Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3AtkEq9ZFOZ7_XgVACBDbL_IjXs.roa
File: 3AtkEq9ZFOZ7_XgVACBDbL_IjXs.roa (raw, json)
Hash identifier: dxmLB190VjbSQ/AgIoCYIAzK/CjAwgC2KpXn0QjkCBA=
Subject key identifier: DC:0B:64:12:AF:59:14:E6:7B:FD:78:15:00:20:43:6C:BF:C8:8D:7B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F0EC0FF5CCD4EFE81ADBBD3A95C83ADC5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3AtkEq9ZFOZ7_XgVACBDbL_IjXs.roa
Signing time: Sun 28 Jun 2026 15:02:36 +0000
ROA not before: Sun 28 Jun 2026 15:02:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219365
IP address blocks: 2a02:2fc0:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:c0:ff:5c:cd:4e:fe:81:ad:bb:d3:a9:5c:83:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 28 15:02:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc0b6412af5914e67bfd78150020436cbfc88d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:01:14:83:85:c5:db:da:7b:55:44:67:7f:
4f:b2:dd:54:29:a7:a1:43:06:7c:8a:3d:13:bd:bd:
90:27:58:11:a9:06:3d:46:57:a8:1b:6e:6c:a6:f0:
56:ed:76:35:06:c5:9f:3f:64:a3:61:41:55:5b:48:
71:db:be:b9:ed:cd:9c:d0:68:3f:1a:18:00:19:8c:
8c:36:71:f9:7b:47:bf:2a:15:06:9c:14:e4:5f:6d:
e9:60:f8:8b:ea:83:65:5d:7c:60:1f:87:df:d6:2d:
83:f6:12:81:95:bc:64:72:6f:13:7f:1e:a9:6c:b6:
3a:b1:5d:09:0f:ca:cd:42:c7:96:d9:d5:8f:29:0d:
cf:6d:78:b4:47:c2:92:8d:bd:a9:ca:7f:a0:13:86:
6b:1b:c5:b6:44:f4:ca:a3:2b:ad:6a:aa:b5:d2:ca:
83:43:9c:46:c3:c5:be:04:57:0f:48:5d:26:e7:4e:
49:a1:09:f8:97:0d:63:96:ff:ea:43:92:07:61:ea:
05:da:a5:66:13:4f:49:93:36:29:31:f2:a4:d3:a7:
74:bf:31:cf:f4:78:f7:93:ec:20:44:8a:50:07:6e:
0f:70:3b:25:a2:ca:b4:ba:34:ce:6b:cc:b3:a7:63:
c9:2c:27:0e:2a:1e:c1:10:c6:65:44:3a:b6:cf:63:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:64:12:AF:59:14:E6:7B:FD:78:15:00:20:43:6C:BF:C8:8D:7B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3AtkEq9ZFOZ7_XgVACBDbL_IjXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2b::/48
Signature Algorithm: sha256WithRSAEncryption
6e:94:e8:58:b5:e7:e2:21:93:a7:cc:d7:db:32:4c:92:d1:c0:
4b:eb:f1:38:1d:d7:b6:19:7b:f3:29:fd:e7:29:34:93:7d:0d:
80:a4:ac:4c:02:6f:74:21:61:94:90:24:80:8d:75:e7:31:85:
a2:c2:07:27:dd:97:e0:e8:29:a9:80:aa:e8:e3:99:00:7a:b6:
19:c1:8d:0e:72:8f:79:b2:45:8b:8d:98:13:ed:b6:33:05:46:
a1:fa:c2:05:7b:14:db:d4:21:e9:36:97:99:a1:94:4b:8c:61:
a3:8c:ce:ae:7c:ef:34:99:b8:f0:8c:d7:e0:af:61:33:c8:c0:
f3:79:4d:ef:6d:29:b5:04:f1:55:b0:89:a6:10:6f:9d:45:2d:
3a:90:eb:2c:f1:94:2c:24:46:f8:85:c9:90:ea:38:0b:51:9e:
d0:f1:06:7b:de:36:24:9b:ed:39:43:cc:bd:61:a9:02:d0:62:
91:f3:25:ca:7b:7f:16:a9:a5:b6:e1:c3:a7:7c:62:8a:af:a1:
85:fd:2c:fc:7d:bd:45:c2:03:d3:c6:5a:27:33:ed:ea:6c:70:
d7:4f:e3:17:d0:05:c8:e6:2a:27:96:b1:d5:0f:15:02:e4:38:
21:2a:6b:1c:e7:4a:74:bf:10:ed:5c:13:aa:7c:73:89:2c:af:
28:1a:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client