Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3qSeOGs0M8YS0LFK46yfzcd5PfE.roa
File: 3qSeOGs0M8YS0LFK46yfzcd5PfE.roa (raw, json)
Hash identifier: IlhRJw36lzG3RQf4K6nvn1xgnh/h5xjVqM34kTj5PgM=
Subject key identifier: DE:A4:9E:38:6B:34:33:C6:12:D0:B1:4A:E3:AC:9F:CD:C7:79:3D:F1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A0379FB37AE49C5B44F34CF0B78F5F9309
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3qSeOGs0M8YS0LFK46yfzcd5PfE.roa
Signing time: Tue 25 Aug 2026 06:33:27 +0000
ROA not before: Tue 25 Aug 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201891
IP address blocks: 2a0f:2743::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:9f:b3:7a:e4:9c:5b:44:f3:4c:f0:b7:8f:5f:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 25 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dea49e386b3433c612d0b14ae3ac9fcdc7793df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:27:ca:0e:33:42:e9:0b:00:2b:49:12:e2:
8e:bd:63:ad:88:53:13:81:9f:da:27:cf:6a:0e:4e:
20:4c:c7:0a:59:a3:5f:9f:e6:cb:18:4c:2f:cd:1f:
41:df:b2:94:6e:a8:18:bb:05:cb:51:6e:5d:4b:d0:
ca:47:af:75:fb:fd:de:fd:f7:27:cd:a6:eb:db:d2:
b6:bd:c0:1b:8d:8d:70:2c:a2:08:a8:88:96:ba:b4:
e0:e3:60:c5:b3:06:22:3b:81:e0:8b:9b:29:a1:d9:
73:f5:75:41:37:f3:8b:34:14:00:1a:f4:c9:17:94:
80:80:2f:d7:ef:32:ca:28:46:9b:91:71:33:c3:5e:
3d:62:c8:19:14:7e:58:c3:66:14:ba:dc:de:28:31:
19:dc:9e:18:29:1d:1c:6f:18:ea:76:ed:38:bf:67:
eb:20:cd:1f:5b:92:76:27:da:ba:cc:16:1e:7e:d9:
93:76:f3:f1:9d:b5:d1:16:c2:8f:1e:62:00:b1:a5:
3f:2a:48:c3:06:2c:47:b8:0e:b4:04:a2:b4:57:3c:
b3:06:2e:e0:40:e2:50:ea:f3:ae:ae:80:5f:7f:35:
86:a5:ec:6e:bd:7a:c9:73:11:56:31:b4:e2:91:17:
04:e0:b2:a1:a7:9a:4e:13:dc:94:b1:a5:9a:4e:5c:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:9E:38:6B:34:33:C6:12:D0:B1:4A:E3:AC:9F:CD:C7:79:3D:F1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3qSeOGs0M8YS0LFK46yfzcd5PfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2743::/32
Signature Algorithm: sha256WithRSAEncryption
52:69:6c:7d:0e:1e:42:be:ab:5d:f9:e7:79:4d:55:ca:b0:72:
f7:c9:de:2d:f7:cf:b0:7b:df:27:2f:b0:41:80:62:9b:6f:a7:
c4:63:11:e4:48:85:09:32:d4:dc:ca:78:de:db:60:e9:fb:2c:
3f:8e:13:c1:30:1e:85:6f:3d:1e:66:5c:28:12:e9:e5:3f:06:
14:57:58:ca:47:d1:9c:3f:87:89:65:e8:42:9a:fb:b4:ee:a5:
13:1e:90:10:21:a8:e4:52:8b:b5:a3:ef:0c:9e:f2:fa:f0:21:
f2:d3:c7:06:5b:91:d0:ea:06:30:ce:18:88:c3:dc:e8:a9:1f:
4f:ab:db:b3:86:c7:b8:66:53:53:f1:b2:bc:2f:ee:c6:49:c4:
3b:dc:ba:eb:09:c7:3c:bc:de:04:3d:a8:e9:b4:51:4c:0d:cc:
f7:9b:3a:86:46:14:b3:3a:72:0d:7e:65:3f:fc:59:26:21:f1:
1b:f5:8e:4a:c2:f0:f2:37:fb:5f:01:25:86:b1:e3:68:0d:55:
0e:d4:ac:4c:49:9c:20:09:9d:41:28:69:b2:c1:e4:7c:f8:7a:
bc:f2:e7:94:15:f4:cb:5f:1f:93:66:70:8e:47:81:62:b9:16:
71:83:a2:21:70:bf:1f:c7:75:9d:22:19:94:f1:74:ba:aa:d0:
2f:5b:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:49 2026 by rpki-client