Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-rm8V8xpUB6cXalk3PMVvgsSPI.roa
File: 3-rm8V8xpUB6cXalk3PMVvgsSPI.roa (raw, json)
Hash identifier: vJEYoSsBAQAkp7DGQFCUdmrP5WgLI0XDoS3ALFWRzos=
Subject key identifier: DF:EA:E6:F1:5F:31:A5:40:7A:71:76:A5:93:73:CC:56:F8:2C:48:F2
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0815894E2CA509C14D833818AAF4B78D0
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-rm8V8xpUB6cXalk3PMVvgsSPI.roa
Signing time: Tue 08 Sep 2026 14:07:41 +0000
ROA not before: Tue 08 Sep 2026 14:07:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218738
IP address blocks: 170.168.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:58:94:e2:ca:50:9c:14:d8:33:81:8a:af:4b:78:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 8 14:07:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfeae6f15f31a5407a7176a59373cc56f82c48f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:b9:cd:21:8b:ee:36:36:5d:98:eb:c2:bc:
f2:77:9c:19:d9:e9:dd:24:68:f2:21:f7:5c:f0:52:
cd:c2:3e:82:54:7f:c3:67:bf:4b:42:43:77:f7:7f:
6d:c2:61:d5:ee:64:3e:65:2e:b4:21:b9:5c:78:05:
a8:5b:1f:0f:43:6f:42:37:ad:11:1c:49:cf:bb:2b:
59:b5:a1:e0:ca:9a:0c:99:f7:28:5c:a4:5d:b7:48:
c1:ed:d1:43:4b:72:c3:1f:c1:e4:cb:2c:72:39:b3:
cf:5f:6e:b3:e1:ce:c4:5c:05:dd:2b:72:e9:2a:77:
58:2f:6b:b0:5b:fc:87:81:85:24:b2:f4:29:fc:20:
82:d4:63:8b:50:37:22:0a:1a:c9:9e:27:fd:fe:66:
bd:55:55:72:8a:bf:5d:34:3a:3f:74:93:99:ee:27:
a7:ed:10:10:bc:e3:9f:4f:77:cd:4e:9b:ef:12:f8:
20:7d:ed:a2:9c:d3:c9:7a:4a:f0:d8:1c:64:80:c7:
bb:8e:f5:f1:f9:50:28:6f:a5:22:a4:9f:2a:ef:8b:
41:65:07:1f:03:4f:b8:ed:09:63:a8:d3:8e:7e:e6:
70:63:ef:63:63:1c:94:94:93:17:00:74:5b:9f:26:
16:bc:87:4c:ee:7a:dd:40:04:41:62:74:9b:03:aa:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:E6:F1:5F:31:A5:40:7A:71:76:A5:93:73:CC:56:F8:2C:48:F2
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3-rm8V8xpUB6cXalk3PMVvgsSPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:3a:08:98:45:70:8f:23:f4:0d:59:f2:30:99:b6:3f:11:
d5:aa:04:eb:ce:9c:c6:e8:e4:eb:d4:d7:d7:c8:08:55:5c:cf:
ea:ee:4b:92:5a:51:f4:c0:7b:72:41:7e:11:87:be:18:9b:3e:
45:17:b8:41:3a:a0:4c:a0:00:72:f0:d1:b0:3e:1a:56:be:e1:
7c:81:0b:14:58:03:ee:6d:bf:3b:42:9b:be:13:0e:b7:12:8c:
c9:1d:1f:98:11:ad:02:5d:88:45:89:ce:06:29:b4:32:a3:74:
26:da:56:37:b0:86:93:04:55:b7:93:e6:ef:f8:6a:30:0c:3f:
a6:02:f1:e6:70:78:79:a9:be:06:99:23:c9:36:fd:c9:7f:69:
6f:8c:ec:73:83:eb:85:e6:d5:5d:b3:96:90:37:0d:08:d8:cf:
f8:3a:57:9e:dc:9c:c0:1b:28:4c:3b:b3:03:7c:ff:d1:9d:45:
5c:5c:81:34:e3:28:5b:69:b3:fa:8d:72:51:89:86:8e:c5:03:
36:2d:4a:86:9f:d3:db:c0:4f:18:90:44:78:af:a4:7a:f2:23:
9d:23:5c:51:58:45:6a:f2:39:1d:a8:5d:6c:95:b4:6d:62:3f:
5f:15:b9:13:2e:55:8d:83:49:d2:95:4d:4a:76:1b:dd:c1:c9:
4a:56:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:10:30 2026 by rpki-client