Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O3Apvo4K03l_iOP22uWWICUknvI.roa
File: O3Apvo4K03l_iOP22uWWICUknvI.roa (raw, json)
Hash identifier: YqmpKMhIN1SY0KcSp2/7lCGB8so1ZIcOmLK8t6d+GIU=
Subject key identifier: 3B:70:29:BE:8E:0A:D3:79:7F:88:E3:F6:DA:E5:96:20:25:24:9E:F2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DE0E5316B63294D66845CFD1B22127C72
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O3Apvo4K03l_iOP22uWWICUknvI.roa
Signing time: Fri 01 May 2026 00:16:49 +0000
ROA not before: Fri 01 May 2026 00:16:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204785
IP address blocks: 94.249.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e0:e5:31:6b:63:29:4d:66:84:5c:fd:1b:22:12:7c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 1 00:16:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b7029be8e0ad3797f88e3f6dae5962025249ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:43:a9:97:6f:f7:3b:35:62:54:35:ee:64:
24:97:5d:d9:db:49:53:1e:45:d3:85:55:4e:76:a6:
ca:b8:58:91:69:1c:ec:49:93:2b:56:08:ad:b0:e7:
6e:aa:69:65:4d:38:02:e7:a3:bf:47:06:28:dd:04:
15:bb:b2:66:41:86:41:e7:6a:df:e8:6d:e6:b4:d9:
49:7c:6a:ef:7f:24:57:6a:43:37:bf:ad:66:b6:68:
60:8d:24:94:ef:58:12:86:65:98:07:5d:e2:01:7f:
46:41:17:d1:ec:b4:85:3b:fd:b2:8b:23:21:3f:97:
08:3f:8e:ab:d0:9d:f5:1c:65:a9:6b:dd:9a:df:91:
09:2b:b9:f1:bf:5c:9b:8d:dc:8f:39:e9:c9:d9:bb:
a5:5e:ed:af:73:fa:69:7e:cb:62:8f:e7:b0:12:1d:
fd:f7:49:78:47:24:58:3e:5d:a1:b6:12:15:f9:ec:
fd:cc:57:d8:d3:a2:9a:c5:49:f7:a5:6f:df:cd:26:
d0:4f:dd:91:ab:3c:b9:cb:52:aa:56:8d:85:8c:f0:
53:1c:7b:44:55:ce:a9:ed:aa:6d:0a:0e:ef:b1:75:
52:09:e7:b2:84:33:41:a9:b2:8b:d9:85:fa:70:71:
be:a3:87:c0:c8:14:57:a7:67:c4:df:19:be:ca:6a:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:70:29:BE:8E:0A:D3:79:7F:88:E3:F6:DA:E5:96:20:25:24:9E:F2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O3Apvo4K03l_iOP22uWWICUknvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
86:41:fa:77:17:77:47:3f:45:b8:45:cd:a7:f7:b8:e0:d9:5e:
c9:99:68:d8:67:31:dc:1d:aa:e6:b0:80:52:40:af:59:c4:50:
3f:54:2a:8f:c2:21:e7:b8:f3:9f:8b:3c:64:c2:ea:42:c2:bf:
e0:f2:3b:95:0f:2d:24:08:68:a5:47:85:e7:ec:9a:1c:7e:1f:
34:75:d9:c6:3d:15:eb:5d:2d:9c:2a:c2:51:16:02:df:a3:79:
f6:00:88:ac:28:fd:69:62:3b:3e:cb:df:d7:59:69:29:49:cf:
10:4e:02:ee:23:3a:19:3f:4a:75:8a:82:76:e0:fb:16:3b:6d:
20:2f:e3:07:fb:31:8a:9c:db:e5:f2:30:43:62:30:9b:b0:d1:
68:e4:df:8d:34:3d:9f:3f:ca:a3:a3:33:50:e3:53:b6:6d:a3:
1d:9e:30:97:c6:bf:1c:ca:70:59:77:5a:a4:96:5f:e5:69:a8:
e2:39:81:ea:17:16:c3:42:a0:31:ad:03:f8:d1:99:f3:b6:0f:
c8:b3:87:47:8b:a2:de:6c:a8:86:32:f8:bf:ff:61:f5:76:16:
b5:a2:01:ae:1a:db:85:3f:f9:6c:93:08:79:27:33:a7:0e:f9:
16:f7:20:c1:6e:d3:41:f0:79:1f:ce:ea:b4:67:92:a5:03:4b:
97:a4:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:28 2026 by rpki-client