Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/3Jldul05xdBFL69NEqXn3eRe3CQ.roa
File: 3Jldul05xdBFL69NEqXn3eRe3CQ.roa (raw, json)
Hash identifier: IfOdXbX1Uvaj2rtWa4SOkbIvFNcMVYLXJaB4ngOVye0=
Subject key identifier: DC:99:5D:BA:5D:39:C5:D0:45:2F:AF:4D:12:A5:E7:DD:E4:5E:DC:24
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F1DD45BA30BEAFBE151BF58016A067F8D
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/3Jldul05xdBFL69NEqXn3eRe3CQ.roa
Signing time: Wed 01 Jul 2026 13:18:04 +0000
ROA not before: Wed 01 Jul 2026 13:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60423
IP address blocks: 194.225.91.0/24 maxlen: 24
194.225.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:d4:5b:a3:0b:ea:fb:e1:51:bf:58:01:6a:06:7f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 1 13:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc995dba5d39c5d0452faf4d12a5e7dde45edc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:a8:79:7c:6c:db:b3:88:4b:33:cf:c4:71:
e4:0d:c1:de:34:ed:c1:a6:80:a8:88:a0:f2:20:81:
64:47:97:1a:19:64:9a:05:45:32:c9:e9:7e:6d:e5:
ac:16:49:61:c4:29:30:5b:7d:8c:d2:17:5b:63:6e:
05:ba:66:73:90:95:3f:4e:e4:f2:99:87:35:c3:8d:
dc:2e:47:8b:f0:ce:f8:d6:b3:21:2b:5c:47:90:df:
fa:92:c6:30:fc:bd:f7:2c:80:fc:f6:33:0b:57:fb:
13:b7:7f:ad:4e:f2:40:ee:f8:cb:2b:b3:74:85:3c:
9b:bb:1e:4f:67:a1:59:d2:97:0b:33:c2:fa:b7:bc:
5d:be:9b:e0:c9:03:3f:b5:4e:af:dc:b4:32:c5:50:
8d:8c:1d:34:3f:21:32:c7:d0:37:be:92:33:e5:d3:
16:09:d2:fa:57:9c:e8:4c:26:8f:d6:91:4f:01:74:
a4:f5:30:c5:c7:9f:4f:ad:52:d3:98:7c:83:3d:db:
65:03:e6:8e:b2:14:16:0e:bb:90:27:5c:eb:ab:28:
b1:a5:7a:09:b7:2d:42:6d:94:d5:63:30:2b:2a:01:
f2:34:53:19:2f:07:91:f0:16:86:01:74:46:37:9e:
ae:90:59:e4:26:bc:26:9d:ec:1a:b8:7c:a2:b1:37:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:5D:BA:5D:39:C5:D0:45:2F:AF:4D:12:A5:E7:DD:E4:5E:DC:24
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/3Jldul05xdBFL69NEqXn3eRe3CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.91.0/24
194.225.135.0/24
Signature Algorithm: sha256WithRSAEncryption
14:55:95:61:0d:0b:dd:25:2b:e3:18:8f:e3:88:dc:be:52:38:
55:e9:74:79:ed:47:a8:3c:c4:7d:66:2e:39:c0:4a:99:f1:e2:
6f:e3:76:ff:b0:77:46:59:30:7c:23:d3:7a:15:9b:c0:f7:63:
f7:de:7f:81:9d:6e:ea:b9:54:d5:d1:95:7c:51:1b:3b:63:66:
1f:12:a6:1c:b5:99:e2:4e:16:75:e4:41:4d:f7:c6:26:80:a1:
57:fa:cc:7a:78:6b:39:21:fc:34:7c:7d:88:30:db:16:99:c5:
d9:a1:45:0f:a5:e9:84:f2:01:0e:c6:ac:5b:4a:aa:61:07:dc:
db:2d:45:2e:77:40:49:61:85:92:3d:48:1d:63:50:e3:80:e9:
3f:df:90:36:55:6f:be:ec:05:0e:3f:f2:28:6d:9a:0e:05:ea:
e3:c5:29:f4:24:71:f6:45:ab:27:56:f3:15:4a:6b:b7:20:b8:
03:47:1f:05:1c:5d:bd:96:26:9d:22:d5:7b:11:c5:ab:ea:78:
6e:b4:58:be:32:0b:5f:da:24:a8:51:26:82:df:5b:90:64:fe:
e4:84:f6:d7:9b:9e:87:70:52:71:94:0e:1b:6e:19:4e:49:10:
5d:c2:93:39:33:32:0c:97:39:6a:8d:8e:ea:fa:d3:6b:ed:5f:
3c:5d:69:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8d1FujC+r74VG/WAFqBn+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwNzAxMTMxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzk5NWRiYTVkMzljNWQwNDUyZmFmNGQxMmE1ZTdkZGU0NWVkYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiaoeXxs27OISzPPxHHkDcHeNO3B
poCoiKDyIIFkR5caGWSaBUUyyel+beWsFklhxCkwW32M0hdbY24FumZzkJU/TuTy
mYc1w43cLkeL8M741rMhK1xHkN/6ksYw/L33LID89jMLV/sTt3+tTvJA7vjLK7N0
hTybux5PZ6FZ0pcLM8L6t7xdvpvgyQM/tU6v3LQyxVCNjB00PyEyx9A3vpIz5dMW
CdL6V5zoTCaP1pFPAXSk9TDFx59PrVLTmHyDPdtlA+aOshQWDruQJ1zrqyixpXoJ
ty1CbZTVYzArKgHyNFMZLweR8BaGAXRGN56ukFnkJrwmnewauHyisTfyOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNyZXbpdOcXQRS+vTRKl593kXtwkMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvM0psZHVsMDV4ZEJGTDY5TkVxWG4zZVJlM0NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwuFbAwQA
wuGHMA0GCSqGSIb3DQEBCwUAA4IBAQAUVZVhDQvdJSvjGI/jiNy+UjhV6XR57Ueo
PMR9Zi45wEqZ8eJv43b/sHdGWTB8I9N6FZvA92P33n+BnW7quVTV0ZV8URs7Y2Yf
EqYctZniThZ15EFN98YmgKFX+sx6eGs5Ifw0fH2IMNsWmcXZoUUPpemE8gEOxqxb
SqphB9zbLUUud0BJYYWSPUgdY1DjgOk/35A2VW++7AUOP/IobZoOBerjxSn0JHH2
RasnVvMVSmu3ILgDRx8FHF29liadItV7EcWr6nhutFi+Mgtf2iSoUSaC31uQZP7k
hPbXm56HcFJxlA4bbhlOSRBdwpM5MzIMlzlqjY7q+tNr7V88XWmf
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:18 2026 by rpki-client