Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3_Sl2Ws3CkWWZnDv2RtiQz_w8no.roa
File: 3_Sl2Ws3CkWWZnDv2RtiQz_w8no.roa (raw, json)
Hash identifier: hDanu4qF1pT1/vswSHcJusJkjypL9tDnWW5XltHKCpY=
Subject key identifier: DF:F4:A5:D9:6B:37:0A:45:96:66:70:EF:D9:1B:62:43:3F:F0:F2:7A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1C18EED989A977E59632F87D9598A526B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3_Sl2Ws3CkWWZnDv2RtiQz_w8no.roa
Signing time: Mon 09 Nov 2026 18:25:32 +0000
ROA not before: Mon 09 Nov 2026 18:25:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 80.253.249.0/24 maxlen: 24
84.21.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:8e:ed:98:9a:97:7e:59:63:2f:87:d9:59:8a:52:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 9 18:25:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dff4a5d96b370a45966670efd91b62433ff0f27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:bb:7c:fc:01:a4:82:34:d9:f0:7c:af:7f:
99:d9:49:7f:86:5e:3e:6e:e3:8b:ad:a5:13:3f:09:
61:ea:2c:22:a0:62:1f:d5:78:6f:9a:2e:41:5f:57:
ae:a6:a6:0f:7c:d9:37:81:fa:da:3e:28:59:da:16:
16:d0:f8:06:3d:c4:34:17:1a:25:c0:80:6a:3d:66:
0d:eb:3c:98:af:df:a2:e6:91:46:39:79:ea:87:6d:
7c:25:b4:fc:7e:5d:20:1b:22:b1:17:82:70:79:e6:
45:d2:f9:14:03:03:8d:36:57:f1:30:85:fa:c8:86:
0f:ce:ef:96:98:a3:85:a5:e6:02:3c:bb:74:b2:76:
9d:61:a2:b6:e7:aa:7b:17:83:fe:f0:cc:83:15:73:
2b:97:d6:bc:6f:c3:0a:f5:0f:c1:2d:b3:00:a5:d5:
fa:b6:d1:df:77:8f:69:a8:4f:6b:49:28:62:d9:16:
f3:15:d7:25:84:e1:40:c4:74:25:79:81:ce:01:cb:
b4:09:fb:99:aa:4f:46:ce:1d:a6:50:25:a5:86:1b:
31:27:14:ab:3b:07:c3:61:68:c3:d1:e8:f7:3f:62:
1a:a0:a3:01:4d:62:7c:45:43:2d:83:7d:26:eb:d0:
ae:14:ac:2c:09:69:f7:5b:2d:be:5c:b7:73:25:44:
fa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:A5:D9:6B:37:0A:45:96:66:70:EF:D9:1B:62:43:3F:F0:F2:7A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3_Sl2Ws3CkWWZnDv2RtiQz_w8no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.249.0/24
84.21.189.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:c7:91:20:83:ef:d1:ff:97:ac:3b:3d:a7:32:1f:fe:c6:c1:
e2:40:3c:c3:90:1e:45:b9:42:aa:b5:9e:a0:5e:47:a2:7a:89:
0f:ba:40:d8:6e:4d:35:c1:73:2d:3c:48:bf:b6:4a:54:e8:a4:
95:2d:60:a5:29:1c:01:a5:97:93:be:67:68:e4:b5:b7:74:71:
ce:71:94:15:26:88:a5:46:ab:3a:70:52:d3:44:e9:10:d6:af:
27:a1:b7:1d:b8:14:4d:17:13:cd:97:10:16:6e:38:35:96:18:
b4:0e:7d:fc:79:bd:11:0e:34:59:4d:8f:61:71:01:20:4b:76:
6c:96:32:bb:0d:de:b6:ea:c5:95:26:84:1d:04:e0:c2:11:80:
e1:76:c7:41:03:bf:b8:a7:5f:cc:95:8b:c3:47:46:ad:54:af:
8b:d8:c6:de:09:61:66:15:00:72:99:d3:db:4c:d0:3a:27:32:
e1:c4:54:fe:a2:83:00:75:38:ef:ea:84:72:5c:15:9b:e2:97:
83:e5:20:db:b9:18:e6:70:e7:98:ed:d3:4c:aa:fc:21:fe:45:
d3:d9:18:58:4b:8a:a5:13:1e:1b:a3:52:eb:fe:a1:e3:4b:84:
ad:21:f4:c7:c6:fa:f9:df:32:5a:84:90:70:d3:89:8d:5c:3f:
fb:6e:00:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:44 2026 by rpki-client