Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/L3ziogpW32Oo5y9-j_O5Fw1MANc.roa
File: L3ziogpW32Oo5y9-j_O5Fw1MANc.roa (raw, json)
Hash identifier: 3NNkUrQRUGlsUPybkrxQu2Ta/Xn4K7RsuPJOAiCDs7o=
Subject key identifier: 2F:7C:E2:A2:0A:56:DF:63:A8:E7:2F:7E:8F:F3:B9:17:0D:4C:00:D7
Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial: 01A0EC9513D36F1B381D9DFAA820CAFD5FD3
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/L3ziogpW32Oo5y9-j_O5Fw1MANc.roa
Signing time: Tue 29 Sep 2026 09:53:07 +0000
ROA not before: Tue 29 Sep 2026 09:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207345
IP address blocks: 195.110.9.0/24 maxlen: 24
2a06:2c80:3000::/36 maxlen: 48
2a06:2c80:5000::/36 maxlen: 48
2a06:2c85::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:95:13:d3:6f:1b:38:1d:9d:fa:a8:20:ca:fd:5f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
Validity
Not Before: Sep 29 09:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f7ce2a20a56df63a8e72f7e8ff3b9170d4c00d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:a8:b7:3d:a7:ea:16:7c:9d:aa:55:96:23:
78:2c:db:94:36:18:ed:a8:6d:39:05:01:ca:09:88:
c9:9f:35:eb:00:3c:73:15:4e:85:96:f1:3c:68:ce:
20:fe:b6:14:0a:aa:8e:9b:aa:74:f6:b5:9a:ae:be:
ac:23:d4:f3:5c:ed:1f:cb:9f:e6:da:a5:70:1e:5b:
9e:0e:fd:a7:47:7b:db:09:49:d5:6d:6c:3b:36:93:
e2:94:f3:2a:76:b2:8e:37:db:a6:26:c7:7e:88:7a:
77:7a:33:14:dc:51:11:ec:6b:e6:a2:ed:50:9f:d6:
19:9f:25:47:51:d6:5d:44:f5:8e:34:c5:b1:b8:5a:
3b:a4:dc:e7:2d:be:46:b4:a9:61:f3:00:c4:a6:ee:
0c:ba:d2:16:cb:42:9f:f4:4a:da:e0:7f:81:f5:df:
dc:b9:7b:4b:56:e2:89:b9:ba:6d:a8:8d:ac:f6:e4:
72:e6:21:8e:51:e7:81:6a:96:4f:04:3a:93:25:02:
e5:1c:f0:8f:bb:4f:ec:e5:94:af:0d:af:69:8e:d9:
b1:27:4a:d4:12:7c:39:1b:82:6b:d0:5b:4b:32:fa:
5b:a1:19:1a:23:55:5f:20:58:4a:5d:e7:69:4e:9c:
3b:7f:c3:a1:4e:57:ff:d8:87:71:53:76:87:e9:cb:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:E2:A2:0A:56:DF:63:A8:E7:2F:7E:8F:F3:B9:17:0D:4C:00:D7
X509v3 Authority Key Identifier:
keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/L3ziogpW32Oo5y9-j_O5Fw1MANc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.9.0/24
IPv6:
2a06:2c80:3000::/36
2a06:2c80:5000::/36
2a06:2c85::/40
Signature Algorithm: sha256WithRSAEncryption
ac:9a:0f:50:dd:69:06:23:da:d9:96:ec:66:0d:5c:c4:5f:84:
54:36:55:9a:dc:e9:d2:d9:cf:bc:ee:56:a1:7f:84:1a:06:5d:
0c:39:4d:3b:e0:7c:d4:0e:f1:ed:59:db:33:4d:36:16:c1:7b:
3d:99:01:8c:b3:da:24:74:24:f3:59:13:d8:9e:5b:56:c0:4a:
3a:35:d9:fb:73:10:28:6b:bf:35:4c:b6:48:15:a9:c7:3b:b9:
4d:71:fa:d9:0a:62:0c:7b:4f:be:56:68:ed:2b:66:58:2c:f1:
d6:3f:10:4e:a1:41:28:53:6c:53:39:84:02:78:cd:74:ef:2d:
84:9f:47:48:d6:6a:91:96:ea:c5:a5:c8:b8:72:3d:e9:1d:11:
10:95:4f:04:db:70:85:6a:c3:e7:60:f7:a6:ef:69:b7:00:c9:
20:19:d7:51:db:a2:28:0e:8c:f9:b2:fa:47:0c:24:43:ba:5e:
0f:18:11:2d:9f:4e:23:4e:43:39:c9:4e:cb:0b:75:6d:14:51:
b6:9f:f5:1b:60:6b:02:b4:24:18:ce:54:77:fb:0f:6e:d1:90:
19:69:82:cc:f2:5e:84:d8:d2:eb:7f:fa:87:a3:72:14:b7:d7:
7e:fe:dc:7f:e9:1b:79:75:28:53:3a:c9:9f:93:17:ba:ce:a0:
07:7f:3c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:48:44 2026 by rpki-client