Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/3puevpXxEmPtA5DHMhDWBwlZRcs.roa
File: 3puevpXxEmPtA5DHMhDWBwlZRcs.roa (raw, json)
Hash identifier: suu5X2zzvMTRS+3D69Fq6bFOqedWTYazOQgmkhD5+Mg=
Subject key identifier: DE:9B:9E:BE:95:F1:12:63:ED:03:90:C7:32:10:D6:07:09:59:45:CB
Certificate issuer: /CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Certificate serial: 019B76EB7DEC896BB83930F79DDD31424EB3
Authority key identifier: 62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/3puevpXxEmPtA5DHMhDWBwlZRcs.roa
Signing time: Thu 01 Jan 2026 00:18:23 +0000
ROA not before: Thu 01 Jan 2026 00:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42357
IP address blocks: 185.218.196.0/24 maxlen: 24
194.140.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:7d:ec:89:6b:b8:39:30:f7:9d:dd:31:42:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d1d677e53cd86036ee0fb062906cd42fbc1be1
Validity
Not Before: Jan 1 00:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de9b9ebe95f11263ed0390c73210d607095945cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:3e:a9:c9:41:24:64:60:83:d6:fe:41:52:
be:f0:72:e7:33:e8:bb:e7:3a:ed:51:38:4a:7c:52:
da:b2:24:ab:c1:ab:34:a8:72:06:59:22:84:dd:c3:
b9:44:a1:aa:c6:e6:3a:0f:21:6b:4e:58:b2:75:56:
ea:ea:da:c6:60:62:16:6d:c4:6a:1f:ee:15:12:e2:
d8:62:12:5f:a1:6b:bd:3d:ed:28:21:63:66:c6:e7:
dc:84:b1:bc:64:47:3c:e7:da:ec:7c:13:36:99:79:
55:c7:d2:a0:69:b3:ce:71:27:8a:58:21:12:b0:0f:
7b:e2:3e:71:19:f1:6f:61:d7:58:0a:e0:b4:3a:c4:
6a:cc:a0:5c:72:53:f1:a9:8a:81:2c:55:7e:06:12:
6c:2e:73:04:53:f7:f0:27:48:60:6e:3f:2a:a7:43:
bd:58:08:32:47:e9:68:49:b7:7a:47:30:c4:a4:98:
0d:97:11:e5:e1:88:5c:f3:a1:f0:dc:20:ed:1d:b4:
a7:ed:58:74:3f:15:75:41:8c:0d:95:6b:81:da:c3:
b2:5f:4e:ec:79:27:77:62:bb:52:87:c5:c0:f7:04:
94:e9:a5:c4:83:e2:c6:ac:f1:61:b0:15:ba:e4:ba:
94:f7:6a:f9:69:f1:a6:a0:ed:90:71:85:7d:1c:f3:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:9E:BE:95:F1:12:63:ED:03:90:C7:32:10:D6:07:09:59:45:CB
X509v3 Authority Key Identifier:
keyid:62:D1:D6:77:E5:3C:D8:60:36:EE:0F:B0:62:90:6C:D4:2F:BC:1B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtHWd-U82GA27g-wYpBs1C-8G-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/3puevpXxEmPtA5DHMhDWBwlZRcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/764ff2-d7e8-4061-bfe6-3cef9940a699/1/YtHWd-U82GA27g-wYpBs1C-8G-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.196.0/24
194.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3c:b5:6f:be:50:79:9d:e3:f0:89:fd:71:02:c1:a8:d0:8c:
21:2e:ff:14:fe:f5:5d:df:48:55:a8:c0:0a:87:67:5c:b7:7e:
88:eb:75:21:55:1a:53:bf:53:58:a2:24:6a:e8:1e:f1:66:c7:
12:41:da:08:80:89:8d:99:b4:52:40:11:aa:3f:1b:e8:d1:3c:
b6:08:8f:5b:07:c0:9c:d6:34:43:9a:9f:a6:19:9e:84:89:7c:
fb:ed:dc:bb:f1:30:15:63:3a:28:38:b8:7a:80:40:ea:67:d4:
7d:8c:99:0a:fe:8e:e7:86:ef:f0:51:73:0a:ee:e3:57:32:55:
8b:f0:86:03:d8:de:1f:9f:3a:ff:ea:3a:ea:2b:74:e3:fa:6a:
f4:17:99:fb:fb:93:f8:d8:4c:11:2c:94:78:8b:38:c6:c2:33:
a4:36:ac:78:74:ed:68:99:8c:a8:d3:f1:5e:a1:59:1c:74:26:
e8:a1:bf:ec:a6:70:7b:35:cf:71:b4:99:a4:dd:71:66:6a:4e:
8e:66:34:24:39:91:49:de:ae:68:4a:62:bf:68:8c:f5:25:b8:
c4:dd:8e:06:b1:b7:34:af:fb:5c:4d:5c:73:b4:ea:da:3c:5d:
06:4e:3c:89:30:ac:90:c9:83:99:b9:0d:6e:24:9e:db:5d:21:
70:da:b9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:42 2026 by rpki-client