Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p3_T8DeWPtAeHSeZ2B-Y_kT44WY.roa
File: p3_T8DeWPtAeHSeZ2B-Y_kT44WY.roa (raw, json)
Hash identifier: jVKeU/TG6bE9jpQNG8lzJGyb3A2xu0fssrrNg3T0aRc=
Subject key identifier: A7:7F:D3:F0:37:96:3E:D0:1E:1D:27:99:D8:1F:98:FE:44:F8:E1:66
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019ECFA99E073E1D883EEC1F68562C8F5EE7
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p3_T8DeWPtAeHSeZ2B-Y_kT44WY.roa
Signing time: Tue 16 Jun 2026 09:01:00 +0000
ROA not before: Tue 16 Jun 2026 09:01:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a10:3c00::/29 maxlen: 29
2a11:9a80::/29 maxlen: 29
2a12:880::/29 maxlen: 29
2a12:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:a9:9e:07:3e:1d:88:3e:ec:1f:68:56:2c:8f:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 16 09:01:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a77fd3f037963ed01e1d2799d81f98fe44f8e166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:3e:4a:48:44:98:39:77:9a:bd:f6:44:98:
8d:aa:eb:8e:34:ed:89:7f:ec:6c:b7:73:bb:3d:b2:
c4:ee:01:28:08:1d:04:2c:3e:97:9e:8e:88:60:2e:
c5:3f:52:93:ed:9f:43:8c:2c:e7:b9:d8:99:2e:b5:
87:d8:0f:d1:e8:ba:a6:53:c0:15:82:25:e3:4d:cf:
d6:d3:e8:ca:f9:b0:44:0f:89:f8:6a:4e:a0:75:bf:
f6:ad:23:53:7e:6d:d6:ad:9f:bc:b5:12:30:43:27:
21:d0:0f:7e:59:3e:12:aa:9a:e4:cf:c8:20:a1:df:
4a:2e:ff:c0:4c:6a:35:e3:76:11:11:8e:91:15:ed:
71:8b:49:74:69:59:29:2c:4e:1a:49:e6:64:c8:a6:
41:a9:2c:4f:7e:bc:55:d8:66:a6:8c:34:85:da:81:
d6:f5:d0:e1:f1:7f:4c:1c:82:c8:5b:a7:41:ad:55:
38:f7:d2:6d:b2:b6:5d:79:76:3d:3a:35:e9:1d:ef:
de:8e:43:e3:50:5f:1a:c4:f9:5e:9a:13:bd:fc:12:
32:4b:33:67:da:6b:19:30:bc:ae:1f:b5:2f:70:e3:
fc:1f:22:4a:02:a3:a0:82:6d:2c:72:8f:9b:65:92:
47:1a:41:02:8b:99:88:00:ba:c7:82:8e:63:fa:0c:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:D3:F0:37:96:3E:D0:1E:1D:27:99:D8:1F:98:FE:44:F8:E1:66
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p3_T8DeWPtAeHSeZ2B-Y_kT44WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c00::/29
2a11:9a80::/29
2a12:880::/29
2a12:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
45:d2:01:3d:03:08:46:a5:a2:f5:c9:41:36:82:4a:69:b3:12:
65:97:53:dc:1d:f4:e6:c6:39:c9:af:eb:81:c7:97:c7:f9:7d:
2c:8c:4b:c6:73:13:ed:92:da:7d:cc:9f:5c:8f:ab:27:c2:42:
52:1b:89:55:71:bd:7d:c6:68:24:92:17:aa:e4:c1:d2:fa:60:
d7:74:d9:8a:95:18:33:70:af:d2:9b:69:70:0b:e2:fd:50:e3:
45:9c:75:38:4f:a7:1f:42:73:ae:ab:7b:d1:a5:2e:90:3c:9b:
ad:f1:ed:cd:af:81:4b:9c:41:cf:83:67:4d:c2:48:e1:06:45:
b7:89:5d:e5:e3:f9:6b:8b:e5:ab:26:ab:9a:f5:e6:26:d9:11:
cb:ca:93:52:70:db:5d:2a:69:ce:44:bd:c2:15:a9:87:5f:40:
79:13:c7:26:57:e5:05:10:3f:11:6d:de:f8:6d:fb:b9:b2:47:
68:ef:23:4b:d9:18:52:b5:b6:c6:93:99:47:2b:a0:3e:82:fc:
93:3c:d3:a0:8f:c4:61:cb:27:53:c2:a0:4c:96:aa:b9:8a:29:
31:43:f3:15:b6:9e:14:5d:ba:2c:e5:f5:62:f9:18:5c:47:39:
df:03:a6:2e:d3:75:2b:50:af:d2:20:79:26:9f:e9:47:70:7e:
da:5b:7d:eb
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ7PqZ4HPh2IPuwfaFYsj17nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwNjE2MDkwMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzdmZDNmMDM3OTYzZWQwMWUxZDI3OTlkODFmOThmZTQ0ZjhlMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPo+SkhEmDl3mr32RJiNquuONO2J
f+xst3O7PbLE7gEoCB0ELD6Xno6IYC7FP1KT7Z9DjCznudiZLrWH2A/R6LqmU8AV
giXjTc/W0+jK+bBED4n4ak6gdb/2rSNTfm3WrZ+8tRIwQych0A9+WT4Sqprkz8gg
od9KLv/ATGo143YREY6RFe1xi0l0aVkpLE4aSeZkyKZBqSxPfrxV2GamjDSF2oHW
9dDh8X9MHILIW6dBrVU499JtsrZdeXY9OjXpHe/ejkPjUF8axPlemhO9/BIySzNn
2msZMLyuH7UvcOP8HyJKAqOggm0sco+bZZJHGkECi5mIALrHgo5j+gyaQQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFKd/0/A3lj7QHh0nmdgfmP5E+OFmMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvcDNfVDhEZVdQdEFlSFNlWjJCLVlfa1Q0NFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKhA8AAMF
AyoRmoADBQMqEgiAAwUDKhLuADANBgkqhkiG9w0BAQsFAAOCAQEARdIBPQMIRqWi
9clBNoJKabMSZZdT3B305sY5ya/rgceXx/l9LIxLxnMT7ZLafcyfXI+rJ8JCUhuJ
VXG9fcZoJJIXquTB0vpg13TZipUYM3Cv0ptpcAvi/VDjRZx1OE+nH0Jzrqt70aUu
kDybrfHtza+BS5xBz4NnTcJI4QZFt4ld5eP5a4vlqyarmvXmJtkRy8qTUnDbXSpp
zkS9whWph19AeRPHJlflBRA/EW3e+G37ubJHaO8jS9kYUrW2xpOZRyugPoL8kzzT
oI/EYcsnU8KgTJaquYopMUPzFbaeFF26LOX1YvkYXEc53wOmLtN1K1Cv0iB5Jp/p
R3B+2lt96w==
-----END CERTIFICATE-----
Generated at Sat Jun 20 04:20:18 2026 by rpki-client