Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DX3sYv-oTk82LGww27J4Ci3bNf8.roa
File: DX3sYv-oTk82LGww27J4Ci3bNf8.roa (raw, json)
Hash identifier: sgBit49abLzxBbYkd17qI4Zs9bYNW3hsAbKZSHhuIWo=
Subject key identifier: 0D:7D:EC:62:FF:A8:4E:4F:36:2C:6C:30:DB:B2:78:0A:2D:DB:35:FF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A02BA85A89C096135977FBE24D37B3F212
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DX3sYv-oTk82LGww27J4Ci3bNf8.roa
Signing time: Sat 22 Aug 2026 22:47:28 +0000
ROA not before: Sat 22 Aug 2026 22:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57433
IP address blocks: 2a02:2fc0:a::/48 maxlen: 48
2a02:2fc0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2b:a8:5a:89:c0:96:13:59:77:fb:e2:4d:37:b3:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 22:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d7dec62ffa84e4f362c6c30dbb2780a2ddb35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:1a:60:28:35:3e:a0:37:fe:8d:15:ca:14:
62:51:a5:17:e1:b2:b4:76:21:3b:f0:0d:49:3c:71:
16:0f:b2:93:60:1f:30:6e:7a:97:b6:f3:e2:1c:2a:
80:b5:89:46:a0:1c:4a:30:cf:72:2f:3c:fa:b9:6c:
26:02:86:b9:f2:38:4c:5e:ad:b6:a4:3e:06:5e:20:
26:d3:0d:93:67:42:11:e3:a1:89:55:b1:5b:ce:72:
28:bf:c2:93:9f:e6:1a:b6:af:e5:34:61:1b:f2:d5:
8c:d3:34:86:03:5e:33:69:49:53:8b:a6:ee:06:a2:
c7:e1:e4:12:6f:56:cc:33:db:cd:be:93:ad:93:4d:
14:40:af:47:c5:40:e2:c5:37:11:ba:0f:a4:73:69:
76:a2:f5:0e:c6:22:46:41:07:ff:73:f3:70:be:90:
1b:e3:0e:2f:ac:94:2c:91:84:dc:55:e4:cd:2b:c5:
a6:c6:37:09:21:17:6c:50:ff:b3:71:cc:21:d1:8f:
cd:27:5e:78:d7:bd:20:e1:26:e2:58:3d:52:b1:ad:
da:3e:de:2c:e5:c5:96:d2:1e:e1:2a:2e:f4:a0:b3:
d9:97:81:80:0a:33:1c:82:35:90:56:e8:f9:c0:dc:
7a:95:ed:5a:ff:ef:c5:7a:16:46:4d:e6:73:58:16:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:EC:62:FF:A8:4E:4F:36:2C:6C:30:DB:B2:78:0A:2D:DB:35:FF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DX3sYv-oTk82LGww27J4Ci3bNf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:a::/47
Signature Algorithm: sha256WithRSAEncryption
0e:79:fa:f3:b1:df:d6:9e:0c:28:fe:7d:fb:78:0e:52:dc:c7:
d8:c5:53:10:3f:a3:82:37:77:8c:e4:c8:c6:80:2b:1d:83:38:
5d:5d:58:18:e8:61:cf:96:a2:a3:2a:a3:63:9b:91:45:16:1f:
5d:a1:0a:b8:b9:df:83:79:29:8f:6d:33:51:64:99:f0:c2:a5:
09:83:78:a6:72:0c:3f:45:76:1e:75:45:0d:c4:2f:23:17:6f:
f2:29:6f:bb:5b:d6:c5:37:52:ca:f0:2f:30:96:25:d5:0a:96:
9e:ff:33:a8:62:d6:79:b6:f8:00:10:d6:e6:24:19:87:54:62:
8b:39:31:35:79:e4:f1:a0:fb:b0:13:9e:bb:47:09:51:1c:85:
bf:68:b1:2a:9e:9c:97:9e:d4:d3:53:55:fa:5d:7f:91:7d:70:
d7:87:b8:83:57:74:46:1c:ae:d6:bc:10:e5:f9:ff:74:3c:50:
be:3c:65:20:da:32:00:39:44:4a:18:46:80:43:9e:db:4d:1d:
2a:cd:15:e4:c9:eb:63:6b:ff:1c:75:60:e8:03:d2:02:0d:31:
0f:43:17:b6:25:32:8d:8a:86:bc:d2:f8:10:4d:05:67:92:98:
46:e9:36:41:08:87:fb:f4:6b:9f:b6:4f:72:63:96:b7:7d:2a:
a0:ae:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:43 2026 by rpki-client