Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa
File: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (raw, json)
Hash identifier: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=
Subject key identifier: DE:0E:4D:E0:00:AD:E7:74:43:7E:A7:65:D9:09:B6:90:BC:3B:8A:E3
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23688112B4939DBA2C309B9C82152901
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33874
IP address blocks: 2a01:838::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:12:b4:93:9d:ba:2c:30:9b:9c:82:15:29:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de0e4de000ade774437ea765d909b690bc3b8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:f3:06:7d:7d:b2:1a:cf:7b:22:dd:e4:f1:
9a:7f:e4:57:96:51:fa:16:83:56:a8:34:2c:41:ac:
ba:81:76:7b:01:dc:44:9d:d5:4c:31:02:65:c5:c1:
90:3c:c0:48:c2:25:d2:a1:8a:8e:79:08:a3:a4:e4:
cf:09:78:4f:c9:ec:2d:4d:49:14:1d:b6:4c:22:8b:
9d:1b:e3:a2:5d:61:1c:51:76:0e:4e:dc:63:97:b7:
db:c1:ca:00:56:53:79:e5:10:c3:0e:fb:0f:8f:4a:
ca:1d:06:ad:14:16:e0:90:30:02:ca:8d:6c:eb:c9:
5b:b9:f9:d4:32:2f:93:39:cc:7c:1a:01:1e:54:47:
7b:88:db:b7:42:0b:77:c1:f1:08:5e:97:a9:d7:14:
5e:68:b3:91:ee:17:55:40:12:ac:e0:50:f8:a0:95:
89:e6:58:e6:d4:bc:03:9e:1e:fe:92:b4:cd:ba:6c:
56:7f:4b:11:1d:ab:ab:25:b4:f5:46:68:3e:e8:34:
e8:99:52:90:eb:b5:ee:a1:ed:f2:f0:ad:12:61:c3:
3e:b0:3a:7a:39:5e:ed:00:f4:d6:bf:2a:42:09:2c:
9a:71:c1:b8:43:25:de:d7:d7:e6:89:c8:d4:7e:26:
5b:49:79:7c:7b:5b:bb:9a:77:7d:c0:f6:42:d9:bf:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0E:4D:E0:00:AD:E7:74:43:7E:A7:65:D9:09:B6:90:BC:3B:8A:E3
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:838::/32
Signature Algorithm: sha256WithRSAEncryption
83:0c:7a:56:d2:9e:dd:be:3f:23:87:b5:8a:5f:20:46:cd:5b:
ea:fd:f8:93:2e:2b:b3:e2:c3:a2:2f:86:d5:ea:a2:58:40:ea:
4f:64:ec:09:78:bb:be:0e:62:8c:a0:14:37:1c:7a:ae:1b:f9:
77:fe:92:82:79:34:0b:4b:f8:95:a7:bb:69:e9:52:35:ab:f9:
be:42:35:de:c3:c2:22:32:6e:35:da:ca:d4:48:52:12:4a:a6:
25:b1:50:10:68:72:4a:6c:16:90:91:04:a6:87:a5:68:2f:e5:
3d:99:f4:e2:e3:f4:7d:8b:3e:a0:c2:93:53:d1:48:f6:c4:da:
1e:91:48:7d:51:5c:a5:30:6f:a8:71:d2:d0:24:12:1d:19:5b:
0c:a3:b1:ff:ce:e0:65:d2:1e:4c:61:9d:21:4d:7c:10:54:08:
b1:bd:bb:d2:c4:1a:43:e3:6b:e5:30:02:ab:a2:8e:85:47:c4:
ac:87:26:42:67:f4:47:b6:1a:b8:9a:4f:08:a4:6b:43:c6:0b:
9a:29:ac:da:ff:a2:b4:67:04:f2:04:02:a9:64:9a:16:e2:59:
fd:17:14:3b:bf:7b:55:30:a1:19:51:39:c0:81:30:47:14:06:
cc:af:74:fe:6e:e4:89:d3:db:77:4e:c2:e4:a3:9c:98:93:c9:
c0:c4:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:16 2026 by rpki-client