Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/3UQtmzXTIeMJ1h6VT9KaadjPURk.roa
File: 3UQtmzXTIeMJ1h6VT9KaadjPURk.roa (raw, json)
Hash identifier: /GzvnOS65wvrx3ey5iKUnBmWq48HvbVtzuGbAVbmeAw=
Subject key identifier: DD:44:2D:9B:35:D3:21:E3:09:D6:1E:95:4F:D2:9A:69:D8:CF:51:19
Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Certificate serial: 019C81BD3A0094092D527644FB37669DE090
Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/3UQtmzXTIeMJ1h6VT9KaadjPURk.roa
Signing time: Sat 21 Feb 2026 19:46:27 +0000
ROA not before: Sat 21 Feb 2026 19:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 2a13:a740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bd:3a:00:94:09:2d:52:76:44:fb:37:66:9d:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Validity
Not Before: Feb 21 19:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd442d9b35d321e309d61e954fd29a69d8cf5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:95:a5:52:a1:0e:ed:db:51:b7:f3:f1:87:
75:ad:b6:07:95:0e:a1:ae:6a:d4:39:6d:8c:9a:d3:
01:04:0f:86:92:ca:f3:73:8e:d1:5c:5e:ad:6a:3b:
8d:04:fb:36:0a:6f:4c:fe:f9:11:d0:3a:4a:e1:45:
5f:a9:32:1d:53:24:3a:2f:64:8f:c6:03:32:82:ea:
6d:e2:d0:ae:e9:93:e4:3d:6d:64:d8:28:4f:61:d5:
11:96:ec:42:65:26:1f:60:a5:29:f2:14:09:ba:cf:
9d:42:d1:ca:e6:b9:bf:94:48:3c:39:e1:d7:28:ea:
76:ba:0d:fb:78:2c:0b:f6:d6:67:cf:53:22:8b:a4:
7d:6b:30:7b:4c:7e:c6:43:19:85:b6:c2:f7:3e:d8:
9b:72:78:af:cd:20:9b:1a:37:7a:78:c2:42:39:28:
68:e5:13:56:94:a1:27:1f:e5:48:c1:31:3b:7a:ed:
96:97:5c:60:2b:ee:82:ef:1d:a1:68:72:50:07:0d:
08:af:0e:de:39:61:62:77:0b:6a:45:a9:91:54:60:
2b:be:28:7f:86:fb:ce:49:b4:d6:d8:18:3c:43:f9:
a4:cf:7c:cc:01:90:97:93:0d:3c:17:98:58:ac:83:
7d:c4:90:22:01:d1:f4:ff:8d:42:45:4c:71:58:41:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:2D:9B:35:D3:21:E3:09:D6:1E:95:4F:D2:9A:69:D8:CF:51:19
X509v3 Authority Key Identifier:
keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/3UQtmzXTIeMJ1h6VT9KaadjPURk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a740::/29
Signature Algorithm: sha256WithRSAEncryption
52:c8:25:79:98:c5:83:d1:dc:b1:af:20:cd:42:a3:23:37:7b:
59:4c:e2:65:b1:70:69:21:96:dc:ef:70:d9:4f:d4:01:35:ef:
d5:57:07:36:1d:9f:e3:55:6c:41:00:3d:e4:94:56:8f:bf:ab:
82:9e:58:cb:56:8c:c4:cd:08:cf:43:6e:2c:59:4c:bb:c5:de:
27:9a:5b:19:c8:b0:1b:12:d7:5c:c2:a7:c2:5d:00:e7:cd:64:
79:3c:73:ab:b4:3d:5d:ca:04:91:8b:67:a9:d8:ca:c3:f5:9e:
8e:fb:a1:62:4b:78:30:04:0c:b5:d1:25:f0:9b:e2:bb:40:3c:
bf:84:e3:05:bd:39:d1:99:9a:63:1d:7b:eb:47:70:b6:16:af:
aa:2f:a7:f9:87:1c:61:0c:03:cf:62:73:b4:0b:f8:29:68:a0:
87:58:e4:57:71:6f:3b:63:40:54:40:72:3b:dc:25:b7:75:09:
29:be:d3:c9:f8:df:a1:d8:b1:61:b2:94:e4:86:fd:97:22:62:
da:57:5b:1a:b2:ac:d4:96:f2:b5:b3:14:a6:90:7c:64:7d:76:
45:4a:08:6d:6e:b4:26:29:6f:8e:19:07:aa:16:f7:d1:93:0b:
ef:d4:e0:1c:75:3e:db:f5:ca:5b:b5:d8:f3:f5:64:38:0d:49:
bc:ee:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:51:20 2026 by rpki-client