Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/A3xenjrTB4KovmU3N9JmqfjTu0E.roa
File: A3xenjrTB4KovmU3N9JmqfjTu0E.roa (raw, json)
Hash identifier: kCMalxBQ/mXihteRNIWtep9ycGZYesm9uTfeamj5U3g=
Subject key identifier: 03:7C:5E:9E:3A:D3:07:82:A8:BE:65:37:37:D2:66:A9:F8:D3:BB:41
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019F47F5E15CCC14ACF957722D4A1E584906
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/A3xenjrTB4KovmU3N9JmqfjTu0E.roa
Signing time: Thu 09 Jul 2026 17:38:44 +0000
ROA not before: Thu 09 Jul 2026 17:38:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a0e:bac0::/29 maxlen: 29
2a0e:be80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:f5:e1:5c:cc:14:ac:f9:57:72:2d:4a:1e:58:49:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 9 17:38:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=037c5e9e3ad30782a8be653737d266a9f8d3bb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3e:1e:fa:1b:c5:a8:5a:ed:29:88:57:db:a7:
d3:57:f6:88:82:c4:e1:a1:6b:60:88:41:05:7e:61:
ad:ec:cb:12:c3:b4:5f:89:50:68:bf:a9:89:6e:94:
13:5b:5e:db:97:a9:e5:13:62:bb:c6:5b:84:b9:fd:
93:8b:86:fa:bb:2f:57:26:bb:3f:10:75:51:f1:df:
d2:a0:66:c4:5c:d1:7e:d0:c1:de:47:52:fb:23:2a:
2b:fe:32:31:3b:d0:26:24:6f:fd:6c:2d:8f:bb:0c:
74:3e:e8:ba:c3:14:42:83:d4:17:c3:0d:75:e9:1f:
e7:31:4b:73:36:fc:79:ed:06:ce:fe:90:05:7e:25:
29:c5:f4:9f:c3:fb:86:9c:85:9d:3a:c7:60:bb:1c:
1c:32:5b:05:73:e6:94:03:63:bc:56:5e:83:d7:dd:
97:34:fa:e5:45:d9:e1:e7:65:b0:36:e2:44:e5:4a:
cd:99:fb:19:9f:20:19:e7:e4:ad:3a:40:7b:05:e4:
4a:d2:d5:9a:1e:cd:88:b8:02:d8:37:68:8a:96:54:
15:61:1f:74:0a:e0:18:19:8a:40:1a:52:2b:e1:10:
06:8e:6b:0f:d9:c0:a1:b8:0b:de:07:71:ea:08:c0:
ba:b6:cd:7f:0f:f4:e7:9c:15:38:a6:45:b7:c2:b7:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:5E:9E:3A:D3:07:82:A8:BE:65:37:37:D2:66:A9:F8:D3:BB:41
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/A3xenjrTB4KovmU3N9JmqfjTu0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:bac0::/29
2a0e:be80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:0d:cb:1e:9b:30:bc:71:0a:a0:d5:57:3e:3e:66:ed:c3:02:
e4:a7:eb:f1:f0:9c:e3:3e:c6:d1:25:89:86:d6:a9:1c:d8:88:
b6:fd:db:74:33:ef:d5:c4:72:2d:69:b1:e0:72:50:07:6f:f7:
0a:8d:22:95:af:2f:02:39:f7:fb:dc:8d:42:c5:62:04:b9:5d:
e5:c3:35:28:52:86:a0:85:93:d6:f1:c1:ae:1c:4f:cf:21:46:
11:10:e7:04:21:36:7d:b8:31:4f:45:69:d2:83:ba:f2:6b:01:
ea:48:e4:33:55:85:9f:d0:4e:d8:03:b3:c7:c8:15:27:14:2f:
63:8b:fe:51:1e:e7:06:b4:95:c3:f3:d9:53:5a:76:49:84:39:
ac:9f:39:47:af:91:15:7e:73:80:68:0e:ed:d2:4d:d5:53:f4:
3d:68:85:85:b6:47:08:cc:5d:64:a2:d8:1c:3e:f9:3a:f1:e5:
60:be:fb:d5:c6:c9:a5:43:42:47:24:12:f4:ce:74:90:71:dc:
b9:14:9e:e9:90:74:dc:ed:09:c2:fc:7c:bd:2e:53:cc:3a:d5:
19:43:a7:47:6e:39:7c:fe:a8:40:04:3d:7b:ea:32:13:c0:8e:
ac:c1:59:98:92:6d:34:d6:00:16:f9:3c:65:49:28:05:fd:66:
aa:5c:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 16:04:28 2026 by rpki-client