Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_3ArQV0WIang3Y6566MNDlymPSM.roa
File: _3ArQV0WIang3Y6566MNDlymPSM.roa (raw, json)
Hash identifier: S0JVvSQqWxE9GBFw98DT6M/IND88wYzRZCFMXx8E6pY=
Subject key identifier: FF:70:2B:41:5D:16:21:A9:E0:DD:8E:B9:EB:A3:0D:0E:5C:A6:3D:23
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F2368983603F74FF37B0C2E1498847367
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_3ArQV0WIang3Y6566MNDlymPSM.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207480
IP address blocks: 2a06:1e82::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:36:03:f7:4f:f3:7b:0c:2e:14:98:84:73:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff702b415d1621a9e0dd8eb9eba30d0e5ca63d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:82:30:5b:73:a5:a8:c1:e1:48:28:42:c7:
1a:4c:3d:b5:bd:2d:89:e5:2e:8e:6e:59:1a:8d:e8:
08:44:71:76:d9:76:00:dc:b9:43:89:af:d1:ad:2e:
a5:be:ba:67:d9:d3:cd:21:31:5d:6a:82:e1:71:04:
7f:8a:6a:80:c1:5b:d8:21:90:67:ad:55:e3:d4:81:
4f:3c:2f:7b:fe:ab:5b:85:04:97:95:f0:8f:71:84:
f6:7d:9e:5f:11:7d:78:0c:24:03:94:99:5f:96:a6:
86:93:2d:3b:f9:5e:a7:24:4a:12:fd:0c:b9:5c:44:
a9:69:22:99:42:62:14:33:62:4a:c3:fb:97:32:e2:
06:e0:97:51:07:5d:3e:b0:cc:e1:ce:55:52:2b:2a:
ac:0e:ea:47:fd:fa:10:a3:c8:a1:4f:c7:83:89:87:
0e:d6:aa:c0:c8:a4:8c:af:f0:66:81:93:10:86:c8:
6b:bd:96:bf:f2:24:7d:16:5a:a4:df:59:83:42:f9:
a2:6b:53:8f:34:61:bb:9c:2e:d6:cd:46:fc:7e:c6:
60:d6:50:fa:dd:ab:7a:1c:9e:81:3b:ff:7b:64:b5:
bc:57:4b:ec:7e:f1:1e:ad:79:d2:b7:5a:33:86:d4:
e1:63:c9:20:42:3a:68:66:1d:ad:64:73:40:e2:55:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:2B:41:5D:16:21:A9:E0:DD:8E:B9:EB:A3:0D:0E:5C:A6:3D:23
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/_3ArQV0WIang3Y6566MNDlymPSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e82::/44
Signature Algorithm: sha256WithRSAEncryption
39:28:d4:11:9b:c2:9d:9c:1b:ed:3e:52:cc:c3:4a:20:ef:9e:
c2:b8:6d:2d:6d:cb:7a:be:cb:29:64:88:7a:ba:52:02:36:13:
f0:f1:ea:e5:c6:7d:96:0f:9a:cf:5a:cd:2b:af:3e:bb:3c:e3:
ab:62:8d:ab:a8:56:ab:8c:13:b8:91:2d:af:24:22:6c:5c:54:
c5:ce:75:0b:6d:f1:03:fa:bb:e4:2a:c4:cd:bc:ed:8e:77:fe:
a5:b0:3b:5a:88:5f:e7:2a:84:be:ff:35:06:da:31:8b:b8:0c:
ec:fc:a0:77:b6:65:a6:ea:f9:e8:57:49:93:93:93:2d:45:ea:
fc:b7:ee:b1:8a:39:e0:e0:f1:f9:07:68:53:4b:43:02:91:42:
87:5b:70:73:6b:d7:a6:ef:21:e7:ce:51:ca:fa:e5:7e:79:00:
60:c9:7d:64:24:b5:81:5e:d3:84:eb:6c:f1:15:67:bf:34:13:
79:a8:a8:89:52:5a:bf:90:13:0c:94:cb:d7:23:3f:0f:f6:25:
0f:70:fe:38:5e:b0:ed:b7:6d:67:4f:45:51:c0:d6:fb:d8:fb:
63:35:b3:37:8d:dd:55:b9:80:a3:f1:b0:36:26:9e:47:52:dd:
d9:c5:2a:2a:ac:8f:ab:c9:03:e5:39:3f:6c:f7:20:bd:6c:cc:
78:46:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:40:12 2026 by rpki-client