Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3qoSOoWryuSVTATolaxkkgcKNrk.roa
File: 3qoSOoWryuSVTATolaxkkgcKNrk.roa (raw, json)
Hash identifier: QYWNmWvYDwOZrbRshelMxUWXzvY4fDPle1gktcW1AUg=
Subject key identifier: DE:AA:12:3A:85:AB:CA:E4:95:4C:04:E8:95:AC:64:92:07:0A:36:B9
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A121FEE55915BCB2532420D02BD7BA8D15
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3qoSOoWryuSVTATolaxkkgcKNrk.roa
Signing time: Fri 09 Oct 2026 18:48:35 +0000
ROA not before: Fri 09 Oct 2026 18:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216246
IP address blocks: 2a14:a084:1000::/36 maxlen: 36
2a14:a084:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:fe:e5:59:15:bc:b2:53:24:20:d0:2b:d7:ba:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 9 18:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deaa123a85abcae4954c04e895ac6492070a36b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:24:e7:d2:eb:1c:32:89:b5:77:33:d5:07:
66:53:a1:21:9d:3a:33:a2:1c:d9:32:fb:e4:fd:3a:
a0:2f:47:85:67:ed:e4:31:17:c9:18:b0:63:e8:54:
69:25:74:78:21:dc:43:69:19:41:79:ae:d1:3b:c6:
cd:8b:f4:be:3f:3e:1b:98:25:52:51:a5:c5:00:60:
5a:36:5d:65:9e:bb:81:80:a3:66:c4:9b:4e:9e:73:
f7:b9:16:4d:f0:1a:bd:6b:3e:71:42:51:88:88:71:
e7:03:de:3b:d3:db:6c:be:3f:97:82:06:6c:93:20:
35:26:34:42:ef:d6:4a:bb:ef:cd:21:1e:f0:e3:5d:
80:49:be:56:00:3e:f7:fd:1e:46:b4:a1:46:c7:50:
58:33:60:6c:59:41:94:07:62:9f:ad:3d:5f:81:57:
08:b7:a9:00:39:4a:38:1e:38:e7:98:81:3e:c5:5b:
9f:a4:83:f4:f9:d3:68:10:f5:9c:cc:db:e0:af:ca:
e4:19:37:b7:f2:fd:f0:68:75:ad:ce:c0:5b:d2:c9:
09:51:9f:fb:64:86:89:b6:41:a1:df:d4:7b:8c:d7:
7f:b1:2a:1e:34:15:3a:50:8a:2f:b1:f8:c9:f0:20:
67:0c:6a:c5:c6:ba:21:4b:e9:19:18:7b:56:c0:2f:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:12:3A:85:AB:CA:E4:95:4C:04:E8:95:AC:64:92:07:0A:36:B9
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/3qoSOoWryuSVTATolaxkkgcKNrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:a084:1000::-2a14:a084:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:85:be:17:35:12:c5:54:b8:83:cb:2f:58:7d:38:96:ea:e2:
41:b1:52:b4:c5:44:b6:89:0a:34:59:fd:8f:25:11:1a:74:38:
7c:7f:a4:36:ee:5c:0f:91:cf:c8:73:de:6b:45:5d:9d:62:44:
8d:95:e4:21:f5:35:9e:29:93:58:51:b2:34:f9:a7:27:db:12:
38:ef:56:72:c0:92:eb:32:f9:64:ac:0c:bf:a0:a5:99:86:60:
4d:43:13:e0:fb:45:15:a6:55:23:8e:44:e7:b4:8a:98:fd:ff:
d7:ae:80:23:cb:5a:bb:65:f7:23:99:da:46:30:00:fd:3e:bf:
3e:9c:e1:88:aa:22:0d:c7:1c:83:24:bc:a8:b0:b5:8c:51:d9:
57:76:ff:f6:c5:2f:4b:59:df:55:41:bc:0d:53:9c:d9:86:49:
4b:8a:f5:2c:58:2f:8a:fa:57:c7:38:14:0e:32:1a:38:68:87:
97:8d:f0:7f:d4:2c:db:9c:c4:06:43:45:81:57:73:91:ea:15:
75:b8:fb:a4:63:20:35:f3:52:f9:0b:00:5f:49:a7:ed:fc:17:
7c:49:aa:76:9d:f3:19:0c:45:35:ec:ea:72:c2:d7:04:2b:bb:
d1:51:1f:8d:af:13:b9:02:ba:fc:aa:87:50:c2:d1:c3:bb:e1:
09:7f:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:50:26 2026 by rpki-client