Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/3i_MyugnFkzA6fvPjY7PQjVTJrs.roa
File: 3i_MyugnFkzA6fvPjY7PQjVTJrs.roa (raw, json)
Hash identifier: jNC916xfCChHXBipTRQBwXrX9AWGVhyR4ic3PxOPjrg=
Subject key identifier: DE:2F:CC:CA:E8:27:16:4C:C0:E9:FB:CF:8D:8E:CF:42:35:53:26:BB
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FCD7886E03DC385F7E364931ACBC06C4F
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/3i_MyugnFkzA6fvPjY7PQjVTJrs.roa
Signing time: Tue 04 Aug 2026 15:50:55 +0000
ROA not before: Tue 04 Aug 2026 15:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216039
IP address blocks: 2a0d:d940:600::/42 maxlen: 42
2a0d:d940:640::/42 maxlen: 42
2a0d:d940:680::/42 maxlen: 42
2a0d:d940:900b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:78:86:e0:3d:c3:85:f7:e3:64:93:1a:cb:c0:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 4 15:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de2fcccae827164cc0e9fbcf8d8ecf42355326bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:bb:0e:f7:dd:bf:70:18:0f:b2:72:bb:1c:
ac:77:7a:f3:f9:28:ff:f6:51:81:62:98:5e:69:2c:
d2:a7:32:79:65:60:04:74:48:70:f3:95:9a:15:69:
f7:2d:da:10:d6:49:93:2e:2f:e6:4e:1d:d8:a4:bf:
20:30:0d:3d:ae:57:27:c3:e8:9b:b7:60:11:1e:2e:
92:8e:b7:4f:47:74:5e:68:96:15:83:80:97:b7:8e:
59:e5:7d:3d:54:e0:83:0f:10:40:3c:5a:f6:3f:5e:
5f:c2:e5:04:a8:56:38:d1:e6:fb:85:2f:68:1c:b8:
03:00:eb:52:2b:0d:11:af:2c:7c:78:8a:59:02:dc:
69:f2:eb:b4:bd:02:a6:b7:d2:02:1c:d8:85:04:2b:
1b:95:9d:28:f0:9b:85:0b:66:02:ed:17:e4:34:70:
b3:b1:5b:8a:36:17:cb:aa:78:3d:b5:0b:7e:57:d2:
e2:c5:f8:c9:d0:af:ef:51:dd:02:0d:5b:0d:8b:e2:
b8:82:eb:29:7a:60:63:5a:2d:93:a2:95:bd:af:0d:
a7:97:48:68:a8:ed:6f:1d:b8:f4:ce:98:38:76:02:
5c:fc:71:7d:34:ec:e1:1b:fb:db:e1:bc:84:17:d6:
f3:86:1b:8a:45:50:88:39:11:b5:c2:3b:b5:ca:e0:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2F:CC:CA:E8:27:16:4C:C0:E9:FB:CF:8D:8E:CF:42:35:53:26:BB
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/3i_MyugnFkzA6fvPjY7PQjVTJrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:600::-2a0d:d940:6bf:ffff:ffff:ffff:ffff:ffff
2a0d:d940:900b::/48
Signature Algorithm: sha256WithRSAEncryption
40:5c:ef:d0:77:0c:8f:a8:0e:2f:8b:28:a9:ec:f4:96:a0:92:
e5:82:65:5f:4e:bd:bd:6c:f5:ce:95:6d:1e:22:65:d9:e6:ac:
4d:00:42:ee:02:dc:fe:ec:8b:7d:08:3b:19:2c:f0:42:08:35:
3d:ee:96:f5:bc:bf:2c:a7:e4:ab:60:db:e9:1d:0b:19:46:2a:
2b:8c:d0:96:41:a7:72:a1:5d:27:2b:2d:d0:20:82:bb:5e:bc:
d1:02:47:f8:7c:ee:91:8f:d3:f1:ab:37:b2:98:75:11:1b:35:
45:13:a9:48:61:19:ac:b0:05:73:c1:f1:63:fc:18:bc:9c:b8:
54:d9:ff:28:76:76:a8:42:80:ee:39:ec:c1:29:9f:2b:de:d8:
d3:de:24:f5:a5:5d:ef:0b:b5:ca:8b:83:b5:f7:f3:47:c0:6b:
e1:d3:13:8d:8b:29:fb:8b:ea:d3:43:53:eb:af:7b:5b:2d:8a:
80:d9:d1:4e:ca:da:96:22:5b:0c:8a:e5:04:82:63:9f:38:ab:
b2:f7:1a:1f:bb:31:5d:2a:0d:64:72:c6:94:cd:42:ca:da:0d:
95:44:93:f6:17:39:6a:44:fa:c5:47:32:05:c9:28:0c:6b:a1:
8a:f2:3c:c3:20:f4:89:8b:57:4a:66:08:74:fb:95:df:ab:d0:
29:f5:59:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:48 2026 by rpki-client