Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/K3WPtEds72g1cQhuor2s_iyJzxI.roa
File: K3WPtEds72g1cQhuor2s_iyJzxI.roa (raw, json)
Hash identifier: 7KKfVLYd49dSdnc6s8rw0U4kYwMx/04Z/JIIgLsbcMQ=
Subject key identifier: 2B:75:8F:B4:47:6C:EF:68:35:71:08:6E:A2:BD:AC:FE:2C:89:CF:12
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A11EFF3F621874E71AA06ECCAF45E0C3DF
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/K3WPtEds72g1cQhuor2s_iyJzxI.roa
Signing time: Fri 09 Oct 2026 04:50:06 +0000
ROA not before: Fri 09 Oct 2026 04:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49199
IP address blocks: 62.76.74.0/23 maxlen: 24
62.76.96.0/23 maxlen: 24
194.226.34.0/23 maxlen: 24
194.226.137.0/24 maxlen: 24
195.19.10.0/23 maxlen: 24
195.19.27.0/24 maxlen: 24
195.208.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:ff:3f:62:18:74:e7:1a:a0:6e:cc:af:45:e0:c3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Oct 9 04:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b758fb4476cef683571086ea2bdacfe2c89cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:fe:60:f2:7c:98:15:08:4a:47:60:13:24:
43:09:69:a5:1f:bf:09:62:96:f5:7d:44:58:da:07:
0f:b3:4f:a4:f5:8b:36:f8:7f:cf:ed:9b:89:29:7c:
ae:0a:8c:ea:74:b4:d8:91:d9:bc:b0:38:34:de:b5:
e1:2c:b5:b4:d2:bc:77:29:80:0d:6f:d5:f2:90:6d:
52:74:79:0f:e6:86:78:63:cf:ff:32:d8:aa:9c:1f:
10:59:27:b2:61:5e:f0:b3:f6:86:f1:5f:89:49:71:
d2:f4:e9:55:90:03:67:a8:cb:71:19:68:80:a8:0b:
cd:21:9b:a1:25:09:8d:7f:eb:49:a7:25:3e:8b:0b:
39:05:3a:11:ed:22:42:6d:29:c8:60:e2:e6:b5:6e:
15:19:90:99:76:ed:99:8d:67:14:03:ef:a8:0b:b8:
9b:d8:55:18:62:ae:94:b4:21:0c:f9:6b:3e:a4:60:
85:e5:3d:e0:e1:18:08:89:51:d3:a2:9d:79:d9:7b:
f3:ad:78:a4:e5:8d:f3:cd:8c:e1:bc:f3:f8:08:a7:
6b:a9:24:76:d5:50:cc:43:d0:ea:89:0b:d1:5f:c3:
8f:d2:7e:75:ec:f9:c3:e5:b1:86:03:5f:e1:1d:e7:
55:df:48:29:ec:a0:aa:11:1e:6e:a6:7f:51:46:d8:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:75:8F:B4:47:6C:EF:68:35:71:08:6E:A2:BD:AC:FE:2C:89:CF:12
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/K3WPtEds72g1cQhuor2s_iyJzxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.74.0/23
62.76.96.0/23
194.226.34.0/23
194.226.137.0/24
195.19.10.0/23
195.19.27.0/24
195.208.220.0/23
Signature Algorithm: sha256WithRSAEncryption
34:d3:a3:11:d7:fa:0c:a7:cd:e9:2c:10:82:f9:70:68:79:31:
aa:e9:17:ee:ae:28:7a:74:b2:fb:1f:27:d1:55:d8:14:5e:98:
94:93:7c:b0:36:b4:99:bd:c9:f5:c4:2c:62:5f:bf:4f:9d:83:
64:57:0f:19:4b:a2:fb:25:ae:e0:b7:2f:8c:f0:55:3a:c2:d0:
78:c6:9a:9c:56:f1:a2:7a:11:1a:f9:e6:74:82:eb:0f:db:a2:
a7:43:5c:4e:f8:a8:f8:bf:bd:90:6d:02:f5:c3:93:0e:d9:70:
2d:a8:64:9c:98:62:4f:55:20:62:2b:75:69:c4:a0:10:47:ee:
9b:e0:3a:05:97:15:e2:87:e8:d5:ac:36:d3:7f:98:a5:4e:18:
21:70:e5:f5:81:62:65:c4:6a:82:c6:8d:d2:ab:c4:d1:2d:93:
f1:74:bb:96:74:dd:7b:a1:3e:b3:b1:8d:ba:d2:1a:92:ed:1f:
39:c8:b5:87:72:6f:6e:2f:65:43:10:0f:71:4f:36:9f:20:22:
f3:b0:ba:87:d0:01:df:ee:44:cc:a8:b8:9d:a9:68:eb:01:0b:
e4:0e:0b:58:0e:20:a1:97:3c:2e:a1:56:9f:67:18:38:4c:82:
8e:eb:ab:0b:2b:d4:98:97:5c:da:d7:d4:99:fa:0c:6c:3a:05:
23:ad:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:26:10 2026 by rpki-client