Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/r3LCaibtpFjKCjqwMysqd2EY7CE.roa
File: r3LCaibtpFjKCjqwMysqd2EY7CE.roa (raw, json)
Hash identifier: n3FX58nAP4iAPo8D51kxLs4kCK4nV7os6K467cBupbk=
Subject key identifier: AF:72:C2:6A:26:ED:A4:58:CA:0A:3A:B0:33:2B:2A:77:61:18:EC:21
Certificate issuer: /CN=7a4f756ee5bd423e9e915f56bd87a7961b58a937
Certificate serial: 019F236875785C63DC66AD301A72688BFD15
Authority key identifier: 7A:4F:75:6E:E5:BD:42:3E:9E:91:5F:56:BD:87:A7:96:1B:58:A9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/r3LCaibtpFjKCjqwMysqd2EY7CE.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44399
IP address blocks: 185.252.72.0/22 maxlen: 22
2a0c:2340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:75:78:5c:63:dc:66:ad:30:1a:72:68:8b:fd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a4f756ee5bd423e9e915f56bd87a7961b58a937
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af72c26a26eda458ca0a3ab0332b2a776118ec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:38:9c:61:9e:ef:0c:97:f3:f5:f0:77:a1:
03:da:02:59:b6:0d:51:6a:20:f8:ac:5a:1e:3f:cc:
a5:11:81:67:2a:de:c3:c9:20:94:6e:56:9c:7a:20:
fe:96:36:64:83:d0:db:1d:a9:fa:33:6c:27:9d:b6:
dd:52:29:f0:c0:ca:b5:0a:68:ab:5b:b3:ac:22:9c:
6b:fc:31:ea:1a:63:4e:1a:de:55:06:75:5d:b0:29:
7f:d4:26:47:0d:ef:47:1d:9e:c2:73:25:7e:7d:8e:
6a:4c:11:04:24:14:91:4d:c2:40:8a:1a:7d:f8:8d:
c2:b5:89:65:ea:a8:01:25:69:85:69:7f:8b:2b:89:
59:58:59:d3:7f:e5:75:fa:31:62:df:56:af:c9:bd:
aa:26:68:df:a4:b9:c8:70:75:2e:6d:33:38:61:a2:
44:83:0e:66:b6:4d:68:bd:c6:e9:64:d3:6b:22:83:
82:62:e8:73:14:1a:38:69:02:ad:bf:8a:9b:5c:2e:
27:1c:c8:21:20:43:34:4f:74:c0:91:16:4d:43:3d:
5e:4c:d0:2a:9d:60:5a:0d:49:0c:d5:10:3c:fc:9e:
70:22:da:6a:89:97:76:44:68:dc:65:6a:53:b9:18:
f6:90:73:51:0c:cb:c7:43:ae:62:f2:a1:b1:df:6a:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:72:C2:6A:26:ED:A4:58:CA:0A:3A:B0:33:2B:2A:77:61:18:EC:21
X509v3 Authority Key Identifier:
keyid:7A:4F:75:6E:E5:BD:42:3E:9E:91:5F:56:BD:87:A7:96:1B:58:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ek91buW9Qj6ekV9WvYenlhtYqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/r3LCaibtpFjKCjqwMysqd2EY7CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/ek91buW9Qj6ekV9WvYenlhtYqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.72.0/22
IPv6:
2a0c:2340::/29
Signature Algorithm: sha256WithRSAEncryption
23:d9:03:6f:d3:6e:55:20:0c:6d:86:c7:c0:3e:0f:79:83:41:
4c:b8:fc:39:c1:bf:b6:11:9e:09:03:8a:6f:b6:91:9a:ce:5f:
ce:73:37:d0:54:89:26:cf:39:98:c8:8c:65:58:0a:c3:1a:41:
6c:cc:a3:f5:71:7f:47:8e:97:f3:de:cf:e9:24:5e:fa:92:22:
54:e1:c5:64:f5:14:5b:25:ad:8d:be:d5:84:4a:e7:d9:fa:9e:
b4:0e:1d:a7:bf:e3:c6:05:2c:47:9d:ae:61:aa:30:7f:bf:23:
26:c5:d8:bf:78:1c:3a:57:32:8f:3f:3f:75:17:11:f3:8d:e2:
f4:6f:04:16:8c:42:07:4c:6a:48:77:98:f4:4d:5b:4f:5f:33:
52:10:8b:99:db:c2:43:17:f1:28:30:63:78:1c:2b:7b:fd:7f:
3c:30:fe:c3:41:b7:db:87:29:f4:00:ef:70:ed:79:04:c2:0e:
52:7d:fa:93:3b:d5:01:72:c3:6d:7e:6a:8c:f5:2a:f5:a4:d9:
12:92:13:61:a7:3c:30:d0:87:dd:a9:f0:9a:a8:5b:98:b7:23:
63:48:78:c4:63:67:05:b9:17:f1:d5:b9:f5:82:95:38:23:3a:
19:82:d8:7e:4e:49:2e:d5:31:d3:c6:95:c4:ca:dc:a7:a4:7d:
99:1f:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:52 2026 by rpki-client