Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/3T09Td3RZBmm3zvrQZwwBpGpeB0.roa
File: 3T09Td3RZBmm3zvrQZwwBpGpeB0.roa (raw, json)
Hash identifier: pFlvkiWfnXad6Oz+dG5TGKsNIEC3q4DoU1i3YQnxVfo=
Subject key identifier: DD:3D:3D:4D:DD:D1:64:19:A6:DF:3B:EB:41:9C:30:06:91:A9:78:1D
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019DB0027E71055303D41B611B6E97128FA5
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/3T09Td3RZBmm3zvrQZwwBpGpeB0.roa
Signing time: Tue 21 Apr 2026 12:27:26 +0000
ROA not before: Tue 21 Apr 2026 12:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215206
IP address blocks: 2a0b:7100:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:02:7e:71:05:53:03:d4:1b:61:1b:6e:97:12:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Apr 21 12:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd3d3d4dddd16419a6df3beb419c300691a9781d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:c7:9d:b3:eb:e0:4b:ff:db:b8:79:eb:e0:
01:01:be:7b:56:bb:8a:4b:f3:d0:cb:28:a4:e4:0c:
82:1d:5c:55:36:a0:74:77:2d:91:d9:ff:f9:5c:92:
dd:76:a7:0b:7e:3b:4d:32:14:d6:2a:bb:a0:cb:2f:
bf:90:38:38:36:00:83:c1:b8:6a:e8:00:6b:13:be:
36:d2:78:10:93:40:0f:43:ad:a0:67:22:2d:52:87:
70:74:78:9b:29:71:66:bf:2f:6f:57:d1:fd:88:b6:
46:62:1e:54:09:f5:4c:7e:36:d1:02:8d:90:7f:91:
e8:ab:01:24:51:dd:cb:96:c3:a3:88:2b:6c:8d:13:
a0:db:d7:59:4b:57:e8:33:0a:19:20:c5:af:a7:8f:
76:37:71:ea:d3:b6:d0:d9:13:cf:ed:60:78:ad:c2:
9f:03:d6:55:ce:49:86:47:60:34:83:12:5c:38:92:
bb:3a:a5:98:1f:6f:ad:f8:9b:1a:0d:26:6c:c9:7d:
8f:54:d1:f8:38:be:6d:da:29:ad:80:30:6d:fc:ab:
c6:84:72:f7:c5:0c:e2:3b:c0:42:7b:11:ac:c6:4f:
41:d3:89:8f:44:40:3d:4b:20:03:84:58:bd:43:ac:
2d:10:08:24:f3:76:46:aa:ea:7a:fd:73:c6:64:93:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:3D:4D:DD:D1:64:19:A6:DF:3B:EB:41:9C:30:06:91:A9:78:1D
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/3T09Td3RZBmm3zvrQZwwBpGpeB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7100:2::/48
Signature Algorithm: sha256WithRSAEncryption
93:9b:a9:eb:32:c7:ff:55:d3:9a:e2:48:34:ca:60:9a:e5:08:
a4:17:c2:f4:0d:71:df:89:dd:d8:35:39:2f:b9:ae:d9:80:1e:
94:54:31:8c:64:b9:66:fd:a6:e5:d8:7a:87:86:23:4c:0e:3c:
76:ed:12:82:96:94:eb:9a:67:40:b2:fb:df:47:a6:b2:9a:b2:
f8:72:13:af:08:ba:59:9f:33:9e:56:8b:f5:fc:53:7e:3e:d6:
96:e8:09:8f:eb:fa:65:5f:97:7a:7f:19:c4:52:f6:e1:49:8b:
ea:f1:96:9d:59:09:af:1b:7b:40:f9:f2:c6:51:e3:b9:32:6a:
71:d8:ba:79:36:53:0e:ef:05:77:ec:ca:25:97:08:4d:9d:42:
a9:d5:35:88:10:b1:46:85:a5:5a:a4:e1:d1:af:b7:57:11:0a:
03:e4:29:ef:fe:16:cb:af:64:b1:de:a3:6f:43:4a:6d:ec:08:
10:75:b2:6c:20:d4:bb:8e:21:0e:6f:97:33:58:56:d8:be:88:
74:09:11:6b:2e:81:db:16:46:1e:5a:ca:b3:b0:88:ac:a3:11:
78:6a:6c:58:e1:b4:1b:24:11:cd:73:fb:a1:00:71:61:6c:f2:
04:c2:0e:74:05:f3:b6:c4:c3:83:bc:96:d1:60:dc:03:35:8b:
1d:be:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:40:19 2026 by rpki-client