Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lr3wCUL0Jzn7iofku73QnaY7ETk.roa
File: lr3wCUL0Jzn7iofku73QnaY7ETk.roa (raw, json)
Hash identifier: J6hqTaeSEMS5MoQNAnk5+XVVOpLph6UYy+gNzZpQMQ8=
Subject key identifier: 96:BD:F0:09:42:F4:27:39:FB:8A:87:E4:BB:BD:D0:9D:A6:3B:11:39
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F4B5102C5A4A2470D5C2B0ED313E7DDD2
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lr3wCUL0Jzn7iofku73QnaY7ETk.roa
Signing time: Fri 10 Jul 2026 09:17:08 +0000
ROA not before: Fri 10 Jul 2026 09:17:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140469
IP address blocks: 201.3.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 05:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:51:02:c5:a4:a2:47:0d:5c:2b:0e:d3:13:e7:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 10 09:17:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96bdf00942f42739fb8a87e4bbbdd09da63b1139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:bc:a2:ff:71:63:d8:8e:46:7c:28:cf:43:
d9:a0:14:3a:b0:a3:4b:a4:e6:7b:d8:42:d8:d2:41:
5c:11:59:d3:78:df:c3:c7:2b:0e:e3:c0:2a:40:29:
f1:ee:d8:9a:37:37:40:87:76:aa:ec:6b:7e:b2:e1:
79:eb:b7:1d:2c:3d:d3:57:e6:91:3e:3a:c5:33:20:
15:83:ad:aa:1a:53:e2:74:f3:f3:01:9c:e7:94:1d:
fc:31:59:53:fe:43:26:d1:11:66:99:87:b6:0b:a5:
76:ed:b4:b0:2f:6e:9c:68:a8:a4:45:df:95:f0:64:
47:4f:f1:00:31:17:a6:30:70:4c:f2:de:a7:6c:8a:
92:9e:0f:95:ba:4d:23:50:d6:1d:fd:0e:5b:51:14:
33:d9:9e:e5:55:58:98:9c:5a:e8:b8:9d:92:1b:28:
39:24:83:cc:9c:1f:b9:ab:9c:aa:27:16:e2:c8:4a:
c7:55:f5:14:98:f2:96:00:94:ea:16:78:84:a8:a8:
f8:4e:54:0b:cb:3b:f1:47:f1:ea:a6:1f:e2:1f:0f:
8c:c1:d8:8f:4a:dd:b8:e1:f3:c7:6b:54:b9:f6:54:
81:b4:e8:fe:d2:91:4f:11:ea:04:83:52:ca:fe:82:
a9:b9:2b:62:dd:f7:a4:1e:af:8f:aa:cf:5f:d6:7f:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BD:F0:09:42:F4:27:39:FB:8A:87:E4:BB:BD:D0:9D:A6:3B:11:39
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/lr3wCUL0Jzn7iofku73QnaY7ETk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.124.0/24
Signature Algorithm: sha256WithRSAEncryption
54:26:34:78:3f:95:cc:e8:e0:a3:2c:1c:4d:da:eb:68:36:2c:
ef:5f:9d:03:fb:41:2a:b7:cc:8e:65:7b:a4:a3:9d:35:fe:ca:
3e:e4:1a:df:df:2c:a6:88:06:d8:12:34:6a:94:14:0a:27:d8:
58:11:bf:31:6e:91:16:56:cf:71:28:d5:c0:cc:d9:4f:eb:07:
2e:04:25:3f:19:80:d1:23:81:0d:c5:d8:a1:d1:89:5c:92:3b:
ec:d4:c0:24:70:25:c4:ff:98:0b:c6:51:48:8c:c9:63:24:32:
2e:6f:6e:9b:e4:25:56:8c:e9:8b:31:ac:30:6c:a0:de:02:bd:
ed:5e:2b:c3:b9:89:f1:fb:f1:74:9f:7e:3e:60:33:57:1f:5e:
dc:7c:7d:d1:f0:16:28:cf:ff:3a:1f:37:26:9a:55:d9:88:e2:
4b:a0:65:bf:4f:58:0d:1f:e9:7a:b0:08:d5:8c:e6:34:6a:32:
83:58:fc:9a:6a:4b:4d:59:e2:e4:b3:4c:da:d0:6a:ec:a5:05:
63:c4:08:38:94:33:78:a2:58:04:d6:85:9a:fb:22:34:7d:75:
7b:01:6c:06:9a:f8:2f:a9:c2:0f:21:3f:13:da:64:24:3e:2d:
e3:76:e1:13:04:da:ca:4c:07:bc:5f:38:5b:38:c6:1a:e4:e8:
12:74:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:22 2026 by rpki-client