Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/r3HWDDRgTxZjt0f8A4zqbjMarks.roa
File: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (raw, json)
Hash identifier: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=
Subject key identifier: AF:71:D6:0C:34:60:4F:16:63:B7:47:FC:03:8C:EA:6E:33:1A:AE:4B
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019F6C3035C9601F1208EC30F92FA10D258A
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/r3HWDDRgTxZjt0f8A4zqbjMarks.roa
Signing time: Thu 16 Jul 2026 18:28:46 +0000
ROA not before: Thu 16 Jul 2026 18:28:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48732
IP address blocks: 195.200.235.0/24 maxlen: 24
2a11:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:30:35:c9:60:1f:12:08:ec:30:f9:2f:a1:0d:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Jul 16 18:28:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af71d60c34604f1663b747fc038cea6e331aae4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:09:dc:eb:13:1b:31:53:e2:d8:21:3b:cf:
76:b5:e4:80:60:c8:7b:36:28:8b:4f:b6:d1:21:85:
35:4d:e9:cf:b2:38:4c:3e:8c:b5:2b:14:3a:4e:49:
f9:52:fc:82:0e:4e:7e:2f:6b:52:2e:a8:34:58:3a:
81:9e:dc:3f:1e:70:f3:8c:06:06:fa:89:c2:59:83:
1a:d5:7c:54:0e:fb:61:ba:80:65:57:76:a4:02:e0:
1b:4b:55:67:a0:c2:7c:ab:0d:e0:e3:0f:2a:4a:9e:
e6:25:1e:15:b8:a9:e1:1d:cc:05:d4:21:9e:8b:1d:
93:8e:ae:19:19:0d:85:c6:17:bc:01:04:79:e0:dc:
1c:6e:9c:6d:a4:83:07:96:38:4c:d6:02:eb:c2:01:
c5:2a:00:b0:b6:93:fe:eb:de:9a:ad:63:c3:88:9f:
44:a2:cf:59:7f:ad:95:27:89:a2:d2:89:4b:e3:fb:
f6:32:a5:b6:f8:5c:c7:c0:37:2c:ec:52:34:c2:0e:
66:30:66:55:d5:43:4e:b0:4e:f4:12:b2:bb:74:d4:
21:08:10:56:17:95:21:d4:a9:23:bd:cd:a1:28:94:
14:ff:94:c7:e2:06:6d:75:8d:65:dc:5a:e5:6a:ba:
e3:0a:67:a6:9a:5c:24:f0:04:98:0b:20:1b:db:89:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:D6:0C:34:60:4F:16:63:B7:47:FC:03:8C:EA:6E:33:1A:AE:4B
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/r3HWDDRgTxZjt0f8A4zqbjMarks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.235.0/24
IPv6:
2a11:600::/29
Signature Algorithm: sha256WithRSAEncryption
26:7b:2b:4f:7d:c6:7f:67:e2:d0:3c:7f:15:2d:f8:b0:0b:1f:
20:76:52:18:c4:ae:a3:2a:dd:a9:0b:ad:83:65:c5:dc:38:b3:
73:ec:8f:ae:fc:b3:e1:e9:86:09:78:23:8f:6b:b1:40:62:5b:
16:29:8f:e4:e5:5d:9e:c1:02:5f:41:0b:fa:84:26:b9:81:d2:
99:46:64:bb:cc:41:5e:50:ee:89:ea:75:12:e1:ed:b7:a4:d4:
80:0b:88:fc:21:c3:1d:a4:00:00:52:c6:46:79:79:d0:a3:3a:
10:26:2f:5d:27:e7:b5:b5:7a:00:7b:ef:64:9d:c4:ff:6f:87:
e5:4d:7e:98:57:07:0c:47:3c:d9:86:d8:77:fa:8f:18:96:e9:
5e:af:a4:f7:ef:d9:d9:f5:79:73:b4:d9:5e:61:fe:75:53:7a:
b3:55:09:38:be:ec:aa:c3:5a:41:c5:34:b8:44:a1:fa:5c:9e:
e6:f6:50:b4:cf:ac:62:a7:33:fa:54:8a:f9:ff:7b:8c:7a:bb:
dd:f6:89:98:49:16:34:a2:33:a6:02:75:f3:8f:04:6f:ec:8d:
c0:d4:e5:bf:ab:06:3c:ab:97:91:ea:32:ef:a9:f2:82:05:c9:
10:e1:fb:88:7f:73:21:77:9a:af:85:67:c4:8b:4d:28:bc:dd:
e1:ac:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:27 2026 by rpki-client