Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3SHL_6Ls-0VRRa-Dfz9ByfuLpxg.roa
File: 3SHL_6Ls-0VRRa-Dfz9ByfuLpxg.roa (raw, json)
Hash identifier: 83IwydobDC2Q+h5hToO++Xp+ZTFRKP/4oEVfUWlboGY=
Subject key identifier: DD:21:CB:FF:A2:EC:FB:45:51:45:AF:83:7F:3F:41:C9:FB:8B:A7:18
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A17605FB8120047889C001E72045C86D71
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3SHL_6Ls-0VRRa-Dfz9ByfuLpxg.roa
Signing time: Mon 26 Oct 2026 02:24:25 +0000
ROA not before: Mon 26 Oct 2026 02:24:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15440
IP address blocks: 222.167.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:05:fb:81:20:04:78:89:c0:01:e7:20:45:c8:6d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Oct 26 02:24:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd21cbffa2ecfb455145af837f3f41c9fb8ba718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:76:2c:ee:ca:52:c3:62:1a:9e:2e:98:e5:
c8:99:73:c5:13:b7:94:f2:bd:b8:b0:84:72:72:1f:
17:81:46:04:3e:30:28:4e:3f:f0:6b:4e:cc:3f:71:
0f:41:a8:81:3e:01:9d:a1:f9:89:66:19:53:80:83:
64:7a:40:55:6f:0c:a8:1f:40:d3:60:ea:7c:95:ef:
90:ab:52:ca:73:d2:68:48:1c:78:d1:1a:04:0b:c6:
fd:a7:06:ab:a4:ed:74:54:0e:09:e5:10:f0:26:c2:
ca:9c:03:dd:2b:d8:a1:56:73:82:e8:71:40:f6:23:
aa:ab:8a:4e:c2:8b:eb:da:3a:ad:66:5b:43:f9:0d:
9b:12:43:fa:1b:a0:59:3b:aa:66:fb:30:10:83:09:
86:eb:4f:3f:c6:b0:1d:68:1b:24:84:6b:74:08:e5:
5e:ab:b4:82:d1:a9:71:60:11:4a:61:2f:94:40:89:
f2:d8:74:96:20:7d:fa:b4:6e:5f:f6:6d:7c:9f:25:
15:97:e2:e2:d1:ec:a8:2b:e4:72:63:60:f8:4d:12:
37:67:4a:98:f0:5d:0a:5f:f3:be:2a:e6:ff:7b:7f:
3f:61:8b:1e:2d:e7:79:fb:84:7a:d2:94:3c:e3:19:
95:05:0a:2b:11:12:f0:35:e8:d7:bc:21:20:fb:2d:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:21:CB:FF:A2:EC:FB:45:51:45:AF:83:7F:3F:41:C9:FB:8B:A7:18
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/3SHL_6Ls-0VRRa-Dfz9ByfuLpxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:06:86:62:94:9d:37:59:49:ae:5e:46:9e:a3:d9:9e:57:61:
7f:49:05:f0:a1:47:dd:12:33:b9:45:ac:8b:9c:bd:3f:f8:0d:
73:64:78:c9:5f:7f:a7:f0:97:74:8d:ae:59:ce:ad:1f:08:58:
ad:ad:cb:7d:e8:76:ba:ff:68:f7:83:60:41:6e:81:94:49:4f:
9b:4e:cc:65:8e:f2:f8:69:4d:f2:c3:a1:b6:b9:c2:85:72:78:
26:75:d1:1d:75:32:39:1f:d5:6c:f8:04:f5:5f:11:e9:53:18:
f0:b0:11:62:41:66:51:d9:22:f6:d3:7a:67:39:b6:5a:53:b3:
0e:56:1f:15:bb:e5:50:79:bd:0a:31:d2:09:da:f6:9c:67:dc:
3a:ee:d7:c8:5e:da:73:e8:38:6f:90:32:8d:7d:74:78:18:e6:
24:ff:d8:c0:60:39:16:55:0c:e3:9e:ea:02:bc:ef:cf:8c:4d:
16:ca:66:ed:27:10:2d:31:df:88:f1:5d:b3:0e:1b:e5:6c:9a:
84:5b:cd:c7:bb:21:37:63:b4:d1:9f:1d:de:cf:8c:1e:1e:d9:
15:e7:4a:d0:2b:8a:3e:f8:44:d2:36:15:07:b5:1a:d1:6e:e0:
7e:00:82:15:51:b4:c5:c8:b3:d2:14:52:0c:a6:11:81:f4:6c:
5d:b1:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:09 2026 by rpki-client