Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/s7NOa3tdTv46yOJCv92uI2UB4zs.roa
File: s7NOa3tdTv46yOJCv92uI2UB4zs.roa (raw, json)
Hash identifier: 5hs9AfN14zEIY9p9/O6GJm1GkUBmXkj+TK1asikXhNI=
Subject key identifier: B3:B3:4E:6B:7B:5D:4E:FE:3A:C8:E2:42:BF:DD:AE:23:65:01:E3:3B
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D0B43DB365D32DAF1BC60F137B238DCB6
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/s7NOa3tdTv46yOJCv92uI2UB4zs.roa
Signing time: Fri 20 Mar 2026 12:41:29 +0000
ROA not before: Fri 20 Mar 2026 12:41:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199929
IP address blocks: 132.243.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:43:db:36:5d:32:da:f1:bc:60:f1:37:b2:38:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Mar 20 12:41:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3b34e6b7b5d4efe3ac8e242bfddae236501e33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:65:11:6b:e1:a8:ac:db:24:9e:0b:c1:1f:
13:fa:39:08:64:98:4d:c6:58:51:79:69:23:9f:63:
b5:71:9b:1d:f7:c5:fe:80:8a:28:64:a1:3b:bf:f0:
1d:9b:b3:fd:d6:95:d4:2d:45:74:ea:46:2a:94:d7:
54:34:69:c6:72:53:b6:8d:2d:47:4e:64:e7:14:f7:
20:50:14:5f:e6:b3:7d:6d:77:0f:c7:37:f3:ad:dc:
0f:fc:32:68:b4:5a:13:6d:22:11:77:2b:87:c2:93:
78:4e:45:85:52:dd:61:a7:c7:d8:db:37:89:72:68:
e3:fd:c9:2c:52:37:57:05:47:ea:7c:90:9b:be:4b:
d9:bc:99:b6:e7:99:4a:76:12:fc:1a:7f:e9:31:38:
da:47:fa:3d:88:b1:83:81:3c:45:af:b4:8c:25:6c:
6a:7b:4b:fe:84:9c:66:af:31:c8:55:54:9d:45:2a:
d3:2f:ec:d7:3d:18:9c:98:e6:67:bb:c8:e5:65:06:
e5:97:8e:ed:54:bf:6a:a5:6e:99:2e:4c:8c:8b:3c:
3e:b1:ee:ea:bb:dc:60:6c:7e:9d:97:e6:d1:a3:50:
da:46:0c:7b:c0:6b:9a:5b:cf:6a:ce:4e:75:97:d6:
72:0b:f8:d0:0a:91:7b:36:21:1c:b2:3b:a6:e5:da:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B3:4E:6B:7B:5D:4E:FE:3A:C8:E2:42:BF:DD:AE:23:65:01:E3:3B
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/s7NOa3tdTv46yOJCv92uI2UB4zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.196.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f0:ce:34:1b:88:db:3d:46:03:52:20:c8:17:a4:85:72:5b:
c5:f7:5f:62:0b:6e:39:44:c1:de:5a:08:71:bb:e5:f4:83:5e:
55:15:9d:d2:e0:9e:c3:41:4c:f3:2e:23:4c:9e:dc:c5:47:07:
40:92:e8:b9:b5:d4:c7:3f:4f:d0:40:a5:a1:2a:ce:2e:27:15:
1e:b0:04:10:6a:e5:04:0a:f1:5e:35:ad:05:0e:b9:12:1d:f9:
f1:b9:a2:ec:1a:6c:a6:d1:16:9a:c7:35:be:4d:87:c8:53:01:
8c:41:fc:f4:bd:3d:5a:dc:f2:bf:0d:1b:6d:a8:19:20:11:a8:
ef:d9:77:f8:2c:85:ef:47:f6:f4:d3:b5:39:96:1a:04:c6:0b:
4a:8e:9a:3d:03:ac:08:c4:26:8c:ba:fc:33:8e:dc:36:0b:72:
fd:89:9f:2e:e5:ac:dc:56:5d:07:9a:12:af:33:7e:c8:8c:1f:
2e:d2:3e:8c:b7:1a:25:4b:91:09:d6:61:10:37:b2:45:a5:40:
e1:74:e2:d6:ea:1f:07:21:44:a1:bd:8c:2b:9c:6a:82:98:28:
c5:ed:36:7a:cf:22:e1:27:09:8c:ad:6c:f8:76:ca:dc:59:23:
52:1d:b9:22:61:91:a9:9b:0b:6d:55:38:06:b2:43:92:8f:db:
49:22:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:46 2026 by rpki-client