Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/cF3qnJKFEMZXRZq7zdCYtm8KbnY.roa
File: cF3qnJKFEMZXRZq7zdCYtm8KbnY.roa (raw, json)
Hash identifier: cNbAonFQuEJHBesvMR+/RIy+1x7Yr2gguvFx6ZlL2FQ=
Subject key identifier: 70:5D:EA:9C:92:85:10:C6:57:45:9A:BB:CD:D0:98:B6:6F:0A:6E:76
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 01A0EBE341FD79902DFED05CCEA7CE1F3AE1
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/cF3qnJKFEMZXRZq7zdCYtm8KbnY.roa
Signing time: Tue 29 Sep 2026 06:38:54 +0000
ROA not before: Tue 29 Sep 2026 06:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206583
IP address blocks: 2a04:71c2::/32 maxlen: 32
2a04:71c3::/32 maxlen: 32
2a04:71c4::/32 maxlen: 32
2a04:71c5::/32 maxlen: 32
2a04:71c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:e3:41:fd:79:90:2d:fe:d0:5c:ce:a7:ce:1f:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Sep 29 06:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=705dea9c928510c657459abbcdd098b66f0a6e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:27:9f:f4:6c:36:1d:02:9b:33:90:c5:b4:
5a:01:be:ef:36:bd:82:d3:f5:e6:3e:ae:87:24:50:
a7:70:ff:91:fb:91:4a:8e:9b:f1:2c:24:f2:ca:c1:
3e:22:73:0b:af:92:84:eb:ab:d2:de:a7:1f:30:71:
99:27:4c:e1:b1:1f:26:d4:9c:0e:68:d8:19:66:23:
46:80:fd:e7:bb:8d:ca:5d:36:f0:6a:c3:9b:e9:b4:
79:83:f2:75:0a:01:b0:47:8a:7b:46:bc:ab:90:2a:
fc:a8:c6:91:fc:9d:40:f5:13:0f:47:3f:a9:5c:2f:
f8:7a:88:a1:32:e6:a5:bf:0b:4e:1f:69:f4:9c:c7:
82:17:2a:86:f2:4d:e0:0a:36:e2:9c:91:ef:81:21:
77:99:2a:30:04:56:e6:d8:ae:db:0d:cc:6e:a1:0e:
5d:13:f3:c1:5b:3f:ad:fe:fd:cb:e1:2e:ff:bc:9f:
5f:d8:39:5b:0b:04:3f:2e:db:9b:a3:3b:60:91:bd:
72:26:07:4b:9c:72:81:bc:f8:7f:9c:3c:59:f6:27:
e1:99:2c:9e:18:8b:2b:af:24:67:6a:c1:a8:27:3b:
fb:83:d7:7f:1b:54:56:57:85:0f:4a:0b:a4:6c:6d:
d8:a4:ee:85:0c:f9:01:99:9b:d0:e8:e0:b7:66:44:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5D:EA:9C:92:85:10:C6:57:45:9A:BB:CD:D0:98:B6:6F:0A:6E:76
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/cF3qnJKFEMZXRZq7zdCYtm8KbnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:71c2::-2a04:71c5:ffff:ffff:ffff:ffff:ffff:ffff
2a04:71c7::/32
Signature Algorithm: sha256WithRSAEncryption
21:7f:9f:fb:a4:4c:e5:98:d2:48:1a:8b:7a:a0:91:25:d5:6a:
52:82:7a:79:83:61:40:58:db:dc:6f:2f:98:20:72:51:a7:e7:
9a:f4:ed:4d:16:83:58:8e:a8:64:69:c8:62:d5:44:a4:31:2f:
cc:59:d6:cc:a2:76:d9:cd:1c:9c:b1:c8:2d:a5:62:20:76:6f:
b4:42:60:d1:1a:9a:aa:70:2c:14:99:30:2c:0b:56:e8:03:13:
c7:a4:ba:b2:0a:6d:33:58:78:a0:1c:2f:30:29:3b:e8:b2:4d:
54:eb:3d:13:7b:82:cc:b0:e8:2d:99:0f:2f:6d:98:59:09:bf:
5c:22:d3:42:71:dd:dd:95:4b:8f:01:11:21:cb:9f:f7:02:a4:
b7:81:44:fb:ea:3b:e4:55:e1:fe:f9:42:2a:7a:95:a0:60:08:
5a:e9:11:28:4c:52:f5:14:c1:55:f4:aa:8b:ab:78:c3:6b:55:
35:f8:a2:10:c9:91:10:77:8c:34:f4:22:c5:d2:cc:f8:c6:02:
0b:2c:8c:49:b3:0c:ac:b6:3a:b0:f3:82:5d:c7:b0:e7:cb:1c:
9e:b0:b4:14:ba:69:bc:8b:b7:d4:f4:e2:dc:70:01:3e:dc:0f:
5c:8f:66:03:5a:62:ec:5b:cd:3c:cf:12:a0:90:21:b4:c2:8a:
3a:dd:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 20:49:56 2026 by rpki-client