Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/dqBckBKFeDV96iA84mbxttB9DsI.roa
File: dqBckBKFeDV96iA84mbxttB9DsI.roa (raw, json)
Hash identifier: lbzEt3GrQ+Aijctxc4j4imtJvv3tNuTD5WdFdCSCd/M=
Subject key identifier: 76:A0:5C:90:12:85:78:35:7D:EA:20:3C:E2:66:F1:B6:D0:7D:0E:C2
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A00A0B4CF18850327BC5664E3C5BEF0BE0
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/dqBckBKFeDV96iA84mbxttB9DsI.roa
Signing time: Sun 16 Aug 2026 10:08:27 +0000
ROA not before: Sun 16 Aug 2026 10:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 201.3.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:0b:4c:f1:88:50:32:7b:c5:66:4e:3c:5b:ef:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 16 10:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76a05c90128578357dea203ce266f1b6d07d0ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:3c:6a:56:fb:1d:dc:38:ed:32:c8:9a:7b:
e1:0e:b1:77:b6:59:c8:39:3b:ea:fb:25:2a:dc:97:
47:33:81:16:71:62:4f:be:0a:87:70:21:32:d6:f1:
e3:a5:8f:1b:f6:84:0d:b1:b5:fb:3d:8f:72:44:14:
05:9f:6a:ac:aa:d6:e3:02:f1:16:2b:91:db:4f:9f:
7e:22:ff:ab:11:d3:54:af:21:28:5d:7b:32:38:2d:
38:24:cb:fa:c3:6c:ce:06:9f:23:a9:eb:fc:87:af:
81:4f:c4:d9:c0:9f:99:95:da:fb:70:3c:39:82:48:
35:ac:d1:ef:8b:94:cc:dd:79:35:8a:58:5e:5b:1c:
3b:6b:82:ca:61:12:d1:4c:97:8e:c0:51:07:2a:04:
82:59:88:77:04:8e:6e:60:3e:d8:0d:ef:c8:d4:f3:
7c:8e:83:41:e9:16:c6:3c:83:e9:84:58:e7:88:f7:
44:95:c0:29:e0:8a:04:13:71:04:25:70:17:db:da:
30:68:51:d5:13:82:ce:7c:36:02:e1:df:4a:d6:fc:
24:88:c0:96:ee:f4:66:de:93:ea:90:4a:e1:bf:a4:
69:80:72:46:ca:89:68:0e:34:a8:41:2b:97:cd:f2:
ae:80:d1:4a:b0:7a:0a:cf:e6:15:cb:a2:bb:23:d8:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A0:5C:90:12:85:78:35:7D:EA:20:3C:E2:66:F1:B6:D0:7D:0E:C2
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/dqBckBKFeDV96iA84mbxttB9DsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:29:b9:cb:8f:e2:51:77:da:08:0c:2d:3c:d5:be:c4:3b:e7:
fc:d1:78:70:67:48:28:7a:16:8d:1f:bd:de:0b:b3:4a:96:66:
c2:bf:fa:a4:b0:95:7d:8a:ea:c4:e0:f6:61:f6:69:e1:9c:16:
35:50:4f:05:c1:14:96:de:de:84:7c:b7:06:00:7b:62:3d:e8:
01:c7:98:c6:22:c9:ef:91:d2:ac:ae:db:07:77:76:3d:02:fd:
9c:7e:cb:1b:19:7d:6c:82:bc:c1:94:57:77:ea:9d:97:31:93:
71:d7:bf:a9:9c:76:cf:2d:74:c3:5f:43:c8:96:ff:6e:6b:29:
6b:04:58:2c:5e:18:b5:bf:17:a3:32:f0:b3:72:b8:43:46:67:
7b:d0:a9:67:81:5f:e3:ae:95:a1:0d:8a:c6:61:f6:20:82:b9:
d4:b3:ac:1f:6d:29:5c:e7:ad:d2:91:55:a2:9d:61:85:c0:b2:
4a:79:71:27:ba:83:0b:8f:f1:49:04:ec:d5:d9:f0:3f:11:b6:
bf:6a:21:fc:b1:04:2b:1f:4e:12:04:92:0e:72:25:82:21:d0:
4c:67:ff:2f:6b:f9:f8:37:9e:37:2f:70:22:93:ac:f3:fd:ce:
01:17:42:f7:a7:83:1e:a9:32:73:0a:cb:cc:63:4e:a8:0c:33:
38:ed:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:48 2026 by rpki-client