Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/3a6whgNOnjVnF4e4S-ogCQFOsh8.roa
File: 3a6whgNOnjVnF4e4S-ogCQFOsh8.roa (raw, json)
Hash identifier: x377l0lFFubgVtWrtGJ+BqQj6wDqENLADzHdG8Cowa4=
Subject key identifier: DD:AE:B0:86:03:4E:9E:35:67:17:87:B8:4B:EA:20:09:01:4E:B2:1F
Certificate issuer: /CN=4587a688a89a989949416a819cc4a80dea454c9d
Certificate serial: 01A0816AE305E88DED480908F94E8DDED350
Authority key identifier: 45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/3a6whgNOnjVnF4e4S-ogCQFOsh8.roa
Signing time: Tue 08 Sep 2026 14:27:40 +0000
ROA not before: Tue 08 Sep 2026 14:27:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8419
IP address blocks: 62.89.128.0/19 maxlen: 19
87.243.192.0/18 maxlen: 18
195.248.96.0/19 maxlen: 19
212.95.224.0/19 maxlen: 19
217.72.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:6a:e3:05:e8:8d:ed:48:09:08:f9:4e:8d:de:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4587a688a89a989949416a819cc4a80dea454c9d
Validity
Not Before: Sep 8 14:27:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddaeb086034e9e35671787b84bea2009014eb21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:91:e5:8e:c2:a6:1f:49:86:32:49:20:26:
06:53:e3:ee:41:1d:81:39:1e:8a:7e:d0:c7:84:53:
d4:06:27:ec:f9:c1:5f:fd:4c:1a:73:b8:16:24:ce:
4d:12:05:49:29:67:10:75:17:b6:03:bc:dc:95:08:
c9:f2:14:62:40:f2:64:db:01:80:d8:d1:f2:58:e4:
6b:a0:e5:f4:20:00:a5:b4:f0:19:23:a4:15:90:ed:
05:1b:70:42:7e:a5:1c:bb:00:71:d3:57:32:96:e4:
e4:56:0e:eb:ae:61:5f:a5:62:2f:62:fb:9a:6d:13:
90:78:6c:ef:56:4c:72:7f:07:50:44:1c:a3:7c:d1:
24:6e:d2:45:13:75:97:66:7b:da:0d:53:7f:71:86:
83:f5:9f:a9:6a:d3:60:0e:f5:ee:60:06:ef:17:bc:
c7:a1:d0:f6:73:b2:ac:b2:00:2d:ff:57:ea:06:12:
aa:85:cd:7a:b3:7a:3c:f7:f9:33:20:2f:70:18:be:
53:5e:ee:c4:74:c8:e9:ff:74:1e:cf:fc:de:53:62:
da:fc:d8:0a:e0:90:85:40:00:79:9b:71:b1:57:52:
ec:5b:cc:39:4f:f2:b8:9e:ef:ed:d2:5a:62:d7:af:
d5:05:f4:f8:9d:d0:4f:08:85:8f:15:ae:4d:16:f2:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:B0:86:03:4E:9E:35:67:17:87:B8:4B:EA:20:09:01:4E:B2:1F
X509v3 Authority Key Identifier:
keyid:45:87:A6:88:A8:9A:98:99:49:41:6A:81:9C:C4:A8:0D:EA:45:4C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYemiKiamJlJQWqBnMSoDepFTJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/3a6whgNOnjVnF4e4S-ogCQFOsh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/61d2b3-79db-4899-8b80-2f725956148f/1/RYemiKiamJlJQWqBnMSoDepFTJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.128.0/19
87.243.192.0/18
195.248.96.0/19
212.95.224.0/19
217.72.160.0/19
Signature Algorithm: sha256WithRSAEncryption
74:5f:1c:dc:b5:50:d3:06:f9:c5:72:21:fa:15:4c:1c:dc:ed:
0b:68:a5:a0:b4:49:00:61:e0:1d:da:a6:ff:d5:a6:5c:bd:55:
0a:b4:61:88:12:74:6a:13:02:dc:85:a3:5b:c5:2b:85:c1:05:
2f:86:b9:12:57:07:64:83:f6:1e:0a:61:d8:ed:a0:58:45:d7:
0b:86:5c:4f:2d:6c:60:a3:fc:bc:ed:fb:eb:50:bd:01:cf:e9:
46:b4:1f:9b:7f:aa:bd:a5:5d:eb:16:e7:17:8f:1c:88:19:26:
9f:60:6e:bc:03:b4:88:a2:ca:48:2c:4e:5b:ab:cf:81:8b:09:
4d:d9:a6:8a:88:14:51:88:31:8b:40:4c:a7:5e:2d:bb:8c:d4:
be:4e:73:50:6b:80:4e:0c:5e:2f:d2:b4:8c:6a:d9:cf:ab:84:
0e:bc:2c:2c:40:2f:e5:3e:15:11:57:fe:6c:0a:2c:38:48:3a:
ae:ab:a0:ed:20:0d:07:34:3e:f7:81:21:0b:e5:27:fe:ad:e5:
b9:c5:86:3a:ac:9a:3a:6b:37:1f:5a:d5:5c:1e:88:63:58:82:
aa:66:d5:de:39:c9:48:45:dd:30:60:74:dc:0a:a9:2a:60:16:
f6:7a:d9:7b:9c:8e:14:f8:d2:a6:ab:2e:ac:c0:b1:7b:82:32:
d2:3a:0d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:53:19 2026 by rpki-client