Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3-N_z37dEVdPmlmBGh9qB5C8jxA.roa
File: 3-N_z37dEVdPmlmBGh9qB5C8jxA.roa (raw, json)
Hash identifier: tC4in7cLCQoQLL0RM3kDtB8mUgo5pab18Uv/GWOrYjA=
Subject key identifier: DF:E3:7F:CF:7E:DD:11:57:4F:9A:59:81:1A:1F:6A:07:90:BC:8F:10
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019E3AC9B1CAC030250B19BE9D99B057DCED
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3-N_z37dEVdPmlmBGh9qB5C8jxA.roa
Signing time: Mon 18 May 2026 11:12:37 +0000
ROA not before: Mon 18 May 2026 11:12:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0a:2d07:cc::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:c9:b1:ca:c0:30:25:0b:19:be:9d:99:b0:57:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 18 11:12:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfe37fcf7edd11574f9a59811a1f6a0790bc8f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:69:3f:bb:e8:8b:67:9a:1d:91:a5:64:fa:
25:2c:cb:1e:98:ec:c4:1a:65:97:d3:0d:a1:4e:fd:
45:4e:3a:5c:87:5e:70:a0:cf:9b:11:02:6b:6a:dd:
dc:db:31:ab:bd:45:7e:77:be:f6:09:4a:ee:e2:8a:
81:75:d5:eb:cd:43:e6:73:06:20:79:96:0e:36:a7:
05:48:79:ff:55:74:df:c3:0d:a7:f4:fa:8b:25:8d:
21:4f:dd:cd:40:53:8f:6d:3d:df:b7:ae:08:97:65:
93:a9:a6:d8:c9:29:50:cf:a7:f1:d0:f1:d4:01:e3:
1b:09:cf:69:a5:02:f0:fb:b1:ed:47:f9:68:a1:a4:
3b:11:e0:0f:d7:fd:0b:a1:ab:64:d5:24:bf:8a:70:
46:35:b7:11:20:d3:8e:93:86:9b:e0:a2:2e:e0:78:
4f:04:64:bc:f6:df:fe:8b:fd:32:e6:b8:55:2f:8d:
f0:5b:09:40:44:35:61:8a:e0:6d:55:36:58:0c:c4:
cb:6b:18:40:57:84:62:78:fe:e0:88:7f:f7:dd:9c:
20:95:2a:6b:50:a8:55:df:01:6b:db:a2:a1:68:f7:
cb:60:33:e4:36:dd:5c:82:26:49:6e:87:5c:9f:f6:
2c:c8:6b:fb:1d:6f:67:0d:0b:6d:a2:2d:f0:29:db:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:7F:CF:7E:DD:11:57:4F:9A:59:81:1A:1F:6A:07:90:BC:8F:10
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3-N_z37dEVdPmlmBGh9qB5C8jxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:cc::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:c900:66::/48
Signature Algorithm: sha256WithRSAEncryption
2a:34:77:8b:9c:68:92:5d:88:c6:a8:a0:12:26:62:ba:1e:ed:
c8:40:bf:c9:0c:5e:8b:e0:3a:b5:7a:90:e6:49:47:4a:9a:51:
13:f8:83:be:79:28:ac:14:9f:6e:eb:69:e6:1c:81:e1:4b:c7:
8e:87:0a:95:06:da:ad:bf:db:29:d6:2d:e7:25:35:24:32:38:
e8:49:32:15:f1:d6:a4:92:f7:7b:20:4a:16:91:56:ad:96:e8:
f3:c3:74:b5:39:97:3b:ad:4d:aa:11:13:c8:c8:ba:a3:8e:2b:
7c:21:4f:c7:ba:06:d3:c1:35:a2:03:53:68:c2:cb:74:db:2c:
9a:92:05:1b:3d:9c:2b:7a:5d:2c:16:d1:ed:7a:08:33:c9:89:
27:53:a3:d0:57:5f:cf:0d:da:23:9d:d3:98:38:b8:e5:1e:d0:
95:a8:9a:74:bc:57:29:23:18:43:4c:a6:26:a1:bd:50:b7:8a:
d2:f1:56:36:68:63:66:6c:ec:2c:73:7d:ee:41:19:02:de:83:
06:a8:b4:46:99:2f:05:19:6d:5e:4f:36:62:1f:fc:db:80:09:
c0:c4:2a:61:13:79:4a:4c:dd:9a:56:cf:19:9a:19:99:9e:61:
f3:1f:bb:e7:ad:e6:29:7f:91:d9:f3:f7:aa:13:80:bb:57:72:
f1:3a:98:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:28:28 2026 by rpki-client