Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3iuK2PePzlzkfIjA6PU7qCf7bWU.roa
File: 3iuK2PePzlzkfIjA6PU7qCf7bWU.roa (raw, json)
Hash identifier: jmTVl7eRtiftjiuAnsGPt6gtZDbCLdVGFoxxlHgA3Rc=
Subject key identifier: DE:2B:8A:D8:F7:8F:CE:5C:E4:7C:88:C0:E8:F5:3B:A8:27:FB:6D:65
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019F88B8B57CBD6A8E86F2AA2C99179E6650
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3iuK2PePzlzkfIjA6PU7qCf7bWU.roa
Signing time: Wed 22 Jul 2026 07:27:14 +0000
ROA not before: Wed 22 Jul 2026 07:27:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219537
IP address blocks: 66.228.84.0/24 maxlen: 24
66.228.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:b8:b5:7c:bd:6a:8e:86:f2:aa:2c:99:17:9e:66:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 22 07:27:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2b8ad8f78fce5ce47c88c0e8f53ba827fb6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:a4:36:09:98:5f:32:d5:7d:bd:78:e1:08:
4d:46:9c:7b:36:c1:36:31:59:56:1e:e6:1d:ac:df:
dc:c4:d9:eb:df:fd:0a:32:3c:ad:11:b6:74:9e:db:
94:dd:f8:2d:88:a5:80:e1:63:4e:13:77:26:27:f7:
7f:7d:37:60:9c:cd:35:e1:7a:b3:6a:73:60:2a:22:
03:bc:de:bc:77:47:87:91:84:ca:51:2d:84:60:62:
fd:81:ea:fd:4f:63:2b:c4:9d:85:4c:50:55:41:03:
1f:5a:f0:b0:e9:fc:5b:23:b1:8a:14:a0:b1:a8:94:
86:b2:1d:79:3f:a4:69:04:eb:4b:16:b2:1a:9d:45:
40:fc:0e:90:38:cf:b7:85:eb:c9:86:d8:ad:9a:87:
98:94:d7:69:cb:5a:e7:fd:06:9a:ec:e1:70:55:81:
a8:62:79:06:61:e8:5b:e2:20:b0:d7:51:eb:1f:e5:
ad:0a:ca:05:c9:f2:09:67:4f:7a:19:6a:3a:93:4e:
7e:fa:3c:26:09:31:63:0a:72:d3:ac:9f:29:6c:1f:
af:5a:91:a9:ac:c9:4b:be:ad:30:06:03:6a:7a:67:
bb:f6:ac:2f:9e:ea:94:0a:77:01:da:55:56:55:7e:
b1:c1:9c:ce:d1:b3:06:dc:47:05:5d:a0:24:be:cc:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2B:8A:D8:F7:8F:CE:5C:E4:7C:88:C0:E8:F5:3B:A8:27:FB:6D:65
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/3iuK2PePzlzkfIjA6PU7qCf7bWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.228.84.0/23
Signature Algorithm: sha256WithRSAEncryption
06:36:81:9d:c9:6d:18:bd:fc:f5:23:c9:aa:a3:cd:20:88:94:
de:94:cb:51:a4:e0:9d:05:1c:69:ad:e4:4c:36:6b:d0:3a:ce:
62:47:37:6a:9f:12:22:1c:d2:b1:06:ea:f7:15:83:6f:c5:f8:
24:32:7f:47:be:06:c5:30:2d:6e:2b:08:5c:58:19:4a:ea:39:
64:ad:6b:1f:b4:4f:10:3f:5f:5a:85:f0:68:f6:32:c6:fa:c0:
fb:0f:e2:02:86:a4:0a:1b:fa:95:f2:06:3e:79:63:ed:9c:b9:
18:5f:57:25:d7:dc:ce:bd:16:b9:60:59:c9:09:a4:10:7f:e5:
c2:15:74:a3:a4:72:25:df:3f:86:7e:f4:7b:50:8b:e6:eb:c9:
db:1d:44:a2:df:c2:d0:4e:e0:cb:6e:cf:7f:98:c9:d7:f7:7c:
6b:ca:49:75:1b:9a:14:86:73:d7:d1:2f:3b:32:35:aa:26:3f:
1d:19:4a:87:c3:2c:6c:05:4c:80:4d:b9:24:ae:41:ce:61:3c:
47:fc:4b:2f:e4:2b:05:7e:43:5c:f3:50:08:e0:78:a6:4b:74:
eb:80:53:37:53:43:5a:56:83:11:fb:f0:7f:d0:6c:02:b8:34:
1a:ed:6a:63:88:45:d3:59:52:b9:eb:54:f5:86:fa:ea:aa:08:
b5:aa:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:32 2026 by rpki-client