Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/3i2zVkw6aach0o_CXp_SFGOpLVA.roa
File: 3i2zVkw6aach0o_CXp_SFGOpLVA.roa (raw, json)
Hash identifier: Y97XAK1phbFipWlwjVjm6O/rcJme8j23ZjHd436Q+2E=
Subject key identifier: DE:2D:B3:56:4C:3A:69:A7:21:D2:8F:C2:5E:9F:D2:14:63:A9:2D:50
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A0C972ED06A4C253D12A42F06AD4B0C777
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/3i2zVkw6aach0o_CXp_SFGOpLVA.roa
Signing time: Tue 22 Sep 2026 14:09:07 +0000
ROA not before: Tue 22 Sep 2026 14:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 159.84.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:72:ed:06:a4:c2:53:d1:2a:42:f0:6a:d4:b0:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Sep 22 14:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2db3564c3a69a721d28fc25e9fd21463a92d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:77:47:38:bf:a7:c0:39:d0:6d:e8:4c:cc:
ce:e2:26:59:64:7d:c7:b7:9f:5d:33:fb:97:b3:b1:
b4:23:bf:fa:e8:8e:90:ea:70:8a:a9:07:5e:0b:95:
9b:e5:c7:ee:0f:aa:a6:d0:63:f1:c2:5a:41:4e:e2:
18:af:15:44:77:a4:71:13:8c:db:39:f2:9b:49:92:
5b:4d:94:89:73:41:b9:fe:34:57:7b:3e:5c:be:c4:
9a:00:63:c6:79:d1:66:9e:63:71:cb:b0:e3:fa:3f:
83:4f:93:94:01:82:38:ba:5a:07:53:99:83:0a:68:
95:a5:fc:7e:f7:c6:db:cd:4a:4e:35:ab:ae:77:50:
82:59:3a:45:8e:71:f2:b8:fa:bb:29:34:98:74:00:
5f:a8:f2:0b:ce:e4:f7:db:2e:69:bf:d6:1c:28:10:
c2:6c:8f:c7:90:09:49:2e:18:b4:df:c9:57:e1:63:
ad:96:27:0e:3a:96:bf:7c:0a:d5:de:11:e2:44:c1:
4d:1b:15:c7:bb:f2:62:06:00:a8:fe:25:af:e5:c3:
a7:7f:64:25:8f:59:28:73:10:58:72:80:55:1a:ba:
62:c9:39:3b:fb:df:cc:5a:3a:9f:bc:09:30:0f:c6:
b0:3a:0a:a5:84:9c:3e:e6:45:6a:b1:1f:c7:70:2b:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2D:B3:56:4C:3A:69:A7:21:D2:8F:C2:5E:9F:D2:14:63:A9:2D:50
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/3i2zVkw6aach0o_CXp_SFGOpLVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:af:44:28:89:81:9d:a8:f1:b7:87:f9:17:98:12:27:37:b1:
a5:56:51:a3:4e:4c:27:82:38:11:f7:32:db:5f:d1:1d:c6:16:
e8:83:89:ec:d0:d1:a9:64:d1:1c:e9:ac:90:53:96:cc:88:2f:
0b:7a:00:32:4e:08:f2:66:eb:52:e5:f4:a7:c8:d8:d2:f3:de:
56:70:2a:f2:06:62:98:e8:2a:59:27:f5:a8:0e:3f:3d:a9:0f:
c6:1b:df:a2:3a:72:c3:e7:0a:d7:45:91:3e:0d:ef:99:ff:b9:
88:44:cc:a8:78:70:71:de:e9:26:26:35:69:74:6d:4e:f8:37:
67:c5:a7:49:e8:7d:c8:c6:5d:84:73:d9:49:8d:9d:7c:7f:47:
61:43:09:9a:b3:33:eb:0e:fa:77:88:cb:7c:45:4a:ce:27:ac:
ee:41:b2:83:20:68:9b:87:02:ed:c1:fb:2e:32:b7:66:5f:07:
93:57:db:d5:26:4c:d4:37:ab:e2:93:5a:4b:7f:16:18:ee:bd:
25:94:f8:b6:c6:f1:a1:42:78:66:d9:67:47:5d:fd:1b:ba:6a:
66:75:02:ee:a5:b4:6d:91:79:3b:3d:7a:f9:a2:a8:3f:0e:3c:
7d:07:7c:02:f3:12:95:95:4d:86:10:e2:18:a8:f8:e0:a4:9a:
18:7b:3f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:47 2026 by rpki-client