Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa
File: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (raw, json)
Hash identifier: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=
Subject key identifier: DC:9B:D5:68:71:71:32:F1:3B:A0:A6:FF:46:4E:4A:73:13:A8:D1:03
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019D1F41CDA813CF2E3A6DB9E4C0891935D9
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa
Signing time: Tue 24 Mar 2026 09:51:39 +0000
ROA not before: Tue 24 Mar 2026 09:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43043
IP address blocks: 2a0e:b540:acac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:41:cd:a8:13:cf:2e:3a:6d:b9:e4:c0:89:19:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Mar 24 09:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc9bd568717132f13ba0a6ff464e4a7313a8d103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:5f:93:4d:0e:be:97:78:20:50:94:9f:36:
f1:72:4c:e3:f6:6b:40:2c:0e:53:ee:c1:a0:86:2d:
78:18:78:d4:80:7d:cf:d2:eb:04:78:a5:2c:af:b3:
c6:0e:cd:8e:6b:f9:e9:1f:6c:a4:d9:e6:b9:06:28:
96:44:b6:7c:1a:83:5d:d9:dc:66:95:8d:17:cc:24:
09:c5:10:57:4a:68:e6:d0:a9:00:45:24:69:f1:1d:
2b:1b:ba:c5:8d:55:7d:b3:ef:41:aa:b9:cd:e6:e2:
78:bd:6f:be:01:a2:2a:a6:32:48:ce:a0:8c:88:6e:
4e:42:9b:cd:99:a7:cb:6c:09:ca:18:c5:16:a5:1f:
77:f2:7f:22:7e:c5:0d:30:e8:04:5d:9b:8d:1e:c8:
57:6e:43:66:d0:30:ec:90:ea:6f:8f:7d:03:81:9a:
d6:07:e4:54:fe:f3:53:7d:4a:ba:38:e3:b5:ff:44:
6a:c0:f9:0f:b3:b9:d5:c7:ba:d3:34:86:6a:09:2a:
a1:c2:49:77:7f:80:6b:bb:f8:5f:bf:76:90:35:63:
69:a6:b4:5c:0a:a4:47:ba:f7:e5:86:8f:2e:5b:eb:
44:49:83:63:a8:ae:ac:b8:f1:d5:cb:c3:31:ed:2f:
aa:0d:24:d1:29:62:e9:1d:f4:af:4b:7c:c6:49:55:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:D5:68:71:71:32:F1:3B:A0:A6:FF:46:4E:4A:73:13:A8:D1:03
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b540:acac::/48
Signature Algorithm: sha256WithRSAEncryption
85:bd:5a:64:15:f7:41:70:fc:22:f4:41:1c:d2:e4:3f:d8:2a:
f0:5a:8a:f1:cf:d2:d8:af:da:11:48:74:46:02:12:e6:d4:00:
b3:5d:6d:c7:f8:8e:2f:32:d1:52:8d:38:ba:f5:f4:c0:28:36:
5c:32:e7:80:8f:8d:f2:5f:f3:c7:7a:60:89:f1:e2:2b:1a:28:
ea:61:08:ac:5c:59:60:bc:91:f2:2f:d4:6f:7f:31:bd:ad:be:
41:71:88:7c:2f:33:8d:ef:de:97:e4:84:95:fc:32:65:45:86:
bd:39:ff:81:8d:2a:31:fc:76:60:48:94:28:91:90:11:a5:13:
da:f1:19:3e:df:54:cd:5c:3f:b7:3c:ed:8b:4f:91:f2:01:99:
a5:77:e9:c0:a1:55:68:53:43:95:2f:85:22:1d:d0:86:8d:49:
0f:a6:64:e8:c7:9c:80:4e:b2:cb:30:5d:eb:07:1a:38:bc:11:
d0:1f:e0:42:1b:fd:b9:ca:77:6f:dc:5c:50:b5:b0:be:58:0e:
bd:b5:ad:00:be:b6:7b:0d:c1:a9:ef:c0:72:c4:21:50:7d:e9:
bb:3d:40:83:49:2b:76:97:75:a2:58:2f:94:65:a7:46:96:4b:
52:52:1c:f3:ea:f6:39:2f:26:fa:db:51:03:c7:4b:32:00:37:
5c:1f:69:fe
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0fQc2oE88uOm255MCJGTXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0
MTViZjUwHhcNMjYwMzI0MDk1MTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzliZDU2ODcxNzEzMmYxM2JhMGE2ZmY0NjRlNGE3MzEzYThkMTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsatfk00Ovpd4IFCUnzbxckzj9mtA
LA5T7sGghi14GHjUgH3P0usEeKUsr7PGDs2Oa/npH2yk2ea5BiiWRLZ8GoNd2dxm
lY0XzCQJxRBXSmjm0KkARSRp8R0rG7rFjVV9s+9BqrnN5uJ4vW++AaIqpjJIzqCM
iG5OQpvNmafLbAnKGMUWpR938n8ifsUNMOgEXZuNHshXbkNm0DDskOpvj30DgZrW
B+RU/vNTfUq6OOO1/0RqwPkPs7nVx7rTNIZqCSqhwkl3f4Bru/hfv3aQNWNpprRc
CqRHuvflho8uW+tESYNjqK6suPHVy8Mx7S+qDSTRKWLpHfSvS3zGSVVT3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNyb1WhxcTLxO6Cm/0ZOSnMTqNEDMB8GA1UdIwQY
MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt
OGFkYWMxN2U5MGFlLzEvM0p2VmFIRnhNdkU3b0tiX1JrNUtjeE9vMFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl
LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg61QKys
MA0GCSqGSIb3DQEBCwUAA4IBAQCFvVpkFfdBcPwi9EEc0uQ/2CrwWorxz9LYr9oR
SHRGAhLm1ACzXW3H+I4vMtFSjTi69fTAKDZcMueAj43yX/PHemCJ8eIrGijqYQis
XFlgvJHyL9RvfzG9rb5BcYh8LzON796X5ISV/DJlRYa9Of+BjSox/HZgSJQokZAR
pRPa8Rk+31TNXD+3PO2LT5HyAZmld+nAoVVoU0OVL4UiHdCGjUkPpmTox5yATrLL
MF3rBxo4vBHQH+BCG/25yndv3FxQtbC+WA69ta0AvrZ7DcGp78ByxCFQfem7PUCD
SSt2l3WiWC+UZadGlktSUhzz6vY5Lyb621EDx0syADdcH2n+
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:15 2026 by rpki-client