Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/1E3phtp0P8gYJbkCg82wpelhXSw.roa
File: 1E3phtp0P8gYJbkCg82wpelhXSw.roa (raw, json)
Hash identifier: SMIM0UdRFq+vL3xGjX+LIHU82O3nquIRJzqoR4N2X0o=
Subject key identifier: D4:4D:E9:86:DA:74:3F:C8:18:25:B9:02:83:CD:B0:A5:E9:61:5D:2C
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01A1202012292075F7F70897945901E4CC4D
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/1E3phtp0P8gYJbkCg82wpelhXSw.roa
Signing time: Fri 09 Oct 2026 10:05:35 +0000
ROA not before: Fri 09 Oct 2026 10:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198024
IP address blocks: 185.127.72.0/22 maxlen: 22
2a06:c7c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:20:12:29:20:75:f7:f7:08:97:94:59:01:e4:cc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Oct 9 10:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d44de986da743fc81825b90283cdb0a5e9615d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:ce:76:aa:0b:c2:62:f9:85:54:1c:62:ee:
62:36:28:23:6f:c3:3a:4e:e2:05:42:7f:d6:c2:55:
40:4d:6d:d0:23:fe:17:cc:c6:96:6e:7f:fd:64:be:
b2:4a:8e:5c:cd:47:f0:da:27:4b:68:5f:45:6e:69:
f4:69:a0:28:85:5e:45:44:1a:72:9f:2d:28:21:ef:
a1:6f:24:f8:bc:37:34:1b:d9:af:10:ab:d0:d9:6f:
e7:92:1f:b6:c7:17:49:59:dc:05:96:0d:94:83:0b:
17:7f:3d:05:69:0f:69:c1:5f:53:16:c6:40:2b:38:
98:0e:bf:96:e6:e7:5e:e3:ab:8d:0a:ce:a2:77:84:
ff:ef:aa:51:cc:98:1d:94:f5:3a:26:61:a6:0d:82:
18:d0:15:5a:8d:61:46:8f:db:59:5c:bd:78:ce:6f:
35:ec:59:44:bc:63:09:07:71:15:63:63:29:59:eb:
97:a8:95:b9:48:cc:7f:de:15:3d:c5:f0:11:4c:70:
25:a1:9e:75:5c:8c:ed:e6:b9:e8:4d:7d:ae:51:2e:
c7:3c:03:78:4d:12:f7:41:6a:4c:5a:38:cd:90:09:
e3:3a:80:43:c7:78:3c:45:ca:2a:dc:29:f8:9e:e0:
45:16:3e:98:42:35:8e:a8:48:11:24:f0:da:3b:2c:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:E9:86:DA:74:3F:C8:18:25:B9:02:83:CD:B0:A5:E9:61:5D:2C
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/1E3phtp0P8gYJbkCg82wpelhXSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.72.0/22
IPv6:
2a06:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:06:d3:c0:21:d3:0c:04:19:5b:9d:b3:17:1a:ee:da:76:b0:
94:75:b0:c8:73:7c:18:e0:ab:81:e5:bf:02:37:50:85:a1:9c:
df:d1:3e:4a:be:ae:9c:b6:b4:84:cc:8d:f6:23:bd:a0:1b:74:
e2:53:7a:7b:bd:49:ba:4f:56:2f:b6:ba:d0:16:d4:60:bb:6f:
3d:3b:e0:07:ad:22:95:31:0f:4e:bf:a7:4a:f4:f5:a5:72:0e:
09:2e:ee:a1:73:ec:f4:19:3c:b0:ee:5f:5d:05:a8:f6:78:75:
b3:d2:35:74:8f:06:53:de:66:ed:01:9a:8d:e2:92:11:b9:5e:
72:e6:77:55:64:15:23:50:cc:3a:06:dd:e1:ca:4d:3a:01:84:
a7:4b:2c:d0:f8:55:b7:e7:06:9e:ad:06:71:8a:08:58:32:4b:
66:59:7f:d5:fd:12:13:da:6c:4d:db:19:7b:cf:c0:81:62:7b:
16:81:a6:0e:c8:c5:50:58:2f:b4:97:26:2e:78:29:2a:5c:17:
29:41:6b:c9:a5:9a:37:ff:09:80:a5:e0:90:3e:bf:9c:62:d7:
e2:9b:41:d4:d0:3f:89:85:c6:d3:8b:70:3f:4f:11:85:64:a4:
9d:36:20:05:44:69:47:2c:8d:fa:bd:ae:e9:be:35:aa:b1:e0:
00:70:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:12 2026 by rpki-client