Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3MmZzPBeiMqeu7pygsVMZoj8Zo0.roa
File: 3MmZzPBeiMqeu7pygsVMZoj8Zo0.roa (raw, json)
Hash identifier: sLh/oExxA/vzaEzoCjypdEZPuvfC/9IwOeLNH2A9BW0=
Subject key identifier: DC:C9:99:CC:F0:5E:88:CA:9E:BB:BA:72:82:C5:4C:66:88:FC:66:8D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A10C687CFFF9D5818AD657589B8393710E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3MmZzPBeiMqeu7pygsVMZoj8Zo0.roa
Signing time: Mon 05 Oct 2026 14:12:16 +0000
ROA not before: Mon 05 Oct 2026 14:12:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 170.168.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:68:7c:ff:f9:d5:81:8a:d6:57:58:9b:83:93:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 5 14:12:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcc999ccf05e88ca9ebbba7282c54c6688fc668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:38:d1:3f:0d:a0:31:4d:bd:03:53:a1:8d:
a9:48:bf:a7:9e:91:cd:e2:4c:33:4d:f3:79:bb:ec:
ab:ea:38:bf:7e:ac:69:c1:95:3f:c6:a0:6f:e6:ac:
f7:b4:3a:9c:e4:56:10:43:8f:40:12:e8:7b:ea:31:
f5:29:16:d1:80:41:ff:17:58:cd:6a:55:87:8c:55:
31:b0:68:b7:61:3c:63:98:dc:08:a8:2c:29:f4:8e:
7b:ea:40:6c:c0:ad:df:89:b5:8d:33:31:65:b6:ef:
00:92:b9:1d:58:38:de:e0:11:47:16:53:65:a6:09:
07:0b:7c:e9:f3:99:5d:fa:93:aa:cc:ea:54:1c:be:
97:8b:4d:72:32:0e:a6:a4:67:82:6c:eb:2d:0e:3a:
90:d1:bd:c4:16:3b:1e:44:e7:c2:01:61:eb:3e:82:
92:61:6a:f4:26:98:bd:cf:8d:67:a8:a5:81:8e:c1:
8a:56:fa:bf:f8:0d:12:55:02:b3:20:a1:3d:ef:c7:
ec:26:d6:d5:10:e3:57:93:2e:b0:05:dd:33:0e:64:
8e:5b:b1:08:44:cd:26:1c:1f:8c:e7:f1:55:95:c9:
f0:7e:ea:ab:ba:60:55:01:d0:96:d3:ad:05:d5:65:
65:bb:98:2b:38:30:f9:a3:44:19:04:25:0a:e2:a0:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:99:CC:F0:5E:88:CA:9E:BB:BA:72:82:C5:4C:66:88:FC:66:8D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/3MmZzPBeiMqeu7pygsVMZoj8Zo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:85:83:12:d4:9d:28:81:21:42:8b:8d:4e:fa:94:6f:6f:87:
94:37:4f:83:f8:a2:9d:de:46:69:ae:7b:5b:22:25:82:7d:ca:
21:e5:99:dc:ec:e9:53:92:0d:53:62:f4:e0:0c:0d:db:c3:cb:
43:bb:37:14:0c:7a:46:b3:44:18:be:26:8c:e1:c0:3c:16:5a:
fd:3c:54:3d:53:80:f6:ff:bd:90:29:54:b5:d8:0e:b9:1b:8f:
a4:87:6d:04:8c:03:95:55:ee:69:b9:b5:d7:29:c8:16:25:da:
32:be:c2:90:f0:79:16:fc:0c:3b:03:55:83:be:15:57:0f:28:
cf:51:11:dd:f6:72:81:45:f6:77:a0:f0:38:3d:95:22:45:36:
af:c7:13:bd:a3:7e:8c:6b:e0:77:16:27:d3:fe:af:dc:ca:7c:
65:11:96:9c:01:5d:45:0a:cb:d7:21:dd:d0:9d:bb:74:29:96:
c0:3d:1d:f1:bc:42:bf:a6:89:31:83:5a:52:5e:b1:45:16:4c:
bf:30:87:28:ce:43:c7:a1:a3:9e:48:7b:ad:ed:b4:5b:d8:a1:
d3:10:91:56:27:23:ac:c4:9e:26:27:a2:51:b4:cf:99:09:7a:
27:3c:f9:4b:ca:a1:dc:e8:5d:6e:aa:88:9f:e4:46:34:16:41:
7b:09:a3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:00 2026 by rpki-client