Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa
File: 3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa (raw, json)
Hash identifier: /LFq1WNtpzmrSy4DHyV2230+6XSjlYq34txavrXU1wA=
Subject key identifier: DF:32:AA:A3:DB:73:AC:31:47:2A:3F:D7:9F:BE:02:43:B6:69:D1:8C
Certificate issuer: /CN=a50caf9c361def48c0933321be05183a83a7bfc9
Certificate serial: 019F236884429D1178D32C93218B98547B77
Authority key identifier: A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.235.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:84:42:9d:11:78:d3:2c:93:21:8b:98:54:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50caf9c361def48c0933321be05183a83a7bfc9
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df32aaa3db73ac31472a3fd79fbe0243b669d18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:3d:42:ba:7d:ed:fa:83:e3:c5:fa:92:e1:
c9:8a:52:65:23:33:b6:7b:13:89:71:46:2a:40:8b:
5b:0a:a4:b1:7e:14:5a:4f:2a:3a:b1:9a:61:fd:d2:
f3:e0:66:29:2c:b6:07:54:8f:16:ae:f6:ec:c5:f5:
6c:76:22:a0:79:82:7c:a6:de:83:a1:4d:f7:29:42:
3f:35:ac:08:fe:f2:f4:31:6a:6c:b8:e5:3f:ad:17:
72:ca:95:7c:06:b0:35:f4:0c:4a:7a:24:da:c8:22:
8d:f6:79:da:73:71:96:cd:a2:d0:38:05:4f:37:54:
c9:92:b6:30:f8:af:01:26:e9:8e:0e:86:d2:e7:00:
b6:7e:10:dc:1f:99:f2:44:34:0b:98:1a:fe:ae:51:
83:b7:e9:f7:91:0e:a3:bd:9c:e3:5a:e5:77:6f:a5:
06:a2:17:17:70:47:56:0f:3a:40:b6:4c:58:50:b7:
2e:34:bc:ff:a8:17:8a:0b:b3:6f:d4:74:fc:60:12:
77:5e:50:0f:53:65:9c:07:ce:5c:64:7f:45:48:40:
d6:4d:4d:61:73:2b:3c:6e:68:e9:44:f7:99:0c:4b:
d1:67:e7:7e:48:fa:65:23:78:6a:2a:d2:35:bc:8a:
58:50:92:0f:36:c0:35:3d:5d:2e:23:e1:96:9b:ce:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:AA:A3:DB:73:AC:31:47:2A:3F:D7:9F:BE:02:43:B6:69:D1:8C
X509v3 Authority Key Identifier:
keyid:A5:0C:AF:9C:36:1D:EF:48:C0:93:33:21:BE:05:18:3A:83:A7:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQyvnDYd70jAkzMhvgUYOoOnv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/3zKqo9tzrDFHKj_Xn74CQ7Zp0Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/pQyvnDYd70jAkzMhvgUYOoOnv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.236.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:2d:f4:49:61:8e:d4:8d:c3:33:a0:10:f7:17:b0:02:c3:df:
4c:f9:e7:64:9a:18:d8:6b:ef:36:80:50:ae:4c:73:f7:39:b9:
e4:a4:33:63:ae:fe:93:e5:52:ec:5c:89:2e:51:f3:a3:1a:06:
67:f3:89:d4:b1:a4:1a:dd:c6:09:26:2a:d3:eb:37:73:f1:07:
75:eb:c2:83:29:26:3a:e3:a2:6f:62:a7:cb:ec:1d:4a:1a:f0:
f9:ac:12:8c:44:ee:5c:49:13:aa:52:7c:de:3b:5e:8b:8a:3b:
15:7b:8c:26:b9:fb:8b:ae:30:51:f1:90:b2:f1:11:76:35:c2:
bf:4b:1e:de:d9:03:cc:07:fe:39:ac:ea:4b:28:d5:6d:32:a4:
bc:da:74:63:c9:da:9b:52:84:6c:05:8a:f4:47:37:ef:06:5c:
a5:e9:e6:17:a8:dd:a2:e9:17:de:28:69:ca:32:f9:ac:01:fe:
08:a8:c5:a4:d8:b3:8f:eb:0d:0e:f9:07:0c:1e:2c:47:53:58:
23:b8:d2:40:3b:d6:4e:90:4a:62:51:47:bb:b3:10:94:a5:e5:
5d:d0:94:2a:79:41:3f:08:57:a8:6f:91:54:b9:81:b9:9d:d0:
94:b6:02:47:45:8c:33:67:3d:7d:2a:a4:bb:2b:41:a3:fb:bb:
61:19:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:57 2026 by rpki-client