Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/3nvUvwvEjqd3uWLnNIzRMp_zPiQ.roa
File: 3nvUvwvEjqd3uWLnNIzRMp_zPiQ.roa (raw, json)
Hash identifier: ZMtKKhbkG+SDaRB5Lwcy2nYq4Nmjcr5Fa6/+zE0C+Ds=
Subject key identifier: DE:7B:D4:BF:0B:C4:8E:A7:77:B9:62:E7:34:8C:D1:32:9F:F3:3E:24
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A09452297FAF9EC5B4E368F89380D3FADE
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/3nvUvwvEjqd3uWLnNIzRMp_zPiQ.roa
Signing time: Sat 12 Sep 2026 06:33:27 +0000
ROA not before: Sat 12 Sep 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 2a10:de40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:52:29:7f:af:9e:c5:b4:e3:68:f8:93:80:d3:fa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de7bd4bf0bc48ea777b962e7348cd1329ff33e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:a3:f4:da:4d:85:03:60:9e:4d:c2:04:8e:
7e:ca:20:5c:f9:e7:4d:6c:48:dc:6a:12:75:6c:c5:
ae:0a:20:e3:84:2f:b4:cc:74:b3:95:bb:a7:cc:5a:
72:91:a5:9b:b1:5c:40:bc:e2:11:c4:40:b9:f0:47:
fd:1f:0e:59:97:e0:3c:30:93:15:40:9d:50:69:be:
88:b5:8c:a4:c9:58:26:cc:5f:86:c6:ec:c8:60:a4:
5c:5a:0a:05:26:6f:07:13:99:7b:3a:a1:bb:2e:74:
90:f5:61:00:46:7a:d0:f0:bf:63:1c:43:97:17:7e:
c4:0f:1f:7f:f9:16:dd:13:07:1b:43:eb:21:26:d4:
bd:37:a7:b8:4c:18:7e:cf:37:ea:52:dc:81:2d:52:
9e:3e:2f:b0:5e:45:ab:88:00:45:39:40:97:67:4b:
66:2b:28:2d:95:f5:b5:09:e7:b6:d2:5d:7c:f0:02:
e6:1c:90:be:cd:14:5c:a8:1e:63:74:fc:83:7c:10:
cd:64:b7:20:99:88:40:41:08:a7:10:f7:9a:8b:b1:
85:a5:6f:7b:61:99:2d:76:72:66:07:d4:b6:f8:cb:
59:22:c8:4a:44:ee:8c:46:ef:ff:a0:f8:17:31:96:
91:92:27:2d:4b:b8:6e:86:49:7f:e8:5f:86:3a:40:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:D4:BF:0B:C4:8E:A7:77:B9:62:E7:34:8C:D1:32:9F:F3:3E:24
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/3nvUvwvEjqd3uWLnNIzRMp_zPiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:de40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d8:c4:06:a8:8f:41:cc:d6:9f:eb:f9:c0:fd:4c:c9:19:fc:
bb:8c:1c:a0:4a:b4:c6:97:4a:ec:5b:e2:0b:14:84:4c:d0:02:
cd:8f:ae:a4:c2:90:55:8d:68:cf:16:3e:a8:b2:82:ac:8f:6e:
3f:73:e4:41:c7:4c:3d:8c:bc:e8:46:8f:cf:c3:42:ac:3b:43:
f6:c9:28:c7:9c:6f:dc:eb:0b:5e:99:e0:c4:76:e2:6e:dc:ad:
d6:f9:b5:f7:58:14:cd:87:46:76:9b:83:b1:a8:1d:b3:a8:73:
ae:d1:69:06:57:9c:8d:79:27:d3:64:e3:84:fc:c4:21:8a:0c:
57:9e:08:f2:5c:aa:0a:8c:dc:a1:54:53:c1:a0:90:18:46:b5:
85:42:53:9c:34:60:9a:3f:ea:e6:cb:3d:e7:fd:2d:17:47:95:
29:e3:66:67:a5:98:04:f0:f2:63:1d:f3:dd:7f:ca:4f:8c:d0:
80:55:ff:74:2a:b2:7b:e1:01:25:c1:78:c3:dc:f8:79:ab:96:
64:db:d3:22:c7:42:5f:98:d5:8b:da:33:25:41:3e:25:24:cd:
13:fb:d6:ba:30:98:ff:d5:88:85:76:ef:ee:3a:54:d4:92:06:
50:fa:c0:3a:e0:e3:36:8c:4f:be:20:08:c1:b0:a6:a4:18:e7:
a5:01:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:14 2026 by rpki-client