Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/3v3q9uaO0I3Nwhq561xaonM_DTU.roa
File: 3v3q9uaO0I3Nwhq561xaonM_DTU.roa (raw, json)
Hash identifier: MppwYTWzIUYUlGXSC1GNbatY5HoguqVx5TkngM8EEDQ=
Subject key identifier: DE:FD:EA:F6:E6:8E:D0:8D:CD:C2:1A:B9:EB:5C:5A:A2:73:3F:0D:35
Certificate issuer: /CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Certificate serial: 019D6C3361E9A18F308CC8445D4F8182460D
Authority key identifier: B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/3v3q9uaO0I3Nwhq561xaonM_DTU.roa
Signing time: Wed 08 Apr 2026 08:26:39 +0000
ROA not before: Wed 08 Apr 2026 08:26:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213759
IP address blocks: 194.50.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:33:61:e9:a1:8f:30:8c:c8:44:5d:4f:81:82:46:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2afaa440b2d6593a129feaa2a0fc31d1a3c5f81
Validity
Not Before: Apr 8 08:26:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=defdeaf6e68ed08dcdc21ab9eb5c5aa2733f0d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:e9:38:db:3a:37:74:e7:a8:67:2f:ba:2b:
93:dc:8c:7d:fb:fd:3e:e7:5a:f2:c0:04:95:ae:60:
3c:94:ac:41:cd:36:a6:0f:b6:64:a0:a7:71:a6:97:
74:58:7b:a5:f9:ab:d1:96:2d:c7:52:30:e8:59:32:
52:f6:0f:e1:2b:87:21:e7:8b:55:e3:64:44:cc:cc:
d6:cf:aa:23:db:c0:66:6a:18:d6:e0:c5:39:f9:f5:
bf:0f:0a:e8:93:d8:cb:f2:a6:83:69:2f:78:6b:a9:
d3:ac:e7:9c:d6:95:b1:aa:52:cc:ac:1e:b4:4e:f4:
c0:e0:a7:c1:fc:ea:67:bf:8e:7b:87:5a:0f:19:95:
b1:ff:54:14:6b:43:6d:79:ee:e9:63:39:96:88:2a:
2c:48:bc:a7:9b:77:f9:f7:0e:4a:6b:92:bc:53:c0:
3f:21:9d:ea:1c:c2:d2:25:b1:22:d2:9f:24:2e:58:
05:66:d8:f3:7a:23:fa:2c:94:80:79:12:aa:a4:a3:
0f:bd:c1:db:76:4e:7e:0d:00:b4:62:bf:51:fc:03:
c0:e1:25:5e:60:6f:21:1c:eb:8c:3e:ef:99:e2:59:
2c:01:a1:56:33:7b:a7:d9:69:47:c8:70:7b:4d:33:
34:dd:80:45:e2:08:08:82:a6:18:54:76:58:6b:9b:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:EA:F6:E6:8E:D0:8D:CD:C2:1A:B9:EB:5C:5A:A2:73:3F:0D:35
X509v3 Authority Key Identifier:
keyid:B2:AF:AA:44:0B:2D:65:93:A1:29:FE:AA:2A:0F:C3:1D:1A:3C:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-qRAstZZOhKf6qKg_DHRo8X4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/3v3q9uaO0I3Nwhq561xaonM_DTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/50c3d1-2bb0-469e-b9ae-345fcb6a07c3/1/sq-qRAstZZOhKf6qKg_DHRo8X4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:31:d5:7d:90:16:86:4c:c1:49:87:77:34:1e:00:e4:5f:fe:
20:2a:0d:b9:54:49:f7:76:f0:0c:a7:53:4e:fb:a0:71:e5:7f:
0f:cd:f5:71:0f:09:d6:db:05:7d:f9:bb:45:9a:5e:95:f1:6d:
6b:66:7f:c4:29:31:80:2e:b8:6e:52:b0:9b:56:a9:35:23:0a:
13:f9:59:c5:82:30:e9:58:37:f0:2d:cd:94:f2:30:6f:30:eb:
54:14:32:cd:7a:83:03:95:4d:40:c2:16:12:8d:19:57:f8:0f:
65:fc:21:c1:98:3a:6b:78:c9:43:0f:7f:db:59:7d:55:31:0f:
8b:01:66:0d:7e:48:64:ba:fd:b0:0b:0c:cb:9e:c2:5e:3c:b7:
54:27:46:3a:36:38:25:60:92:b5:2b:34:5a:00:9a:ed:84:c7:
f8:cf:5b:bb:33:66:c5:eb:04:ed:63:11:5b:22:02:bc:88:1e:
31:ba:0d:d3:be:d9:51:53:81:ba:58:45:2c:82:3c:4d:a4:31:
1d:2f:e9:ab:52:bd:08:85:e8:d6:22:87:ab:6f:55:f0:40:1f:
6b:bc:90:ff:71:49:82:9d:53:ee:cf:90:43:c1:f2:83:95:6e:
7a:b7:f2:cd:55:e1:ea:e6:ff:12:04:ba:d5:52:17:fa:c5:f3:
61:e0:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:17 2026 by rpki-client