Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3C2_H83BfOb6om5fa8NVCdoiJj8.roa
File: 3C2_H83BfOb6om5fa8NVCdoiJj8.roa (raw, json)
Hash identifier: Lp12INGKIEJQMCkyOE6lWzoNSw0rvTlLv8qh+dG5QlI=
Subject key identifier: DC:2D:BF:1F:CD:C1:7C:E6:FA:A2:6E:5F:6B:C3:55:09:DA:22:26:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECE84BD4AD5D3F76B2011658EDC5AE7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3C2_H83BfOb6om5fa8NVCdoiJj8.roa
Signing time: Mon 14 Sep 2026 07:25:29 +0000
ROA not before: Mon 14 Sep 2026 07:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199956
IP address blocks: 2a0e:97c0:850::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:ce:84:bd:4a:d5:d3:f7:6b:20:11:65:8e:dc:5a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc2dbf1fcdc17ce6faa26e5f6bc35509da22263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:ac:13:b9:0b:08:b6:96:26:fe:29:2a:5d:
ce:b6:89:f5:c8:99:ae:a9:84:3f:fe:0a:56:59:0e:
06:44:cc:fb:2a:35:26:e0:1d:f1:c6:7e:54:f7:6b:
56:a8:18:2c:17:00:77:4e:d7:db:13:79:5c:4f:87:
af:f1:5e:6b:8b:74:88:89:45:68:81:59:85:1f:6d:
be:ca:41:ab:69:59:51:c9:e3:b9:35:90:e3:ee:75:
df:03:bb:4f:60:a4:5a:c9:8d:34:81:c5:48:ec:f4:
7e:42:31:24:f3:90:e5:77:74:72:0e:5d:08:5a:38:
59:e2:d9:d7:43:6e:9e:3e:b8:d8:e9:2d:6e:f6:90:
91:26:1a:81:aa:92:3c:bf:d1:a9:87:d3:00:71:c0:
db:45:e1:af:fc:77:4d:a6:3a:a5:ad:73:c7:46:b7:
6b:40:4f:7e:22:24:6b:22:94:77:ad:ef:1c:0f:34:
39:a8:43:77:51:c8:e4:4f:d1:0c:a4:a0:78:fb:aa:
51:df:6d:1b:79:e7:d1:58:7e:e6:f5:a3:e0:3d:8b:
e3:32:05:57:d9:d1:8b:79:fe:08:50:47:7f:3d:ba:
53:13:38:d4:e2:9b:33:01:e3:0d:36:e0:6d:41:b8:
f7:89:1d:79:16:cd:68:e6:ff:74:a7:00:6a:b8:93:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:BF:1F:CD:C1:7C:E6:FA:A2:6E:5F:6B:C3:55:09:DA:22:26:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3C2_H83BfOb6om5fa8NVCdoiJj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:850::/44
Signature Algorithm: sha256WithRSAEncryption
5b:4c:ce:89:7f:ed:4e:27:4d:0b:80:de:8d:fe:e9:e7:8f:c4:
dd:83:41:d3:c3:23:2f:c2:3d:55:7a:33:89:a8:0d:73:6b:60:
12:dd:66:f4:3d:ed:cc:76:9a:8a:67:90:3c:dd:22:9c:95:e9:
c3:aa:0f:45:79:9e:3f:ad:15:ce:c1:12:13:53:9b:37:12:f8:
01:11:a7:97:24:22:2f:98:24:7f:47:26:f6:41:f6:a2:1d:44:
0a:04:d6:ed:58:7d:60:5b:68:17:63:fa:c9:e5:89:e0:2b:b5:
cb:4c:15:df:6f:17:be:19:cd:b6:c2:e1:64:42:3e:86:33:17:
67:7e:64:df:d7:24:fd:48:97:88:95:38:7d:84:db:fa:6a:dc:
ce:98:ad:31:5f:7e:cb:9b:6b:53:a5:11:90:d1:c3:e8:50:c7:
e6:88:88:db:ba:e7:f2:f8:d7:5e:ad:29:c4:e6:37:d2:88:fe:
49:ba:f3:07:99:17:27:56:ff:7c:b4:47:61:27:aa:7d:57:1c:
22:e5:a0:46:68:bc:d3:35:c9:91:7a:ff:4c:49:4b:54:3e:47:
8c:45:f0:e7:0d:d6:84:89:6b:31:d1:f1:43:64:a5:d9:9c:f1:
ad:5f:7b:2a:fb:2e:32:ef:24:32:3c:3d:ba:70:8e:b4:9a:66:
c4:c5:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 01:22:56 2026 by rpki-client