Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3mywo-BsWL3cSnNqUpzTpDB96u4.roa
File: 3mywo-BsWL3cSnNqUpzTpDB96u4.roa (raw, json)
Hash identifier: 8788yIquwoWfPqlPA5QQJ5InLXnqdZHh8y7u1B6tzRA=
Subject key identifier: DE:6C:B0:A3:E0:6C:58:BD:DC:4A:73:6A:52:9C:D3:A4:30:7D:EA:EE
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A01FB93A3755BEE3E9CF3009DAD6F459A7
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3mywo-BsWL3cSnNqUpzTpDB96u4.roa
Signing time: Thu 20 Aug 2026 15:10:27 +0000
ROA not before: Thu 20 Aug 2026 15:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211708
IP address blocks: 2a0e:4001:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b9:3a:37:55:be:e3:e9:cf:30:09:da:d6:f4:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 20 15:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de6cb0a3e06c58bddc4a736a529cd3a4307deaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:a2:23:b0:87:67:e5:2b:40:1e:ef:34:c5:
8a:0c:1e:85:80:eb:2f:56:15:1e:35:82:8f:7f:ce:
d6:8e:db:73:de:11:6a:66:22:a1:0e:33:96:6f:fa:
cc:eb:c2:0e:9a:15:db:e4:62:f7:e1:f2:a5:af:ce:
48:c3:37:8f:48:47:29:d4:41:f3:f8:cb:24:03:42:
47:0f:94:2c:a2:b7:1e:f8:d4:f9:23:3d:95:8e:a8:
74:35:23:53:3c:79:cb:46:8e:31:41:2c:aa:99:04:
4a:64:81:97:f0:86:c2:ca:68:1d:47:d2:cd:b3:8f:
c5:38:92:ad:6f:53:a8:ae:91:be:26:d4:3e:ef:35:
5d:40:05:67:08:9f:96:cf:f5:93:0c:31:7c:2d:ca:
bd:35:73:ff:c0:fd:4d:27:d3:4a:92:68:d8:4e:9e:
0a:fb:aa:39:13:60:2b:20:90:c9:fe:b8:21:a8:b5:
3c:e1:d2:94:89:3f:31:c6:da:12:81:40:a5:65:a2:
7e:2e:f0:86:81:8a:e5:a8:60:63:6a:0b:dc:68:33:
1d:2d:84:44:31:fc:ea:10:b4:43:71:74:6c:81:86:
83:80:06:63:32:bf:29:2f:ae:71:d6:d1:ca:be:0a:
d7:d9:db:79:f0:26:eb:5f:8a:68:65:6a:0d:07:2f:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6C:B0:A3:E0:6C:58:BD:DC:4A:73:6A:52:9C:D3:A4:30:7D:EA:EE
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/3mywo-BsWL3cSnNqUpzTpDB96u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:900::/40
Signature Algorithm: sha256WithRSAEncryption
bf:a6:7d:c3:06:ab:d7:62:bc:37:fc:5d:9d:23:8b:ee:61:1d:
b8:e0:ac:89:2e:6a:8b:7c:05:52:73:6f:95:fa:03:0e:07:f1:
87:9c:3f:df:be:85:52:c9:ee:5e:65:37:c3:ab:d6:24:95:6f:
ed:5c:d6:6f:a8:9a:30:fb:80:e6:bd:d7:07:39:ec:97:8d:e1:
0d:e0:cf:c6:68:23:fe:d7:61:6a:11:61:b2:51:df:6a:82:64:
cc:ab:6c:a0:62:a1:b8:49:86:42:ec:82:89:e3:41:32:b9:34:
ee:d8:84:54:c3:86:e4:a3:10:64:22:26:26:81:b6:87:98:b5:
de:5d:0f:ea:e1:dd:f0:57:e1:d6:8b:ee:cc:ff:16:c8:2b:f3:
f7:d0:75:45:c0:7c:45:a3:79:96:8a:c7:c6:47:11:63:95:ef:
0e:54:6b:5f:55:c8:97:16:27:0f:62:e2:3d:09:23:0d:8e:2b:
af:41:b9:68:4c:e7:a8:ac:31:e9:f1:1d:86:db:29:79:56:d2:
ad:9f:d1:37:0e:34:e7:07:39:fb:06:b5:f6:49:1f:fd:af:0c:
87:1f:6a:d3:2d:f0:b3:a4:5e:9e:16:23:22:24:e7:4e:eb:82:
fe:20:20:65:73:ce:9d:5a:78:b8:3b:e3:b7:1b:ac:4e:bc:32:
b4:0c:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:20 2026 by rpki-client