Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/sz14VBxRIpqGXYJ3gs7N-duef7M.roa
File: sz14VBxRIpqGXYJ3gs7N-duef7M.roa (raw, json)
Hash identifier: iuoNPKOygQGtJNdRme+MrNnya4r/5gpGXaK9IsmECOc=
Subject key identifier: B3:3D:78:54:1C:51:22:9A:86:5D:82:77:82:CE:CD:F9:DB:9E:7F:B3
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019F800D7826B642DE4B1F0231F8F49842D8
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/sz14VBxRIpqGXYJ3gs7N-duef7M.roa
Signing time: Mon 20 Jul 2026 15:03:14 +0000
ROA not before: Mon 20 Jul 2026 15:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219193
IP address blocks: 178.236.34.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:0d:78:26:b6:42:de:4b:1f:02:31:f8:f4:98:42:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jul 20 15:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b33d78541c51229a865d827782cecdf9db9e7fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:d8:97:d6:aa:f0:cd:a4:3f:ce:df:c7:a9:
d2:6a:0b:ac:dd:28:9c:cf:4d:78:3a:40:05:cd:95:
77:08:e4:3f:94:da:2e:f0:63:92:8e:7f:84:b2:d3:
b6:1c:09:0f:36:19:84:ee:b8:59:eb:46:47:28:c6:
f0:da:ee:4e:6b:e0:e1:f2:2c:d5:16:0d:a6:53:26:
9f:6d:86:4b:ae:6b:59:0f:6b:e7:82:79:d8:81:da:
8a:3e:c4:d1:ff:7c:e7:3c:f6:e6:da:84:50:7c:cc:
36:cf:7a:8f:8e:9d:8c:6c:82:5a:68:2f:f6:b1:72:
a5:ff:b1:79:82:07:aa:7d:fc:37:f4:0e:b6:b2:54:
53:33:92:e2:7a:73:9f:76:36:ad:b5:61:8c:4b:7b:
41:0c:3b:7e:44:fd:d9:e3:a5:ad:0b:4b:cf:9e:3a:
7f:79:c2:49:f8:ec:fa:66:e3:61:47:bc:7b:ec:ad:
59:1c:e4:16:bf:3b:20:09:ed:81:d2:5d:27:ec:65:
73:67:1d:d2:3b:30:fe:e2:bf:ee:9c:f6:22:02:72:
1c:64:46:8f:a3:23:fd:8e:14:c5:a4:5c:c2:84:23:
9a:88:29:13:96:97:f1:2a:e7:13:0d:6d:69:12:cb:
a3:ad:c5:58:99:9f:76:31:76:f1:e9:73:31:29:09:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:78:54:1C:51:22:9A:86:5D:82:77:82:CE:CD:F9:DB:9E:7F:B3
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/sz14VBxRIpqGXYJ3gs7N-duef7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:db:78:67:8b:b2:d7:79:a9:88:f8:19:a3:f8:ce:15:ec:69:
f5:04:ea:f9:e8:04:5f:42:c9:da:01:5b:6a:3d:34:7b:33:6d:
fd:f8:0f:4c:2c:c0:e8:38:c7:28:85:84:89:08:99:a3:3f:1c:
3a:b0:ea:85:7e:48:23:df:7e:85:0a:8b:3a:c1:74:7c:dd:e5:
6c:cd:e1:a0:2d:f7:09:58:7e:0d:ee:71:57:7d:ad:34:23:af:
c6:4c:1e:36:27:d7:07:02:e3:59:ae:30:f4:30:d2:24:d6:b8:
a8:00:6e:2f:f1:4b:c2:11:d8:71:b6:71:db:2a:3c:bf:36:71:
58:ba:ff:b6:92:2a:97:91:bd:92:54:f3:66:12:34:2b:15:52:
c9:74:f5:27:ca:2c:ce:9f:30:bb:13:a6:9c:6b:89:9b:c5:7a:
5e:5d:ab:7b:c4:14:f8:ad:3f:96:7e:31:06:38:ad:66:dc:ac:
04:a3:bd:e4:94:4c:00:25:36:07:a3:53:f1:a2:f1:47:c0:79:
d3:2a:b7:ab:1d:40:1e:57:ed:f4:1d:35:4f:b5:ee:71:78:26:
ac:bb:c3:16:cc:d1:d6:eb:fb:ff:b7:1b:36:ad:50:3a:2c:39:
3e:15:18:c0:bc:90:aa:c7:5a:d5:66:ed:78:ee:ab:95:aa:ae:
4d:91:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:21 2026 by rpki-client