Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/3v81jWmwGIghf6l1abg6waAEeoo.roa
File: 3v81jWmwGIghf6l1abg6waAEeoo.roa (raw, json)
Hash identifier: 2xCQdXuSHLV6YT0QssUgSQv/xmh0FjaCpT+b6qTdhnk=
Subject key identifier: DE:FF:35:8D:69:B0:18:88:21:7F:A9:75:69:B8:3A:C1:A0:04:7A:8A
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01A086575D729F3E29AE0BE4386099827F8A
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/3v81jWmwGIghf6l1abg6waAEeoo.roa
Signing time: Wed 09 Sep 2026 13:24:27 +0000
ROA not before: Wed 09 Sep 2026 13:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25011
IP address blocks: 83.68.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:57:5d:72:9f:3e:29:ae:0b:e4:38:60:99:82:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Sep 9 13:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deff358d69b01888217fa97569b83ac1a0047a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:12:f1:27:0f:2c:b7:96:f9:49:b5:b0:f2:
67:74:63:91:61:64:b9:29:fb:4b:c9:d0:af:48:5e:
b3:f5:bf:4f:01:92:75:51:f8:f6:30:1b:5c:ef:34:
c9:f9:c8:75:e4:c2:19:10:23:b7:48:13:1a:e8:f2:
29:4d:45:5b:ab:1c:36:40:8b:91:21:2b:bd:1d:6f:
dd:ba:97:7a:28:0a:f0:cf:44:55:7c:3a:61:32:80:
df:a6:21:70:cd:77:bd:83:9f:39:87:6f:e4:10:7a:
9b:86:15:52:a3:a2:ed:77:12:12:c6:d0:8e:e5:dc:
13:4b:bc:18:1c:28:6a:02:92:50:f3:47:5a:26:dc:
78:58:82:09:ba:57:cf:68:4d:77:20:85:63:39:82:
92:ed:d2:97:0c:ce:a0:92:ed:20:a2:6a:31:49:29:
de:04:0a:2f:cb:99:ad:a0:1f:f4:4f:61:d0:1f:a1:
28:fb:6e:94:66:95:8d:24:9f:ac:e8:3e:e3:32:3d:
6b:04:76:cf:ae:91:3a:ff:3d:37:cc:61:a2:e7:96:
94:c5:8d:e3:e7:7c:d0:c4:85:e0:73:31:5b:36:13:
27:62:c0:07:67:51:3f:39:c4:1a:bc:fa:69:77:b8:
5e:69:23:13:26:86:e8:10:48:fe:59:55:aa:75:6b:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FF:35:8D:69:B0:18:88:21:7F:A9:75:69:B8:3A:C1:A0:04:7A:8A
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/3v81jWmwGIghf6l1abg6waAEeoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.68.139.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:61:1b:ed:8c:45:02:43:3d:82:0c:92:2a:41:da:67:5d:0d:
b6:80:2b:69:2f:e0:b6:4a:b9:d5:a3:0e:4b:a6:56:ff:5d:96:
08:84:a6:b6:1c:f2:b2:aa:cc:7b:d0:f8:f2:8f:71:28:49:34:
73:0f:34:d1:99:b1:f9:ae:9a:a8:fe:ac:2c:ce:d8:59:99:b8:
97:b0:27:da:1c:e2:49:78:cc:28:b9:e4:a8:34:1a:90:29:a7:
b6:ce:9c:8d:70:3c:82:d9:ee:34:29:75:c1:0c:c8:c1:8f:73:
42:1e:80:57:f3:9c:75:04:6f:7f:37:93:ba:2c:4d:a0:aa:d1:
d6:76:ff:06:e2:24:58:23:ac:3c:ae:63:2c:17:3b:62:f4:80:
7f:ac:62:e7:48:89:69:e9:23:f1:30:96:57:de:15:22:f9:f8:
e7:df:23:2f:e4:47:3e:88:74:d9:e1:cc:b5:8d:43:b3:2c:72:
ef:a0:27:91:77:6f:54:93:d7:58:de:c1:84:7f:76:75:ac:82:
10:0e:bb:46:8c:d2:f3:95:79:62:a9:71:89:55:30:21:fc:3f:
ad:72:a8:0c:1c:01:28:27:df:6d:fe:20:fa:f8:5c:32:16:0e:
f2:7e:04:c2:2a:cb:0c:10:a0:40:c4:ad:81:59:85:e3:16:9d:
5a:32:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:09:10 2026 by rpki-client