Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3mFad9I-fo6bDB0McOLHkwIBF9E.roa
File: 3mFad9I-fo6bDB0McOLHkwIBF9E.roa (raw, json)
Hash identifier: kSa4/LnLyjLV5JMkbtUqtVgx+49TUS+DMk+kW98oWxU=
Subject key identifier: DE:61:5A:77:D2:3E:7E:8E:9B:0C:1D:0C:70:E2:C7:93:02:01:17:D1
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019F28389248B6A35471B9BD0F6CAFC83CD2
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3mFad9I-fo6bDB0McOLHkwIBF9E.roa
Signing time: Fri 03 Jul 2026 13:43:43 +0000
ROA not before: Fri 03 Jul 2026 13:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400909
IP address blocks: 82.206.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:38:92:48:b6:a3:54:71:b9:bd:0f:6c:af:c8:3c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jul 3 13:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de615a77d23e7e8e9b0c1d0c70e2c793020117d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:77:de:da:67:c3:08:58:8b:21:34:e5:96:
ad:3a:1d:95:d7:2c:78:5e:92:6d:6b:a8:8b:09:2f:
e1:4b:a2:0e:bc:99:03:5f:64:8c:59:c1:db:03:5b:
37:f5:c3:d6:e4:31:b4:23:cd:4e:0d:73:38:d3:fe:
55:71:b2:45:d6:bc:92:10:c5:54:31:12:df:cc:00:
f9:5f:c5:40:4d:34:3e:6c:20:49:51:12:61:bc:e9:
0c:82:6e:39:07:15:59:c2:c7:9e:d8:ab:5a:73:dc:
2c:19:e0:c3:ca:59:5b:a1:34:af:c3:da:fa:3f:2a:
bd:b7:58:14:93:ca:6b:12:32:92:79:c9:4c:f6:5d:
67:cf:15:30:cd:9e:58:77:f9:5a:71:24:2d:60:b4:
dd:15:40:29:c4:ad:db:89:39:e2:d0:56:c1:08:f8:
3c:18:35:2c:43:a7:33:88:0b:b1:7e:90:db:62:b8:
73:31:e7:79:89:61:e9:d2:4c:24:a7:40:f2:0f:84:
6b:4d:8b:e4:ef:1f:31:73:c9:7d:d0:7f:2c:a8:3e:
12:19:1c:8d:91:76:f1:75:e0:f4:55:a3:59:be:c2:
dc:24:6c:d2:87:c6:44:eb:18:58:0c:dd:bd:0a:b8:
df:f5:71:d3:09:74:50:1d:46:5f:1e:48:78:93:30:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:61:5A:77:D2:3E:7E:8E:9B:0C:1D:0C:70:E2:C7:93:02:01:17:D1
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3mFad9I-fo6bDB0McOLHkwIBF9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
27:e2:6a:32:aa:89:82:35:f7:d3:16:3b:23:74:f4:1e:f9:d4:
6c:f0:da:58:79:53:de:73:52:20:fe:f5:f2:fe:ed:35:03:67:
b6:a7:84:73:14:e9:00:26:d2:7e:9c:30:8d:09:44:0a:6f:ba:
0d:a3:3e:4a:44:65:aa:36:61:0a:e2:8b:22:1a:a7:c4:dc:b4:
81:58:fa:69:02:3a:b1:16:eb:bf:4b:4d:a5:e2:5c:65:3e:86:
b1:1f:a7:bd:98:59:60:02:80:9d:77:a9:5a:a9:25:23:7d:eb:
b9:48:9d:b8:53:8b:c2:f1:ee:0d:9e:a9:53:d4:3d:69:6e:39:
46:e3:78:6d:52:a4:77:dc:37:2d:b6:97:ae:dc:10:c2:ae:05:
93:e8:aa:1a:86:85:ef:92:2e:c6:23:89:90:30:b1:e6:b7:0d:
87:86:40:75:57:19:1d:1c:8b:84:67:31:22:00:d8:8f:8e:62:
5b:7c:5c:2d:e1:44:a7:4d:7b:06:80:f9:11:62:d2:ca:2b:6b:
94:b2:50:eb:51:ee:45:65:a8:35:7a:e0:39:56:ae:7c:40:8e:
87:53:31:2f:fb:0f:2b:3b:9a:5b:57:2d:b4:e3:f5:de:fb:28:
a5:7e:d7:ec:e3:e8:f4:86:d3:1f:74:4e:bc:fd:a3:9b:b6:71:
cb:03:da:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8oOJJItqNUcbm9D2yvyDzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2
ZmQ5YjUwHhcNMjYwNzAzMTM0MzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTYxNWE3N2QyM2U3ZThlOWIwYzFkMGM3MGUyYzc5MzAyMDExN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQB33tpnwwhYiyE05ZatOh2V1yx4
XpJta6iLCS/hS6IOvJkDX2SMWcHbA1s39cPW5DG0I81ODXM40/5VcbJF1rySEMVU
MRLfzAD5X8VATTQ+bCBJURJhvOkMgm45BxVZwsee2Ktac9wsGeDDyllboTSvw9r6
Pyq9t1gUk8prEjKSeclM9l1nzxUwzZ5Yd/lacSQtYLTdFUApxK3biTni0FbBCPg8
GDUsQ6cziAuxfpDbYrhzMed5iWHp0kwkp0DyD4RrTYvk7x8xc8l90H8sqD4SGRyN
kXbxdeD0VaNZvsLcJGzSh8ZE6xhYDN29Crjf9XHTCXRQHUZfHkh4kzAWdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5hWnfSPn6OmwwdDHDix5MCARfRMB8GA1UdIwQY
MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt
NTk1OTE5YmUwZjUyLzEvM21GYWQ5SS1mbzZiREIwTWNPTEhrd0lCRjlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy
LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUs4OMA0G
CSqGSIb3DQEBCwUAA4IBAQAn4moyqomCNffTFjsjdPQe+dRs8NpYeVPec1Ig/vXy
/u01A2e2p4RzFOkAJtJ+nDCNCUQKb7oNoz5KRGWqNmEK4osiGqfE3LSBWPppAjqx
Fuu/S02l4lxlPoaxH6e9mFlgAoCdd6laqSUjfeu5SJ24U4vC8e4NnqlT1D1pbjlG
43htUqR33Dcttpeu3BDCrgWT6KoahoXvki7GI4mQMLHmtw2HhkB1VxkdHIuEZzEi
ANiPjmJbfFwt4USnTXsGgPkRYtLKK2uUslDrUe5FZag1euA5Vq58QI6HUzEv+w8r
O5pbVy204/Xe+yilftfs4+j0htMfdE68/aObtnHLA9rT
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:28 2026 by rpki-client