Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/4NzEVadCmy_c_rfb2yC17CRbiPw.roa
File: 4NzEVadCmy_c_rfb2yC17CRbiPw.roa (raw, json)
Hash identifier: up/hCbMC+lT39FafzSp9s/xSEH9WLx3l5PerUqpItUQ=
Subject key identifier: E0:DC:C4:55:A7:42:9B:2F:DC:FE:B7:DB:DB:20:B5:EC:24:5B:88:FC
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 019F0B33DD6AFFFD75A9390448C5BE5C0C78
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/4NzEVadCmy_c_rfb2yC17CRbiPw.roa
Signing time: Sat 27 Jun 2026 22:29:36 +0000
ROA not before: Sat 27 Jun 2026 22:29:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 2a01:f3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:33:dd:6a:ff:fd:75:a9:39:04:48:c5:be:5c:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jun 27 22:29:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0dcc455a7429b2fdcfeb7dbdb20b5ec245b88fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:77:92:3e:e3:e7:f1:1b:15:60:b6:b8:89:
f3:54:48:1a:20:7d:81:75:00:0a:c2:75:98:51:18:
a9:e7:48:1c:9b:07:8e:18:3f:6b:e1:aa:08:cd:a5:
7f:27:a5:0c:60:8a:4a:87:88:b4:bc:36:75:c7:d9:
12:ad:89:55:89:b2:23:6b:d7:1a:54:9c:63:b6:ce:
e3:f1:b4:8f:96:1f:71:fc:a6:a6:21:39:0d:1a:10:
8b:6a:9a:b8:5e:92:03:47:55:d7:d0:dc:fb:5a:58:
40:40:6f:8e:fc:86:18:95:29:26:02:64:d0:46:97:
82:2d:c5:16:ea:31:3e:f5:29:af:0c:a7:95:24:eb:
88:db:21:aa:b6:90:1f:9a:7a:a9:43:e9:3c:bf:f2:
2a:43:46:23:fe:7b:34:35:11:89:36:74:e0:29:45:
35:2d:6b:1b:3b:72:cd:8e:08:af:e6:a8:78:15:e3:
2c:14:86:03:c8:52:26:fa:9a:cc:f0:3a:05:b3:66:
7c:6e:3f:34:a0:08:d3:6e:db:62:3a:e8:38:ca:42:
6e:9f:b9:51:59:ff:cc:c6:1e:40:f1:11:eb:38:34:
02:8a:0a:7c:d4:71:f8:d6:c7:bc:9c:f3:7a:28:99:
c6:3c:9f:14:1e:2a:84:27:4e:e5:1e:23:9e:54:3c:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:C4:55:A7:42:9B:2F:DC:FE:B7:DB:DB:20:B5:EC:24:5B:88:FC
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/4NzEVadCmy_c_rfb2yC17CRbiPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:50:15:60:db:21:d8:a9:f5:02:b7:64:09:3e:58:90:9e:b6:
97:39:30:df:fd:2c:d0:06:12:af:68:42:ff:86:f3:29:83:87:
9d:b7:1f:ee:07:3d:00:bc:87:84:51:91:e0:96:86:0c:5b:07:
a1:a6:53:16:b1:06:06:d8:ba:c9:dc:77:7a:66:ea:cf:b2:64:
41:06:ee:e2:9b:6b:56:11:e5:4a:1f:fa:f3:02:b9:84:f7:51:
29:dc:ab:fe:ba:8d:44:92:51:fc:00:b5:9c:28:22:d1:7d:2a:
d1:dd:e4:d9:5e:4a:68:10:35:11:39:2d:eb:f7:08:c6:95:f3:
76:e4:c9:6a:c3:a6:b6:bf:46:62:e0:d1:a9:e9:9c:dc:20:21:
68:6c:cd:0d:a7:df:ec:59:a5:ea:75:c0:2f:31:4f:88:ef:66:
bd:50:8e:4b:8f:66:c9:16:2a:a5:8d:90:4a:e0:52:5d:5b:11:
92:e7:a3:f6:18:78:19:33:0c:0b:44:94:28:ee:95:9d:0e:b0:
73:d6:41:be:8b:6c:98:65:53:9c:92:88:07:d2:e7:cd:7f:76:
1e:06:d9:05:1a:f2:65:cb:fa:62:97:dc:7e:d1:2f:17:31:22:
00:52:9c:5c:fc:38:2d:6d:46:c9:e0:27:74:37:05:6f:80:c6:
d0:3d:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:47 2026 by rpki-client