Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/3Yvq5tTGUdx3znjurL4SYbCFM_c.roa
File: 3Yvq5tTGUdx3znjurL4SYbCFM_c.roa (raw, json)
Hash identifier: OInIxiYE9O8syisdzD08sKYvNZlMs2UIXQ8xrZomrKg=
Subject key identifier: DD:8B:EA:E6:D4:C6:51:DC:77:CE:78:EE:AC:BE:12:61:B0:85:33:F7
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019E13425CADC0845E6412ACAB513C162D43
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/3Yvq5tTGUdx3znjurL4SYbCFM_c.roa
Signing time: Sun 10 May 2026 18:59:36 +0000
ROA not before: Sun 10 May 2026 18:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 212.108.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:42:5c:ad:c0:84:5e:64:12:ac:ab:51:3c:16:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: May 10 18:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd8beae6d4c651dc77ce78eeacbe1261b08533f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:68:87:c4:df:d5:a4:20:39:cd:bb:5b:0e:
ea:5a:1e:48:ec:e6:3e:a2:ba:46:9f:c3:6a:8b:f5:
8f:ec:06:c7:69:7f:20:c8:00:30:9a:fe:39:c9:bc:
6e:52:d5:42:d5:54:ef:91:47:2f:13:c9:83:79:0c:
e3:ef:03:b1:e9:2b:96:fa:aa:23:9f:b9:ad:48:f4:
09:ab:7b:63:37:00:d7:b2:1b:b0:7c:49:ae:6e:0a:
c9:be:be:64:ae:02:28:0e:bb:0a:5e:9c:1d:9e:da:
89:d5:e1:2d:6c:a4:fd:83:50:9f:31:26:5a:9b:73:
18:67:b3:08:3b:8b:b8:a4:80:a2:f0:43:20:97:45:
76:4a:1d:5e:b6:c2:de:e2:03:f8:2c:a0:cb:e3:12:
ab:aa:a9:f6:5e:d5:34:aa:65:bb:33:89:c6:76:55:
a7:68:38:2d:16:68:06:4e:6e:83:49:22:3f:5e:d8:
6b:ed:4b:3c:f7:e4:18:db:40:ee:8a:6c:ad:0b:c7:
7f:d9:d1:04:f3:ad:f8:14:ae:9a:d4:dc:62:0c:c4:
fd:16:60:72:d8:27:a4:c7:8c:15:1f:f4:8f:6f:6c:
6b:29:ae:32:a4:d0:bc:9c:ba:9c:85:93:fa:b5:b6:
28:87:53:a2:39:79:14:e4:0d:ce:d7:2b:02:13:3f:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8B:EA:E6:D4:C6:51:DC:77:CE:78:EE:AC:BE:12:61:B0:85:33:F7
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/3Yvq5tTGUdx3znjurL4SYbCFM_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.98.0/24
Signature Algorithm: sha256WithRSAEncryption
30:67:1a:bf:2f:b5:d6:f5:a9:9d:45:e6:dd:1a:6e:64:0a:a8:
8d:6a:2f:c7:3b:1f:15:e7:89:8b:82:6a:54:f0:63:9b:5f:4e:
37:33:0f:7c:53:b8:7d:54:6e:1c:12:25:b3:41:11:95:41:75:
e8:ee:8b:e7:b1:dc:2d:d0:61:86:69:d1:82:e5:82:97:78:6d:
a9:3c:6a:a7:9a:11:a7:47:55:97:31:90:e1:33:26:aa:18:c6:
d7:11:a4:56:12:b3:20:fc:42:bd:4d:0e:c7:44:12:73:66:df:
cc:b4:7b:cb:34:92:bb:ab:1f:ef:d5:42:aa:41:70:32:d3:b0:
fe:11:ff:eb:c4:35:6d:51:80:63:b5:9d:24:70:8d:58:25:23:
87:fc:be:58:66:cf:87:85:fb:d7:ed:9d:2c:6b:9a:6b:69:12:
9f:3f:c9:9f:fb:1f:fe:ff:1d:33:2b:dc:20:5e:17:7e:97:70:
f6:64:89:0d:42:46:b4:7b:db:81:1f:b1:37:81:c7:bf:67:34:
ea:db:36:51:ff:ac:6c:ea:c3:8a:f1:b1:70:87:34:16:7d:a9:
2c:f3:75:bb:5e:bd:77:9d:50:c7:08:0b:a6:a6:bc:6c:73:2d:
b8:2e:58:89:d2:35:ff:4f:a1:b7:02:95:98:64:cf:1c:c8:50:
82:8d:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:34 2026 by rpki-client