Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3n9XizaKwZKT4WO2CLSH6P7jG-U.roa
File: 3n9XizaKwZKT4WO2CLSH6P7jG-U.roa (raw, json)
Hash identifier: 95g99Anf9OIfp+fQ7AnBYhYM1WI5W4uhm2PB27zdzWk=
Subject key identifier: DE:7F:57:8B:36:8A:C1:92:93:E1:63:B6:08:B4:87:E8:FE:E3:1B:E5
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01A1763EBEF2D4B11DA1EEB89F5BD364D967
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3n9XizaKwZKT4WO2CLSH6P7jG-U.roa
Signing time: Mon 26 Oct 2026 03:26:25 +0000
ROA not before: Mon 26 Oct 2026 03:26:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29752
IP address blocks: 104.166.158.0/24 maxlen: 24
193.118.96.0/24 maxlen: 24
2a0b:21c1:601c::/48 maxlen: 48
2a0b:21c1:602a::/48 maxlen: 48
2a0b:21c1:6030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:3e:be:f2:d4:b1:1d:a1:ee:b8:9f:5b:d3:64:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Oct 26 03:26:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de7f578b368ac19293e163b608b487e8fee31be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:96:c8:f0:29:9d:d8:60:6d:7e:f7:b8:1d:
30:99:ba:bc:25:e4:ac:3f:e3:93:26:fc:93:da:4e:
a6:07:09:52:a9:4a:0c:e2:1b:ef:a3:f0:1b:e3:20:
0a:35:c9:7b:df:d1:f8:7a:33:81:ff:e8:82:90:64:
b8:4a:36:66:d2:99:b6:e5:29:cd:1a:50:3d:23:d8:
54:11:a4:1c:0e:48:de:2f:b5:c0:cd:7e:f3:a8:5b:
33:a8:3a:b8:47:2c:7f:85:49:b3:41:26:e4:77:9d:
24:a5:f6:97:22:af:d0:14:92:b1:7e:f5:33:5e:d0:
9f:05:f6:0d:bd:ec:a8:97:9b:38:a3:f6:f2:0f:9a:
37:44:5f:89:a5:88:b3:34:89:e5:28:7f:42:a3:ec:
83:b7:d6:f7:17:3c:6d:76:0f:e2:56:0c:c5:f6:21:
22:6e:91:0c:55:8f:d4:10:08:40:27:06:ca:47:c2:
85:6d:55:84:dc:26:50:aa:ce:03:3d:97:d5:96:d9:
8a:c2:2d:7b:c0:93:9e:09:a3:0e:ed:5e:56:3a:ac:
d6:a5:f3:6a:3b:b6:af:2c:ec:59:11:d7:93:8a:4c:
e0:41:df:0e:1a:15:ca:5e:6d:96:6b:e3:81:3e:ce:
28:e0:36:f9:21:4c:b0:25:a1:db:1a:35:e5:df:77:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:57:8B:36:8A:C1:92:93:E1:63:B6:08:B4:87:E8:FE:E3:1B:E5
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/3n9XizaKwZKT4WO2CLSH6P7jG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.166.158.0/24
193.118.96.0/24
IPv6:
2a0b:21c1:601c::/48
2a0b:21c1:602a::/48
2a0b:21c1:6030::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3c:69:71:58:3c:85:8c:4d:99:56:c3:20:4e:cf:82:59:7c:
74:dc:bc:30:c4:b3:fa:b5:96:d9:62:01:fb:94:8d:1f:2e:63:
ae:ca:00:15:41:38:7e:42:fe:b5:ea:23:85:de:02:8f:36:8e:
77:04:b9:6d:a2:44:bd:e8:59:50:cb:6a:1d:cc:cd:be:c6:00:
f7:75:70:db:88:91:71:8f:23:58:7a:1a:3e:b1:db:7c:44:d9:
2e:b0:ae:a2:ae:98:e8:c6:08:59:00:c5:72:3d:a3:05:b7:6a:
44:d4:a0:42:0c:3d:bf:3f:9f:74:28:22:21:01:3f:59:35:1a:
f7:b8:a8:36:38:ab:fb:d9:7b:20:10:7d:b2:f3:8c:9e:11:bf:
ef:27:8a:1b:b0:4f:c9:b4:14:1d:9c:a2:72:7f:d8:54:33:af:
04:3b:9b:d3:90:be:f9:bb:4e:e7:02:47:97:d5:a2:9a:e5:d5:
f6:c3:6f:b8:e2:ee:51:63:0d:d5:23:4c:ca:a2:aa:78:e2:c3:
91:92:84:fd:20:ec:83:e2:76:93:33:0e:92:3e:06:41:76:97:
3e:96:1d:32:5d:7c:2e:dd:4f:af:b5:42:a9:f9:5c:4d:d2:86:
c7:66:2a:71:83:cf:3d:d5:39:9d:8c:ec:b7:06:f6:97:3f:43:
a9:b4:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:02:36 2026 by rpki-client