Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/3kcbw-dgnF65c9CDIHb6oRz5mbE.roa
File: 3kcbw-dgnF65c9CDIHb6oRz5mbE.roa (raw, json)
Hash identifier: QQtdRKDztrBVpT4Kn//rOIxZPrmQ8oKjnI8387RYNPY=
Subject key identifier: DE:47:1B:C3:E7:60:9C:5E:B9:73:D0:83:20:76:FA:A1:1C:F9:99:B1
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C89CF2E56E9EBF07EBEB7B53DA8E3A32
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/3kcbw-dgnF65c9CDIHb6oRz5mbE.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402394
IP address blocks: 2a12:6f80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f2:e5:6e:9e:bf:07:eb:eb:7b:53:da:8e:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de471bc3e7609c5eb973d0832076faa11cf999b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:9a:7d:fd:62:1d:4b:0b:77:ee:af:4d:3b:
79:ec:99:9b:e3:70:ea:b7:ae:5b:07:d7:db:6d:ff:
54:29:80:1e:3a:fc:81:93:4e:20:8c:a7:22:73:11:
bb:7f:00:79:a0:72:46:cf:7a:28:d8:9b:9d:ce:54:
d0:49:4e:bc:2d:96:67:96:93:e8:0c:d5:1a:40:a8:
8a:9c:9a:f5:5e:1b:a3:8f:a7:19:8b:d0:50:39:39:
d8:dd:f8:1c:50:6b:fd:23:0c:1f:26:e8:1c:d5:16:
dc:e5:db:9b:a5:f1:af:e0:ca:e5:69:b4:41:f8:f6:
48:1c:91:d0:ec:5e:c8:ed:30:1d:e9:6b:65:79:f1:
b2:02:a9:04:7d:ed:43:e2:ca:ff:d5:b1:14:23:cf:
cd:56:32:7d:c2:05:8d:44:ba:38:73:34:73:4c:40:
4a:b4:8e:3a:f0:cf:55:ea:9e:a6:1d:79:20:d5:5a:
a7:14:54:0d:20:e5:12:f9:c6:53:1a:d7:0a:cf:11:
74:16:13:2f:23:3b:c6:f5:ee:84:b4:56:cc:fc:b6:
f3:fd:7e:cb:31:71:29:3d:93:05:c4:f5:6b:58:c9:
b6:0b:54:f3:90:de:37:02:fa:b3:d4:0e:db:6f:8a:
1a:04:85:b3:ad:75:34:98:78:09:8b:2c:dc:c4:34:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:47:1B:C3:E7:60:9C:5E:B9:73:D0:83:20:76:FA:A1:1C:F9:99:B1
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/3kcbw-dgnF65c9CDIHb6oRz5mbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f80::/29
Signature Algorithm: sha256WithRSAEncryption
4b:04:e1:dd:66:4f:75:af:90:1d:14:2c:a6:0d:cf:f5:1e:33:
84:ee:f9:e5:21:72:5d:4f:3d:27:a5:0b:5a:b9:c7:5f:af:fa:
34:90:af:df:77:08:55:6e:fd:88:ba:ce:97:47:ed:87:db:14:
27:c3:ce:b0:2e:02:ef:8e:8c:65:44:74:2e:58:29:69:68:09:
05:04:ce:9d:a0:a5:9f:bb:33:19:4e:dc:34:2b:1c:08:44:c2:
f5:fb:f9:53:6c:a9:81:73:19:d3:a6:4f:46:ea:46:66:ee:86:
e6:76:d4:38:28:c4:9a:36:2c:e4:c3:76:d4:07:d5:8b:a0:32:
23:51:d3:70:aa:1d:07:5e:84:53:80:08:b9:15:d5:5c:c8:41:
54:05:2f:18:a4:76:04:b9:ec:e1:e8:e2:57:a7:c4:0a:91:30:
35:c8:de:8f:d5:a6:07:61:cc:a4:b5:13:fb:0c:eb:4e:8a:66:
2c:59:81:45:a3:f0:1f:f1:fa:20:27:e5:fa:77:58:67:c8:8d:
4e:e8:f7:5b:a3:c3:bb:51:9e:e2:73:9a:ce:62:80:27:37:e8:
76:1b:78:12:3d:cd:69:44:cd:4e:c7:b1:c4:eb:7d:0d:fe:03:
5d:17:74:52:d0:15:c4:e1:75:5f:42:8e:92:f8:eb:be:4a:f5:
6d:22:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:41:13 2026 by rpki-client