 10:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62415
IP address blocks: 82.197.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:d6:7d:f9:1e:69:57:d8:30:23:fe:e1:6a:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Jan 1 10:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddeeef9f480c5935f8c656c664d8e698dbda81e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:f4:2b:5d:5a:d3:e7:ff:54:14:87:c5:65:
05:18:26:b2:53:15:5a:cb:76:a8:9b:24:c6:7e:5e:
3d:33:b4:6a:45:c7:ae:83:99:f1:df:75:dd:ee:b1:
f8:fe:43:03:f1:94:45:1b:5f:0a:46:9b:eb:2a:da:
88:15:f9:42:67:b4:ab:73:78:3f:0f:9b:da:cf:cf:
a8:8e:1a:df:da:5d:c7:2d:9e:c0:9c:6e:24:27:83:
fa:be:99:47:e8:a9:f2:9e:d1:3b:8a:74:b2:cf:6e:
c8:3a:f2:3e:d2:89:e5:aa:2e:2d:4f:cb:b9:2f:ac:
cb:31:cc:1f:11:2a:f5:eb:d3:97:89:c0:9f:19:b9:
b0:c7:71:b3:8e:e3:ec:bb:81:3b:50:81:3d:db:b1:
ec:ee:7c:a2:4e:f3:24:29:1b:e3:61:b6:26:b9:6d:
cc:3c:49:34:43:99:4c:27:1f:62:fd:88:07:96:24:
1f:ae:5a:e1:a7:f5:37:08:81:f3:6c:be:13:e3:98:
d8:bc:25:a2:f8:63:db:2a:cc:ae:23:02:c1:ce:2a:
47:17:f3:c8:2d:ad:6d:77:f1:31:60:9e:ac:2d:61:
63:86:9b:fa:be:5c:85:6b:7d:59:2b:a1:af:97:16:
ad:6f:81:f3:7c:ae:44:b2:52:61:e6:1f:af:a6:75:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:EF:9F:48:0C:59:35:F8:C6:56:C6:64:D8:E6:98:DB:DA:81:E1
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/3e7vn0gMWTX4xlbGZNjmmNvageE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:86:9e:0b:d4:b4:77:d0:71:04:17:de:c8:c6:10:ad:e0:95:
4b:0e:6b:41:36:d8:c3:d5:46:1e:f7:d3:88:c3:9c:f3:a3:10:
3c:5f:ac:2b:c1:2b:e8:d5:38:b4:73:cf:bc:ca:dd:31:a7:34:
d6:75:3d:11:61:c4:d8:15:0c:dd:92:2f:0b:1e:73:b6:9a:37:
fe:ea:ea:d5:8f:cd:3d:6d:0d:76:06:97:0c:12:c6:81:ce:e7:
30:1c:b8:d2:ff:2d:22:51:6f:34:bc:22:b6:b4:4d:68:b3:17:
7c:9d:b9:75:b6:42:1c:6b:9c:9a:92:1d:01:b1:e1:41:93:02:
a9:6c:4b:82:c6:7c:b9:d6:9a:a4:e3:b6:7c:e4:5d:1a:94:dd:
b2:86:d7:8c:ba:31:44:f2:70:58:f7:20:5a:44:19:d5:7c:13:
dd:82:2d:23:0f:02:12:c4:6e:04:a2:c1:42:87:a7:1d:a8:61:
3b:e0:ad:47:63:bc:b9:c9:4f:b9:cf:78:a8:41:73:ae:90:34:
93:a8:95:a6:f0:23:1c:d4:a6:b9:04:ae:c2:d9:4d:c1:4b:fb:
a3:06:4b:6f:c9:97:db:fd:b2:11:c8:1c:c4:26:8c:e4:80:f9:
9b:54:ae:15:79:91:27:d0:96:b0:75:7a:c1:b7:ab:c7:64:cf:
83:70:fd:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ENZ9+R5pV9gwI/7haqjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGVlZWY5ZjQ4MGM1OTM1ZjhjNjU2YzY2NGQ4ZTY5OGRiZGE4MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Wv0K11a0+f/VBSHxWUFGCayUxVa
y3aomyTGfl49M7RqRceug5nx33Xd7rH4/kMD8ZRFG18KRpvrKtqIFflCZ7Src3g/
D5vaz8+ojhrf2l3HLZ7AnG4kJ4P6vplH6KnyntE7inSyz27IOvI+0onlqi4tT8u5
L6zLMcwfESr169OXicCfGbmwx3GzjuPsu4E7UIE927Hs7nyiTvMkKRvjYbYmuW3M
PEk0Q5lMJx9i/YgHliQfrlrhp/U3CIHzbL4T45jYvCWi+GPbKsyuIwLBzipHF/PI
La1td/ExYJ6sLWFjhpv6vlyFa31ZK6Gvlxatb4HzfK5EslJh5h+vpnWqmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3u759IDFk1+MZWxmTY5pjb2oHhMB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvM2U3dm4wZ01XVFg0eGxiR1pOam1tTnZhZ2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsU0MA0G
CSqGSIb3DQEBCwUAA4IBAQBLhp4L1LR30HEEF97IxhCt4JVLDmtBNtjD1UYe99OI
w5zzoxA8X6wrwSvo1Ti0c8+8yt0xpzTWdT0RYcTYFQzdki8LHnO2mjf+6urVj809
bQ12BpcMEsaBzucwHLjS/y0iUW80vCK2tE1osxd8nbl1tkIca5yakh0BseFBkwKp
bEuCxny51pqk47Z85F0alN2yhteMujFE8nBY9yBaRBnVfBPdgi0jDwISxG4EosFC
h6cdqGE74K1HY7y5yU+5z3ioQXOukDSTqJWm8CMc1Ka5BK7C2U3BS/ujBktvyZfb
/bIRyBzEJozkgPmbVK4VeZEn0JawdXrBt6vHZM+DcP0g
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:46:59 2026 by rpki-client