Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3HYeybmTfiqEClXjHy47MXcoy5k.roa
File: 3HYeybmTfiqEClXjHy47MXcoy5k.roa (raw, json)
Hash identifier: jb/IQ5A/rNfRWzTYcUNPR3NCp80xR6Y9L/b0ndydRqU=
Subject key identifier: DC:76:1E:C9:B9:93:7E:2A:84:0A:55:E3:1F:2E:3B:31:77:28:CB:99
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A08C1D46A7BB255859E7B99DC6FD466094
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3HYeybmTfiqEClXjHy47MXcoy5k.roa
Signing time: Thu 10 Sep 2026 16:18:43 +0000
ROA not before: Thu 10 Sep 2026 16:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 45.135.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:1d:46:a7:bb:25:58:59:e7:b9:9d:c6:fd:46:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 10 16:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc761ec9b9937e2a840a55e31f2e3b317728cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:27:cf:44:4e:2e:92:7d:e9:d4:31:53:f8:
fb:9a:64:21:cd:03:52:fc:a4:ff:01:bf:05:18:3a:
19:d8:95:a7:d8:a6:a8:b8:b4:c4:a4:7a:77:bb:b7:
76:38:17:32:b5:5f:13:6f:e7:b7:c5:b1:f7:30:86:
4f:af:ed:06:22:a0:72:58:80:52:d7:b5:19:79:3c:
92:7e:9c:a0:bf:1d:6f:69:f4:f3:cc:a7:68:9d:27:
8b:60:40:a3:04:ab:3b:52:d8:78:0f:e5:cc:cb:71:
36:93:13:db:76:2b:f4:e6:06:31:1f:84:71:be:70:
b8:01:46:03:9d:19:74:8d:51:63:69:31:51:b7:13:
9d:df:d8:88:0e:cd:2d:f6:0f:aa:46:e7:4a:7b:b8:
97:5d:47:8d:d6:bb:43:3b:42:a7:83:cd:79:bd:83:
a9:58:be:09:56:9c:f4:16:77:16:19:1b:67:e0:80:
9d:1c:91:df:79:a4:48:e5:1b:70:7e:f9:8a:49:89:
6f:ff:60:a6:25:60:20:e0:0b:94:05:cb:9d:68:cf:
7d:8c:d8:c8:df:21:39:23:d3:17:12:4b:6c:7e:e3:
13:10:47:6b:96:a2:dc:74:5b:da:2a:63:77:91:cb:
a3:7c:29:33:77:07:5e:cb:4e:c1:76:e3:00:aa:73:
84:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:1E:C9:B9:93:7E:2A:84:0A:55:E3:1F:2E:3B:31:77:28:CB:99
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/3HYeybmTfiqEClXjHy47MXcoy5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4f:2d:2a:16:aa:e0:b3:cf:f1:0f:19:42:76:2d:cc:4d:30:
39:c4:63:38:1b:92:f3:7b:0e:a8:bb:ea:64:5f:93:fe:ac:39:
07:60:65:9c:10:3f:67:dc:e9:73:de:62:4c:6f:c2:91:e2:8e:
9d:83:02:fb:5b:00:39:6f:29:da:a9:e2:a8:ae:37:23:a5:9a:
d6:1f:18:55:d9:a7:eb:09:94:ef:ee:56:46:ac:d3:8b:b3:a0:
d8:f4:14:8c:74:b2:7e:00:5b:30:01:f3:20:2e:72:2a:6f:8c:
2c:3c:f3:7c:29:86:d7:20:d4:a6:99:fd:62:de:03:58:bd:1a:
37:ba:89:71:a5:b3:d7:cd:09:55:fd:35:7b:22:74:9f:0f:4f:
2d:4a:d0:91:1f:94:7c:9c:9a:f7:45:ac:8a:90:43:bd:76:43:
70:75:cf:af:9e:a9:b1:72:73:d4:58:0e:81:ee:ec:76:af:7a:
7e:7b:7b:b1:48:ad:59:e6:ac:8a:56:95:31:51:b5:cd:60:01:
74:01:c3:7e:0b:78:a5:11:22:98:1d:9e:cf:98:82:90:c3:a2:
a4:a1:7e:77:75:ce:40:81:d2:4d:6c:1f:e0:b4:64:26:d0:d2:
61:5c:1b:b5:f0:72:bf:64:59:9e:3b:35:7f:89:c4:5d:14:f3:
b3:98:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:28:24 2026 by rpki-client