Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/7k3tX3N-1zZ71wH1GhPCkUt-C0k.roa
File: 7k3tX3N-1zZ71wH1GhPCkUt-C0k.roa (raw, json)
Hash identifier: uw6v1182y5j0BfUuUWVNrAH6ODu5+EGAn/J//31VmAY=
Subject key identifier: EE:4D:ED:5F:73:7E:D7:36:7B:D7:01:F5:1A:13:C2:91:4B:7E:0B:49
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03F7CF16A5797047E0132B04F849441DA
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/7k3tX3N-1zZ71wH1GhPCkUt-C0k.roa
Signing time: Wed 26 Aug 2026 19:12:27 +0000
ROA not before: Wed 26 Aug 2026 19:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200954
IP address blocks: 201.3.237.0/24 maxlen: 24
201.4.76.0/24 maxlen: 24
201.7.19.0/24 maxlen: 24
201.7.22.0/24 maxlen: 24
201.7.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:7c:f1:6a:57:97:04:7e:01:32:b0:4f:84:94:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 19:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee4ded5f737ed7367bd701f51a13c2914b7e0b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:15:09:a0:6e:4d:4a:b6:42:8c:93:0c:8e:
04:88:d4:b4:99:f2:c3:65:09:50:d4:23:69:03:33:
e2:7d:c7:f0:85:f9:8e:78:35:0c:30:67:48:ca:f8:
cc:af:30:ff:6f:5f:83:3f:94:23:91:a0:f6:4a:fb:
9a:4d:79:58:e2:32:9a:f5:df:84:e0:30:7a:18:ab:
58:05:75:70:d3:87:db:eb:0f:f5:3c:70:6b:10:a2:
47:0b:30:ca:3e:35:6c:b0:19:c4:97:d0:2b:dd:c5:
41:3e:91:cc:70:6a:84:6a:26:59:09:af:f6:64:e2:
cd:a3:be:2c:c6:da:a8:8c:1d:a0:81:49:d6:9d:79:
27:26:86:c3:c4:84:18:08:42:ea:17:d1:e7:c0:fb:
eb:f6:f0:61:d2:e3:bf:3e:c3:8c:f4:05:8f:4f:67:
48:8f:cc:86:2d:ca:d9:09:53:53:48:97:c4:34:96:
19:4c:01:f3:55:1a:1e:4e:b7:39:be:f3:cb:61:4f:
2a:a2:f0:04:73:0a:6a:2d:f0:a7:a9:cf:da:54:f9:
5a:3e:c6:33:90:84:b7:4d:f2:d1:e5:52:ce:bf:6d:
4c:3d:8f:d7:ba:a1:83:30:d5:87:ce:38:7b:ef:12:
a5:93:f0:7a:e9:d1:32:44:a2:9f:a3:23:98:40:e0:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4D:ED:5F:73:7E:D7:36:7B:D7:01:F5:1A:13:C2:91:4B:7E:0B:49
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/7k3tX3N-1zZ71wH1GhPCkUt-C0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.237.0/24
201.4.76.0/24
201.7.19.0/24
201.7.22.0/24
201.7.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:79:4b:7e:6f:20:b2:8f:e4:02:b7:3a:47:db:c6:d9:bc:19:
08:0f:d2:5a:aa:2b:51:13:2b:2b:00:cc:eb:8a:e8:77:aa:8e:
24:e7:8f:68:9f:4f:20:23:b3:bb:a4:ef:66:43:6a:25:2e:7b:
9c:14:ff:f5:cc:8f:d2:3b:dc:6d:9b:8c:6f:54:36:05:90:38:
03:07:b0:70:84:30:7c:6c:87:b1:8d:11:f1:30:14:1a:fc:4d:
8e:93:d1:5c:aa:87:9f:e8:fb:6a:90:85:2a:19:a4:c6:2d:9e:
10:c0:1a:e7:d9:e8:5a:9a:f3:5e:30:f4:fb:b5:91:1c:3f:01:
85:28:f0:e3:91:65:41:ad:a0:c9:b7:ce:49:b2:45:7e:21:ff:
50:13:25:3d:fc:fa:70:ba:d5:c5:4d:a8:5f:7a:29:1c:1b:c8:
76:bb:27:f4:64:9a:bb:42:4d:fa:ce:a9:de:be:88:f2:7b:e8:
88:7b:b3:d6:ce:e7:86:0e:53:e5:a6:39:82:2a:b0:b1:d3:0d:
f0:22:bb:5c:b6:71:1d:ca:29:73:2c:af:ec:70:85:20:e0:4c:
87:b1:e0:10:50:db:d7:04:b0:bd:85:79:96:1c:7c:7c:95:33:
22:63:91:b1:45:20:5b:02:05:4f:16:3e:09:f8:37:20:fd:72:
66:09:f4:a7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaA/fPFqV5cEfgEysE+ElEHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZDFkN2Q0MzM2NmE1YjAwNjNjMzc1NzEzMTlkZmE0MzJk
MTUzMWIwHhcNMjYwODI2MTkxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTRkZWQ1ZjczN2VkNzM2N2JkNzAxZjUxYTEzYzI5MTRiN2UwYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMEVCaBuTUq2QoyTDI4EiNS0mfLD
ZQlQ1CNpAzPifcfwhfmOeDUMMGdIyvjMrzD/b1+DP5QjkaD2SvuaTXlY4jKa9d+E
4DB6GKtYBXVw04fb6w/1PHBrEKJHCzDKPjVssBnEl9Ar3cVBPpHMcGqEaiZZCa/2
ZOLNo74sxtqojB2ggUnWnXknJobDxIQYCELqF9HnwPvr9vBh0uO/PsOM9AWPT2dI
j8yGLcrZCVNTSJfENJYZTAHzVRoeTrc5vvPLYU8qovAEcwpqLfCnqc/aVPlaPsYz
kIS3TfLR5VLOv21MPY/XuqGDMNWHzjh77xKlk/B66dEyRKKfoyOYQOB+3wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFO5N7V9zftc2e9cB9RoTwpFLfgtJMB8GA1UdIwQY
MBaAFOPR19QzZqWwBjw3VxMZ36Qy0VMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEt
ZjcyYWIwMzE3N2MxLzEvN2szdFgzTi0xelo3MXdIMUdoUENrVXQtQzBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lOTE2MjctODQzYy00OWJjLTliZWEtZjcyYWIwMzE3N2Mx
LzEvNDlIWDFETm1wYkFHUERkWEV4bmZwRExSVXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAyQPtAwQA
yQRMAwQAyQcTAwQAyQcWAwQAyQcbMA0GCSqGSIb3DQEBCwUAA4IBAQCzeUt+byCy
j+QCtzpH28bZvBkID9JaqitREysrAMzriuh3qo4k549on08gI7O7pO9mQ2olLnuc
FP/1zI/SO9xtm4xvVDYFkDgDB7BwhDB8bIexjRHxMBQa/E2Ok9Fcqoef6PtqkIUq
GaTGLZ4QwBrn2ehamvNeMPT7tZEcPwGFKPDjkWVBraDJt85JskV+If9QEyU9/Ppw
utXFTahfeikcG8h2uyf0ZJq7Qk36zqnevojye+iIe7PWzueGDlPlpjmCKrCx0w3w
IrtctnEdyilzLK/scIUg4EyHseAQUNvXBLC9hXmWHHx8lTMiY5GxRSBbAgVPFj4J
+Dcg/XJmCfSn
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client