Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ch3jxM7-aov4avnjPi-U7im_oLo.roa
File: ch3jxM7-aov4avnjPi-U7im_oLo.roa (raw, json)
Hash identifier: EyteeZpr/t/MRq75c6mafEvtKyn91lrGy/6KVcnkAec=
Subject key identifier: 72:1D:E3:C4:CE:FE:6A:8B:F8:6A:F9:E3:3E:2F:94:EE:29:BF:A0:BA
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01A048D8B1643CDA92991A7DF818F15253EE
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ch3jxM7-aov4avnjPi-U7im_oLo.roa
Signing time: Fri 28 Aug 2026 14:49:15 +0000
ROA not before: Fri 28 Aug 2026 14:49:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212618
IP address blocks: 2a01:efc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d8:b1:64:3c:da:92:99:1a:7d:f8:18:f1:52:53:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Aug 28 14:49:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=721de3c4cefe6a8bf86af9e33e2f94ee29bfa0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:b7:55:d4:d0:76:cb:d8:48:ed:4b:d1:dd:
47:1c:3f:a9:53:96:82:8c:97:74:f6:d6:0b:8f:0e:
8c:5f:7b:e7:ed:4a:1f:de:c7:92:7e:cf:ce:ed:3c:
36:6e:53:7c:42:8d:08:c1:17:d2:31:be:2a:43:d1:
70:7d:a1:fe:75:88:d1:91:59:8f:bb:b8:d7:35:ff:
dd:8f:ba:36:39:85:21:b0:f1:cf:cb:ae:a0:94:ab:
d4:75:40:e8:90:1c:57:be:98:4e:3a:44:11:da:2d:
2a:30:41:3e:36:55:9b:f5:ca:80:6c:9e:1d:81:7e:
e4:0d:79:71:4d:23:72:62:66:d9:26:f2:3c:59:69:
7e:c2:1d:dc:aa:30:da:ec:84:9a:a5:ef:9e:26:b2:
6e:6e:cb:f0:3f:3e:4a:7d:33:3f:c7:94:30:1d:e0:
14:54:72:f3:c8:d5:df:77:5a:ac:34:5b:25:cf:39:
8a:c9:1b:0d:10:6f:56:7d:01:36:9a:71:3d:ea:11:
09:f7:1d:26:e8:c0:13:54:28:33:55:77:76:09:a9:
6c:18:40:54:45:df:26:cf:9f:20:f4:62:59:a8:45:
b8:8e:37:70:fa:62:b6:31:99:e7:42:7d:89:7a:b0:
c8:be:c3:ca:86:2a:94:a4:b8:1d:bc:93:fa:4c:13:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:E3:C4:CE:FE:6A:8B:F8:6A:F9:E3:3E:2F:94:EE:29:BF:A0:BA
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/ch3jxM7-aov4avnjPi-U7im_oLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:08:65:d4:df:91:65:7e:af:8a:9d:e0:fc:05:c5:ff:ad:1c:
43:d1:07:ab:3b:27:d5:9f:c9:e7:6a:81:c4:d1:40:6f:41:49:
35:9c:4c:cc:13:36:ef:dc:54:f5:b3:1a:3a:a9:29:c5:3e:01:
ab:ff:29:46:5e:ba:87:4d:c3:1a:91:a8:42:6f:fc:0f:8a:9d:
e3:b0:d6:49:8a:4b:a8:3f:5e:2a:b7:86:29:3a:2e:7a:84:25:
0e:85:b8:5c:31:7b:ce:c6:7c:d8:99:bf:c7:6e:46:80:dd:5f:
5d:e6:79:49:7d:76:44:86:46:d4:a1:0c:c8:2e:59:64:c5:9b:
7b:78:a7:18:d6:36:53:e5:21:50:d2:1d:d2:81:15:d8:07:37:
fa:76:1f:5a:01:15:db:d8:d8:24:be:f4:3e:40:ea:7f:66:8d:
c1:28:f2:7c:0c:fa:e7:2c:d2:62:69:be:c1:c9:71:4c:1f:8c:
66:18:2a:a9:93:01:b2:ed:96:5f:9c:9a:a1:c3:3e:ad:0c:76:
8c:73:e5:42:ee:6f:a5:c4:e9:5b:e7:76:41:0d:c6:94:26:16:
72:de:9b:d7:f4:c0:2a:e0:be:91:03:14:a1:58:4a:6e:5e:61:
25:fd:06:eb:ad:b1:b2:cb:00:2c:28:90:2b:32:52:17:a2:42:
59:47:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:01 2026 by rpki-client