Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r2hPohQJCMXkNznO6Uud3J4y7OU.roa
File: r2hPohQJCMXkNznO6Uud3J4y7OU.roa (raw, json)
Hash identifier: 9IHm/J3dgafmnoPOGYJgLtb8Yxs+mddqUHXlUKwSiDQ=
Subject key identifier: AF:68:4F:A2:14:09:08:C5:E4:37:39:CE:E9:4B:9D:DC:9E:32:EC:E5
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A00A0A62691F1CA5B82CE142D07988027F
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r2hPohQJCMXkNznO6Uud3J4y7OU.roa
Signing time: Sun 16 Aug 2026 10:07:27 +0000
ROA not before: Sun 16 Aug 2026 10:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402799
IP address blocks: 201.3.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:0a:62:69:1f:1c:a5:b8:2c:e1:42:d0:79:88:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 16 10:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af684fa2140908c5e43739cee94b9ddc9e32ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:82:6f:10:e5:11:25:1b:b5:5c:b7:23:07:
d3:6e:cf:cb:16:51:78:35:67:45:bd:41:79:cd:93:
39:aa:2a:ce:3c:c8:d9:49:8b:f5:99:b9:55:3c:7c:
19:d5:65:05:56:00:d7:2c:ff:dd:fd:88:d6:1c:19:
91:74:3b:92:e7:58:66:81:58:4e:f4:b3:b0:da:f0:
6e:72:d0:30:16:7b:08:02:c9:a8:25:b8:98:df:4a:
1e:f8:cd:02:05:e8:a1:d6:0a:a1:e7:d9:83:f4:13:
49:8c:e7:5c:c3:8a:0c:82:6a:7a:90:6b:2c:17:50:
f1:bf:c7:25:44:f5:93:12:4b:20:70:43:ee:4a:4c:
45:63:9d:b4:21:9e:4a:b7:97:b2:cb:ff:2d:5c:b9:
ed:35:6a:86:0a:e8:58:84:0e:86:d3:98:fb:92:81:
6b:4f:9d:c6:2e:2c:72:1e:2d:e6:ba:2b:b7:ab:ed:
9e:10:f2:6c:1c:72:d2:ba:4f:06:4f:4b:a1:b8:a7:
d7:3f:41:7c:8c:ba:ad:1b:98:12:b1:1b:14:2e:79:
f2:16:b3:32:71:e5:b0:8a:28:04:6c:90:68:c9:4b:
ae:4c:52:1b:ce:8f:d4:d0:23:ac:b5:49:cf:5d:f1:
07:78:4b:5a:5a:74:2e:01:63:c1:b5:b4:fc:f2:b7:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:4F:A2:14:09:08:C5:E4:37:39:CE:E9:4B:9D:DC:9E:32:EC:E5
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/r2hPohQJCMXkNznO6Uud3J4y7OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.239.0/24
Signature Algorithm: sha256WithRSAEncryption
52:78:a7:56:e3:0d:ff:f7:4a:87:81:76:f3:77:7f:88:07:f9:
55:13:55:53:af:77:33:10:56:c3:48:d8:8d:5f:ff:84:4a:4a:
ef:5a:92:a3:04:49:29:6a:ab:27:72:3b:69:14:6d:c7:f7:e3:
e6:be:31:3e:22:64:51:ed:fb:08:bc:74:6b:95:f6:2b:09:33:
b1:41:30:be:89:3c:bc:89:ac:a1:d1:37:7f:93:71:4d:4f:e2:
f8:f4:59:10:ce:70:fa:0d:d4:08:0c:ec:ac:e2:a8:90:15:14:
34:ac:01:88:d9:77:fc:3d:91:a1:61:79:d7:f3:dd:f4:7d:6d:
c8:9d:c9:ea:24:fe:16:c8:1d:12:3e:f9:73:69:7f:1c:73:cd:
b6:bb:35:59:b7:9c:31:b4:16:e6:d5:0d:f6:8f:06:31:f8:f8:
a4:cb:14:7d:14:5e:9c:74:ff:8f:5f:bb:41:35:7e:8e:61:ee:
de:41:7f:e1:2a:6a:33:f3:17:8c:23:85:70:3f:82:3a:6b:05:
e2:84:cf:4f:b2:ca:d2:1b:ee:e0:56:cb:d5:79:ec:01:5b:07:
be:73:ed:ec:fd:58:4e:bc:ca:a4:ec:f2:86:9c:f7:57:aa:14:
a9:17:23:7e:16:43:9a:7a:a5:13:f4:7d:2c:08:27:13:80:44:
05:42:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:30:34 2026 by rpki-client