Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3YYPF4Z8sbldC6a-QKQXBIUafQs.roa
File: 3YYPF4Z8sbldC6a-QKQXBIUafQs.roa (raw, json)
Hash identifier: dP9g3ynSVdtm9iV2PS2O5xD6yRZDOM2A+XPB+YXySzU=
Subject key identifier: DD:86:0F:17:86:7C:B1:B9:5D:0B:A6:BE:40:A4:17:04:85:1A:7D:0B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FF231180282F5359222CF2ECF56E07875
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3YYPF4Z8sbldC6a-QKQXBIUafQs.roa
Signing time: Tue 11 Aug 2026 18:58:51 +0000
ROA not before: Tue 11 Aug 2026 18:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 2a0a:cd40::/29 maxlen: 29
2a0b:3c00::/29 maxlen: 29
2a11:59c0::/29 maxlen: 29
2a11:5ac0::/29 maxlen: 29
2a11:70c0::/29 maxlen: 29
2a11:8340::/29 maxlen: 29
2a11:8640::/29 maxlen: 29
2a11:9c40::/29 maxlen: 29
2a11:a8c0::/29 maxlen: 29
2a11:d7c0::/29 maxlen: 29
2a11:f540::/29 maxlen: 29
2a12:4c0::/29 maxlen: 29
2a12:1f00::/29 maxlen: 29
2a12:4200::/29 maxlen: 29
2a12:4600::/29 maxlen: 29
2a12:6800::/29 maxlen: 29
2a12:9800::/29 maxlen: 29
2a12:be80::/29 maxlen: 29
2a12:db80::/29 maxlen: 29
2a12:e980::/29 maxlen: 29
2a12:f880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 11:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:31:18:02:82:f5:35:92:22:cf:2e:cf:56:e0:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 11 18:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd860f17867cb1b95d0ba6be40a41704851a7d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:10:1d:a5:e9:31:a4:a2:37:14:ac:77:3d:
e1:49:e7:52:4d:c4:60:b0:c1:46:b3:84:a7:84:36:
bb:95:5e:14:c9:02:6a:cb:c4:7d:2e:19:f8:2e:0a:
a3:1b:31:1e:4f:cc:5e:7a:52:ca:01:2f:22:af:bb:
29:64:bc:51:b2:e7:91:79:7b:f0:6d:59:ba:a0:79:
c8:33:31:b4:31:dd:22:4b:b5:1e:7b:07:68:d4:5f:
a8:94:5d:0a:91:7e:09:3d:88:84:e4:0a:96:78:7a:
3d:e0:22:95:9c:54:5e:30:52:86:bf:1b:9f:62:cd:
10:2d:2e:20:26:01:06:95:ce:38:7b:96:94:b9:05:
29:2e:8d:94:65:b2:03:20:18:a1:ac:00:9b:71:d5:
64:03:4c:cf:0d:8e:ef:3f:08:00:54:fd:a7:9c:0d:
a6:1f:1f:bf:c8:9e:d4:1a:a7:8b:d9:c5:bb:3d:3a:
0b:79:4d:0f:a6:e0:6b:49:f7:0a:2e:9f:39:01:aa:
66:45:d2:2c:40:56:dc:70:97:ee:47:24:87:f1:f9:
45:ac:d7:26:bf:4d:91:2a:ac:8a:85:7c:05:f5:ba:
ba:d7:8a:0a:5d:2e:58:70:ea:75:04:5d:1b:6c:5e:
5d:79:56:16:45:ef:4c:f9:3c:1d:95:85:df:7a:d9:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:0F:17:86:7C:B1:B9:5D:0B:A6:BE:40:A4:17:04:85:1A:7D:0B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3YYPF4Z8sbldC6a-QKQXBIUafQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd40::/29
2a0b:3c00::/29
2a11:59c0::/29
2a11:5ac0::/29
2a11:70c0::/29
2a11:8340::/29
2a11:8640::/29
2a11:9c40::/29
2a11:a8c0::/29
2a11:d7c0::/29
2a11:f540::/29
2a12:4c0::/29
2a12:1f00::/29
2a12:4200::/29
2a12:4600::/29
2a12:6800::/29
2a12:9800::/29
2a12:be80::/29
2a12:db80::/29
2a12:e980::/29
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
86:fa:4b:7a:71:e1:31:86:b8:4c:ca:ae:5f:b3:ac:f1:f4:d8:
e2:21:02:47:cf:57:2b:e4:d3:f5:95:b6:37:1e:75:e8:aa:72:
be:ef:1c:7d:f5:f1:97:fb:e7:06:c1:78:53:e0:bb:aa:53:d2:
ef:aa:b6:65:e7:a5:4e:b7:6e:8e:b5:26:ef:08:1b:38:0c:1d:
c6:5f:63:cc:d5:b4:36:09:e5:ac:5f:a4:5f:0a:6e:49:d0:5d:
f7:28:5d:89:38:ea:d5:4d:c8:13:44:de:e7:74:8e:bf:52:17:
49:b2:ad:34:9e:ab:d6:9a:87:1f:45:78:0e:52:65:c8:c6:9d:
88:68:c9:b1:45:82:93:d3:9b:39:32:d5:b1:4d:48:9d:27:8d:
17:84:72:8c:a3:9b:fe:7d:ef:a3:b9:f9:43:65:22:a6:43:f1:
8b:47:6d:05:9d:8a:0e:06:c0:ed:46:40:c6:86:fa:63:d0:68:
6f:a9:d6:ff:db:a7:d8:74:71:0e:5b:c4:b5:76:db:56:81:1c:
3a:58:3c:36:0b:ed:8b:ae:c6:4a:c0:a7:be:d0:0f:0d:e9:64:
87:8e:28:14:e4:2f:9a:be:d1:53:0b:5e:43:0a:11:05:0b:f3:
40:8f:0c:85:6c:5c:52:e0:6c:9a:d4:e7:a4:f2:92:a5:19:97:
d2:18:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:07:31 2026 by rpki-client