Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa
File: pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa (raw, json)
Hash identifier: RO+47JjxuCYnZ9Bz/vNN2VIRL6JJUsDg7rwYhEHWFsY=
Subject key identifier: A5:AF:F7:9E:B4:14:F6:CC:3B:3A:04:E3:77:9C:B1:D1:59:AF:44:20
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019B7A5A8424E5FC1634094CF45AAB9D288F
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa
Signing time: Thu 01 Jan 2026 16:18:31 +0000
ROA not before: Thu 01 Jan 2026 16:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209673
IP address blocks: 2a0d:eb04:4::/46 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:84:24:e5:fc:16:34:09:4c:f4:5a:ab:9d:28:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jan 1 16:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5aff79eb414f6cc3b3a04e3779cb1d159af4420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:0d:a6:9f:8e:40:29:29:86:5d:d9:b6:0d:
2f:dd:9d:1f:aa:8a:45:7e:24:13:27:60:3f:9b:79:
29:4f:c2:96:e5:df:bd:85:ae:4f:a7:8f:93:ad:dd:
ea:40:25:ef:54:a9:98:35:b6:67:00:86:3e:5b:d6:
75:e5:22:5b:d7:01:1e:02:d0:93:cb:9b:1f:e2:04:
dc:c8:f6:20:8b:fb:72:52:60:a4:ea:a4:ce:45:4c:
a9:ce:52:06:8c:2d:4f:00:93:e9:46:5b:7d:e6:90:
ba:76:33:19:55:30:75:94:9b:d1:84:6e:5d:02:64:
bb:84:7f:96:b6:bc:d9:0c:c6:c4:66:25:96:fd:f8:
22:af:76:9b:a4:e5:4c:3c:32:5c:5c:0f:44:03:fa:
7b:b1:fc:3b:1c:d5:b5:43:ec:62:bc:37:e6:0b:a4:
48:de:69:cf:c6:24:07:10:2a:35:57:ac:d3:ac:3f:
25:e6:eb:a2:b6:a2:b0:44:00:55:dc:28:19:b6:d2:
ba:54:52:ea:a7:df:58:58:51:e4:bd:51:9f:c8:6b:
e0:5f:08:7b:2c:4b:29:9d:55:7b:57:36:2b:44:05:
69:44:85:8d:87:24:80:e1:93:fc:db:11:eb:16:e6:
2f:e5:c3:47:7a:a5:58:d8:77:f2:1f:96:3a:79:81:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:F7:9E:B4:14:F6:CC:3B:3A:04:E3:77:9C:B1:D1:59:AF:44:20
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:eb04:4::/46
Signature Algorithm: sha256WithRSAEncryption
61:96:c3:9d:40:34:ad:ee:72:b8:5d:5f:70:9d:ff:56:e4:32:
32:c2:63:5c:fc:ba:9a:4b:01:f4:84:e5:2f:81:fe:62:89:aa:
61:7b:be:78:1e:b7:f0:60:13:4d:a0:2b:07:73:e1:df:8f:53:
d0:90:04:f9:17:a4:5f:72:75:ce:8e:e5:38:4f:b0:e8:1a:cd:
8e:cd:e2:fe:ba:f0:d9:88:d3:30:0a:3a:0c:91:2f:1d:dd:04:
65:e7:af:ea:01:b4:34:da:f1:36:81:a4:37:fb:23:86:0d:e7:
ec:01:45:26:79:d9:ef:82:f7:dd:5a:8f:c1:3c:b6:7b:6f:7f:
4c:d7:13:61:a0:a5:6d:a2:0e:6f:ce:9c:9f:d3:30:74:fa:58:
e6:7e:bb:d3:27:18:f1:9b:6c:57:80:fb:69:0a:84:98:c0:f9:
44:fc:64:56:46:1f:ef:db:27:b5:2f:13:2d:2d:66:bb:42:eb:
d3:61:eb:6b:de:ca:99:6b:32:18:e6:2a:85:fa:36:f4:49:1b:
cb:d4:07:7d:5f:47:9c:50:1d:4b:c9:e8:77:30:e5:81:07:4c:
31:3f:fa:69:4d:99:cb:bf:a1:77:19:d1:ed:0a:c4:56:0e:28:
b8:f5:a1:cc:7f:c8:95:e5:5f:13:0f:55:3b:ab:5c:b2:31:1d:
5f:cb:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:12:47 2026 by rpki-client