Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/_Dq9qneL_rkcMxRckbrQRX0SL5Q.roa
File: _Dq9qneL_rkcMxRckbrQRX0SL5Q.roa (raw, json)
Hash identifier: GoWLcMwwe+MegfN0fAe8W5uQ8LDpF/I2Qcg4CozX9JI=
Subject key identifier: FC:3A:BD:AA:77:8B:FE:B9:1C:33:14:5C:91:BA:D0:45:7D:12:2F:94
Certificate issuer: /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial: 01A0D7E3A26A18EE53C3374E906EA17FACAB
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/_Dq9qneL_rkcMxRckbrQRX0SL5Q.roa
Signing time: Fri 25 Sep 2026 09:26:54 +0000
ROA not before: Fri 25 Sep 2026 09:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26337
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:e3:a2:6a:18:ee:53:c3:37:4e:90:6e:a1:7f:ac:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Validity
Not Before: Sep 25 09:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc3abdaa778bfeb91c33145c91bad0457d122f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:ac:84:75:76:b4:71:b2:9e:59:f8:68:5b:
75:8f:e2:77:cd:44:19:92:80:2c:1c:10:9c:1e:3e:
0f:2d:e0:34:1b:29:2a:87:b1:3d:9e:3e:2a:60:8c:
60:75:7f:04:e0:30:49:5f:9c:e3:88:e3:6a:e6:b1:
a3:b3:e5:2f:dc:92:e7:c2:ce:8f:eb:b6:c5:d0:90:
1e:8a:91:9a:31:1f:32:6b:3c:2d:b2:24:2c:2b:17:
f5:2a:f5:33:71:10:6e:3e:e2:6a:ff:0c:91:c5:90:
ac:f2:5c:f0:c5:4d:4e:2b:59:25:9b:dd:94:81:af:
1b:9c:aa:21:87:86:fc:44:9c:27:f2:f4:83:f8:36:
97:d1:06:b8:03:63:4b:23:47:77:9c:ae:48:2c:10:
0b:dd:f2:9b:22:b0:20:af:63:c0:35:f7:e4:b5:ad:
04:38:aa:5f:3d:d5:7d:f9:a3:cb:09:46:50:b5:a3:
a3:5d:3f:19:a4:0c:54:bd:a1:77:55:77:f0:f9:09:
e6:32:c2:b9:cc:6b:0c:aa:b4:0c:ed:6a:78:3e:38:
56:fd:82:5b:67:7e:ec:a7:bc:58:28:0e:0c:2b:54:
f3:14:58:f4:a0:3d:aa:54:54:a0:52:a6:a6:b8:9c:
42:36:5e:68:79:29:31:13:bd:e6:c7:38:1a:6f:7e:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3A:BD:AA:77:8B:FE:B9:1C:33:14:5C:91:BA:D0:45:7D:12:2F:94
X509v3 Authority Key Identifier:
keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/_Dq9qneL_rkcMxRckbrQRX0SL5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c5:77:5f:5b:aa:cf:7e:a6:ee:3c:1a:78:98:25:a3:6a:b8:
7b:74:fb:7b:32:25:20:73:82:62:c6:d3:b6:28:fa:c5:0d:f0:
86:f6:f7:af:c0:03:95:7e:a1:9d:70:da:af:db:ce:90:58:98:
af:d2:3e:48:3d:45:c6:e1:09:cf:56:f8:f8:79:c3:1a:1d:49:
2f:d1:46:f8:19:1e:b9:96:7a:82:9f:8d:cb:4b:c9:fd:4b:c1:
63:d4:b3:3a:46:f3:c1:7f:02:6a:75:7e:ee:e6:2e:2e:74:02:
23:b3:8d:dc:77:22:01:f7:50:0f:b3:e9:6d:ed:82:fd:33:d9:
0e:0f:3a:0e:7a:44:6d:35:8c:06:86:78:1d:03:94:d3:ec:a1:
54:b4:de:a2:81:d7:65:a9:3c:b9:8c:3e:8c:cc:fa:d3:61:5a:
c0:95:47:a7:6f:26:45:51:3a:87:61:7b:82:02:40:0d:85:16:
a0:37:35:6c:a8:3b:d6:ac:dc:48:b3:51:eb:53:ad:a3:2a:99:
c5:7f:61:fd:46:c0:7b:f3:11:91:c4:0d:9e:bc:f7:91:ff:57:
f4:d7:45:92:c7:c1:a8:59:17:26:30:0b:c3:4b:f3:01:f6:a5:
fd:f4:0f:b1:40:5f:5f:d3:db:50:37:14:fb:93:26:68:9f:81:
6c:a8:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:12 2026 by rpki-client