Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/3M3gfxZWTlxlBNR3tYw4_tebKeM.roa
File: 3M3gfxZWTlxlBNR3tYw4_tebKeM.roa (raw, json)
Hash identifier: xsykozyPFY5/0PUbC/XmVsKSACxFGy1rLASCnELrsxA=
Subject key identifier: DC:CD:E0:7F:16:56:4E:5C:65:04:D4:77:B5:8C:38:FE:D7:9B:29:E3
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 019F23690CD5B71F23F593FF447A6E338A28
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/3M3gfxZWTlxlBNR3tYw4_tebKeM.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35197
IP address blocks: 185.61.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:d5:b7:1f:23:f5:93:ff:44:7a:6e:33:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dccde07f16564e5c6504d477b58c38fed79b29e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:57:45:a5:a2:5c:92:28:47:e0:c5:a0:83:
17:fc:dd:65:84:65:fd:1c:1f:05:0c:0a:83:0a:13:
91:a4:de:f2:5e:4c:e3:3b:38:44:ac:81:60:6a:07:
b5:64:f1:85:d1:10:8b:05:20:9e:60:bc:a9:86:86:
f6:a7:e8:c3:3e:e1:0c:9b:cf:f0:d5:c8:75:e2:a4:
61:bf:e2:6e:2e:f8:44:5c:48:c3:ca:79:50:5c:38:
54:19:47:24:16:44:c1:ef:01:9f:e8:23:5d:12:0e:
22:aa:9b:5e:e5:a6:8f:09:19:a4:7c:90:b9:ee:ca:
96:4f:ac:f4:70:92:b1:1a:1c:7e:68:c4:9d:13:dc:
47:9e:2a:72:db:ba:db:ce:f6:ba:b1:5a:e9:8e:5b:
65:47:8f:ab:73:6a:83:10:e3:d7:75:62:05:2e:95:
0f:90:fa:1c:97:b0:90:98:4b:4d:fa:c0:64:da:74:
e4:b8:a8:75:82:c5:28:d7:94:f3:c7:2b:b6:cf:ef:
d8:84:c6:17:a3:8e:33:79:0d:d5:7c:5f:e7:9d:09:
cd:ba:21:06:4e:77:13:9e:25:fc:c3:6e:39:6a:e2:
4c:e5:cb:54:42:3f:05:26:e1:e7:07:88:83:ac:67:
d3:10:6b:ea:43:df:f5:81:c8:68:ac:81:61:bf:4b:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:E0:7F:16:56:4E:5C:65:04:D4:77:B5:8C:38:FE:D7:9B:29:E3
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/3M3gfxZWTlxlBNR3tYw4_tebKeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.50.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5a:af:4f:00:30:70:7b:f6:62:c5:ce:fa:fa:57:93:42:bc:
a8:ca:3f:3d:a1:88:24:95:42:a4:2d:00:e3:b0:ba:a4:0e:6b:
1f:45:57:c6:30:da:04:14:da:74:45:aa:67:63:2b:42:9f:c1:
24:41:89:e8:f3:43:ae:1d:38:34:b8:c2:cc:7d:2a:82:e6:94:
59:8c:12:b1:97:98:47:46:cd:40:a4:51:93:66:7a:ce:59:a0:
9e:79:4e:c4:a3:fd:57:a4:3f:af:5e:5a:f3:ee:ec:11:05:cc:
b3:fe:59:c5:20:b3:32:23:8f:96:53:4e:31:45:6b:ff:7f:21:
74:fd:83:52:c3:b1:af:00:44:30:9f:1b:69:43:c0:39:f1:10:
05:cc:6f:f5:47:55:12:43:99:15:4c:81:47:bd:79:b3:c6:41:
d7:0f:9a:4b:31:ea:53:20:02:94:4c:ec:0b:35:81:d8:4a:1d:
15:48:b9:cf:2e:9b:ce:d5:37:ba:28:92:f4:36:f1:02:94:35:
3f:05:29:a9:e5:0a:51:35:a9:5b:ac:38:58:92:2f:8b:b0:52:
8b:72:34:e4:0e:fb:33:5f:5a:7e:b7:45:0b:4b:38:55:04:14:
a7:0d:d1:74:a0:6e:77:7a:51:57:71:77:01:0d:18:40:ff:44:
e3:0f:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:17 2026 by rpki-client