Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3xbarsqshL3ysrX6kH5bWaNWwuE.roa
File: 3xbarsqshL3ysrX6kH5bWaNWwuE.roa (raw, json)
Hash identifier: unsL3/uaUpXDjwFD6E6vJ2DYvnysCDnPHpNtbMVveoA=
Subject key identifier: DF:16:DA:AE:CA:AC:84:BD:F2:B2:B5:FA:90:7E:5B:59:A3:56:C2:E1
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019D77292C355170E6DA87F6921EF9E1F42E
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3xbarsqshL3ysrX6kH5bWaNWwuE.roa
Signing time: Fri 10 Apr 2026 11:31:20 +0000
ROA not before: Fri 10 Apr 2026 11:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2a03:5840:151::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:29:2c:35:51:70:e6:da:87:f6:92:1e:f9:e1:f4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 10 11:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df16daaecaac84bdf2b2b5fa907e5b59a356c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:16:9a:4e:68:d8:8d:06:bd:b7:bc:b1:6d:
f4:f1:94:90:ce:30:d2:c2:1b:9d:0d:37:ed:df:09:
94:60:e7:da:69:6d:92:c1:4e:2b:1b:4f:82:09:18:
f5:6e:d3:5e:b3:47:dc:4b:be:db:d6:d5:dc:02:e6:
de:ff:aa:04:ad:91:c6:c3:f4:b8:42:94:23:5b:ce:
ff:a9:04:5d:e4:0a:16:92:58:12:57:7e:1a:5c:45:
3d:cf:2d:d1:a1:83:d3:fe:89:37:cc:39:db:94:e8:
3b:3a:69:6f:3b:a3:fa:be:da:e7:cf:2d:03:db:d7:
54:3e:73:85:12:fe:b1:46:af:cf:7e:05:df:1e:dc:
b6:62:21:ff:f8:cb:24:6b:8e:64:9c:e9:10:01:a9:
c0:80:45:a5:f0:0b:ea:5c:08:29:cf:a8:ca:f4:9c:
62:03:c2:75:e8:40:28:1c:f9:07:89:78:f0:e7:13:
95:17:a2:51:5f:18:af:91:5c:19:20:c7:ef:15:46:
6c:9b:6a:cc:ae:6b:2e:e2:7c:8b:7c:53:0a:e5:bc:
d8:c0:0d:03:f8:67:f1:23:1c:fa:4e:95:27:28:7d:
fe:ac:4c:b4:e7:3f:86:f4:44:a4:46:ce:c0:06:d4:
44:4e:21:ac:52:0d:09:23:48:ad:c9:f0:c7:12:e9:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:DA:AE:CA:AC:84:BD:F2:B2:B5:FA:90:7E:5B:59:A3:56:C2:E1
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3xbarsqshL3ysrX6kH5bWaNWwuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:151::/48
Signature Algorithm: sha256WithRSAEncryption
8c:2a:03:ba:37:6b:01:fa:9a:34:3c:2d:da:bd:cd:f4:cc:ea:
2d:55:0e:dc:dc:d8:22:e7:ba:b8:43:1c:e7:ff:36:a5:65:ac:
01:64:2d:3b:e0:b8:b9:38:53:e2:42:6b:06:47:88:cf:80:29:
98:df:c4:5f:ea:13:6a:60:66:be:3f:44:ed:ae:21:86:8c:3f:
3f:d4:1d:07:4f:b9:4d:15:ac:b8:29:04:d3:49:44:e2:a1:7a:
55:90:00:c2:9a:a7:26:2c:cf:da:42:94:c5:68:17:7e:40:c2:
52:30:7e:5f:c3:74:3a:2f:ae:17:31:a2:67:c3:41:d0:4e:3f:
1d:95:f0:f4:06:8b:45:3f:fa:64:fe:84:0e:51:57:b0:c7:71:
69:e1:78:89:eb:35:bf:b2:21:49:4e:62:69:2c:b2:d9:45:2a:
7b:03:aa:cf:0c:cd:4c:9e:89:be:a6:99:e2:4f:65:f6:ee:24:
3f:62:c4:ac:45:a8:f5:a5:8c:1d:7d:87:b9:7b:b2:2d:ef:da:
54:59:5d:be:eb:e7:ed:fc:27:2b:b4:30:cf:14:69:5b:0f:63:
23:6f:9e:bd:a7:0a:b6:87:72:4c:75:e2:d4:35:c2:6e:ed:a4:
7a:96:d9:40:48:21:b0:35:cd:ea:f7:c8:9b:68:83:16:a2:2b:
52:15:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:33:38 2026 by rpki-client