Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/drcBU6isAarNBojJI-RU76PKJ0U.roa
File: drcBU6isAarNBojJI-RU76PKJ0U.roa (raw, json)
Hash identifier: Z5fFRiPhRBfULgaVLuCjir2HvNZniMHEm92yy3rxB68=
Subject key identifier: 76:B7:01:53:A8:AC:01:AA:CD:06:88:C9:23:E4:54:EF:A3:CA:27:45
Certificate issuer: /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial: 019CDCC8E496689864B7A5E9AD5B94CC8116
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/drcBU6isAarNBojJI-RU76PKJ0U.roa
Signing time: Wed 11 Mar 2026 12:04:39 +0000
ROA not before: Wed 11 Mar 2026 12:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30885
IP address blocks: 91.212.110.0/24 maxlen: 24
178.216.11.0/24 maxlen: 24
194.102.208.0/24 maxlen: 24
2001:678:10fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:c8:e4:96:68:98:64:b7:a5:e9:ad:5b:94:cc:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Validity
Not Before: Mar 11 12:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76b70153a8ac01aacd0688c923e454efa3ca2745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:ff:d5:16:5c:10:74:14:86:ed:4f:7d:28:
f7:de:f3:26:64:5d:dd:67:85:f1:36:09:cf:8e:0f:
94:9b:38:77:8b:a6:b7:5e:a4:2c:2f:5c:1d:01:4b:
1b:20:00:6c:c2:ef:13:07:35:56:de:13:1d:b7:e4:
98:d1:c2:eb:43:d8:13:8a:d4:b4:33:1a:45:8f:3b:
fc:89:d1:59:c5:2a:8d:bc:5d:6a:26:17:c3:7d:a6:
5a:5e:50:0f:ce:1d:8c:cd:dc:3c:b4:08:26:b9:61:
df:32:62:6f:6b:1b:6b:ce:c4:79:83:7b:8b:fb:4d:
24:e7:46:b3:b7:90:b5:d6:2e:91:91:f1:4c:82:6b:
c6:c6:01:23:a3:c5:0e:74:5f:28:f7:2f:65:bb:49:
81:f7:18:43:99:b3:1a:26:98:db:32:46:87:48:eb:
96:73:af:86:2a:a1:78:05:1b:f4:ce:ec:a0:98:b1:
7e:ea:7e:2d:ef:15:19:bb:c4:e5:60:92:5f:c2:46:
2f:00:90:ef:3f:33:af:df:ad:69:33:d7:94:c6:d9:
9d:e6:a3:5f:9f:77:10:a5:93:cd:94:36:a3:e9:45:
74:46:09:74:65:be:2f:74:49:5c:be:85:ea:e2:21:
32:fb:2e:3f:2d:56:93:76:19:a2:75:d4:5b:a9:6c:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:01:53:A8:AC:01:AA:CD:06:88:C9:23:E4:54:EF:A3:CA:27:45
X509v3 Authority Key Identifier:
keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/drcBU6isAarNBojJI-RU76PKJ0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.110.0/24
178.216.11.0/24
194.102.208.0/24
IPv6:
2001:678:10fc::/48
Signature Algorithm: sha256WithRSAEncryption
0f:c2:16:25:ba:06:2d:a3:fb:0e:9e:49:cb:40:0e:95:5e:1b:
f2:d5:35:ec:c5:5b:6c:5e:90:ba:e7:98:e7:f5:fe:75:a7:1e:
64:1c:cb:aa:18:fc:62:8a:5f:21:42:f3:16:93:e4:37:89:fb:
71:22:6f:d2:0e:1d:06:8d:7e:49:af:f5:f4:5d:0c:19:6e:19:
fe:fa:3f:21:d0:03:98:38:20:7b:f8:fc:e0:53:97:a1:be:52:
d4:15:8a:a2:c5:11:75:f6:00:44:39:da:6b:34:96:cd:f5:3a:
39:c2:d1:8b:1b:18:4d:46:4c:e8:e1:40:17:1e:34:c7:36:35:
d8:4d:1a:34:c3:f5:d4:87:95:19:c8:16:3f:23:1a:41:c4:a7:
55:b8:c5:1f:1c:51:62:d1:4f:e7:ee:fd:3a:06:ba:56:d3:7c:
1b:00:4f:4a:b3:19:ce:f0:e7:92:e9:d7:1d:3d:85:9a:4d:4b:
87:e8:f7:4b:28:8d:9c:46:b5:6a:c8:82:d3:c2:aa:9b:36:21:
36:cd:b3:69:5d:f3:a8:5b:8a:67:38:7b:8d:bf:b8:f3:5a:c2:
99:2d:af:4c:ee:37:ea:c1:9b:bb:a1:c9:a6:7e:ca:ce:fc:2b:
bc:99:27:d4:fc:5b:28:42:4c:26:b0:7c:67:38:c1:2e:24:42:
6e:d2:04:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:19 2026 by rpki-client