Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/3zRj7f9bkFjmmucQ1U0uW35Pbnk.roa
File: 3zRj7f9bkFjmmucQ1U0uW35Pbnk.roa (raw, json)
Hash identifier: w5C2c6MGi848WfxaniP2aATV+Se3XfwgaY489EQ+ZuI=
Subject key identifier: DF:34:63:ED:FF:5B:90:58:E6:9A:E7:10:D5:4D:2E:5B:7E:4F:6E:79
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 01A17D34AA333E92C50761EB00508EF7EAF9
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/3zRj7f9bkFjmmucQ1U0uW35Pbnk.roa
Signing time: Tue 27 Oct 2026 11:52:45 +0000
ROA not before: Tue 27 Oct 2026 11:52:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51557
IP address blocks: 93.89.224.0/20 maxlen: 20
185.33.232.0/22 maxlen: 22
185.111.232.0/23 maxlen: 23
185.111.234.0/24 maxlen: 24
185.111.235.0/24 maxlen: 24
2a00:e5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:34:aa:33:3e:92:c5:07:61:eb:00:50:8e:f7:ea:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Oct 27 11:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3463edff5b9058e69ae710d54d2e5b7e4f6e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:30:db:52:8e:25:8f:6e:6a:29:7d:06:00:
47:11:70:87:b3:f0:aa:74:e8:04:50:e1:f3:98:df:
73:ff:e9:1c:01:96:24:08:9d:76:11:08:d0:28:0a:
41:26:47:e4:62:de:b1:b2:b0:d4:60:8d:3d:65:69:
fa:34:fa:9c:23:00:9f:2b:af:4c:e2:95:a2:93:5d:
df:5d:63:68:f2:64:30:44:26:a5:56:08:63:d3:b7:
d7:76:21:20:82:4f:8a:54:05:16:3c:db:20:0c:fd:
24:b3:2c:84:0f:f2:1c:7c:c0:de:1c:49:5f:01:4e:
4e:9f:b8:20:84:dd:c6:c1:62:63:6b:f2:a0:14:07:
6f:e3:5b:16:89:83:7d:5d:c2:16:dc:55:b1:9d:e9:
96:04:7c:59:bb:1a:b2:a4:34:c5:fb:00:40:49:ec:
98:cd:22:23:12:6c:40:82:6e:13:de:88:5e:a2:9c:
11:ef:3f:1b:a5:76:e1:15:02:0e:6e:4a:0d:ac:c5:
63:ca:fd:e3:7b:d5:bf:71:8c:26:1a:db:31:48:d3:
a0:65:26:e3:8c:f3:91:f3:d4:f4:53:78:00:7e:a8:
9c:5c:3d:49:f2:a2:80:90:07:fb:5d:5b:e9:a9:63:
0f:80:0f:dd:53:df:ec:6a:42:3e:c1:38:d6:72:2d:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:34:63:ED:FF:5B:90:58:E6:9A:E7:10:D5:4D:2E:5B:7E:4F:6E:79
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/3zRj7f9bkFjmmucQ1U0uW35Pbnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
IPv6:
2a00:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
27:b2:34:3e:c1:33:29:49:7e:81:35:b5:2f:df:f1:9c:f7:36:
4e:80:7e:cf:fb:6a:ed:cb:d3:0f:25:74:88:ed:c3:c4:d9:98:
d7:83:85:cd:dc:19:36:5f:b9:21:c4:f1:93:66:6d:70:eb:2a:
db:98:89:ac:9c:91:da:e4:5f:aa:50:8d:39:61:ed:69:d6:43:
68:f0:c8:4d:49:00:89:25:b9:e3:75:e2:32:58:50:b4:c2:56:
ca:1f:28:14:8c:b9:57:f6:4d:51:80:d5:07:40:c2:8f:a5:4a:
9b:42:53:d7:be:ba:5e:8e:1d:48:3d:0f:e1:1e:dc:84:63:4e:
8e:91:b3:35:15:04:a4:d5:a8:17:8e:66:4d:6a:2c:c6:69:60:
ec:2a:ea:46:5e:48:af:f2:50:97:8e:ae:cf:ca:82:c8:ff:58:
86:6c:48:d1:1e:bd:df:f4:c0:03:2a:83:67:5b:68:96:4a:97:
ee:78:6e:be:9a:52:81:cc:ed:83:4a:69:48:4e:8c:42:9b:3f:
a6:b1:e0:3c:bb:25:b4:5d:fa:e1:6f:7b:e5:b8:23:cb:cd:b7:
bf:ed:22:48:81:96:bb:79:10:fd:07:3c:93:95:a4:68:51:23:
84:4d:f3:64:dd:23:42:fb:d6:c3:df:ac:33:b4:31:d3:d4:23:
6b:0f:88:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 00:34:14 2026 by rpki-client