Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/A3vyQNFZmIIiVEvn821V3LPNqkc.roa
File: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (raw, json)
Hash identifier: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=
Subject key identifier: 03:7B:F2:40:D1:59:98:82:22:54:4B:E7:F3:6D:55:DC:B3:CD:AA:47
Certificate issuer: /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial: 019F2368D2B9AB91FBD81B8623B1E63DB2DC
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/A3vyQNFZmIIiVEvn821V3LPNqkc.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203329
IP address blocks: 193.193.166.0/23 maxlen: 24
2001:67c:7e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d2:b9:ab:91:fb:d8:1b:86:23:b1:e6:3d:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=037bf240d159988222544be7f36d55dcb3cdaa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:10:86:91:81:ef:89:f5:bb:a4:25:2c:65:
f7:54:3b:30:99:4f:76:da:65:02:0e:ec:9e:f8:00:
41:58:1b:20:35:47:83:a1:51:f5:2b:54:b1:9f:ce:
95:e5:d0:66:b0:0e:a6:e5:7d:eb:63:46:8d:cd:b6:
2e:c1:e2:c6:c7:21:d0:14:72:80:19:ec:82:00:b0:
4f:5b:e7:60:dd:ea:d1:bd:0d:8b:2c:e7:51:9e:7c:
19:9e:3b:e2:c2:6a:33:b5:d7:30:89:96:79:a3:88:
64:4c:b4:ce:b4:3a:2a:fa:fa:11:be:ad:3f:32:4c:
6e:31:82:5e:df:d2:6f:10:63:95:4d:fd:fe:1d:da:
f8:35:f3:5b:e4:0a:55:6c:89:35:24:65:ae:fb:84:
5e:db:76:e3:cf:e6:0f:7e:e4:f2:eb:67:7b:fb:db:
60:d2:9a:16:9a:05:c8:09:6c:a6:f0:66:b7:67:bc:
c5:69:a5:96:c1:cb:80:69:6f:f8:76:f8:3a:4d:e2:
86:f4:79:37:0f:ef:fb:89:ff:7b:ce:e0:71:b9:7b:
3d:53:0b:ab:41:06:fa:cc:9b:b3:ea:7b:31:04:67:
94:44:4e:96:15:19:9c:d2:bf:ba:0e:a8:a6:95:55:
94:aa:ad:3e:87:61:5f:f2:f4:4b:20:b4:a8:5b:45:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7B:F2:40:D1:59:98:82:22:54:4B:E7:F3:6D:55:DC:B3:CD:AA:47
X509v3 Authority Key Identifier:
keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/A3vyQNFZmIIiVEvn821V3LPNqkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.166.0/23
IPv6:
2001:67c:7e4::/48
Signature Algorithm: sha256WithRSAEncryption
3e:a5:03:d7:82:24:e7:c6:33:11:88:2b:e2:7e:70:c1:a5:a0:
ad:b1:3e:b9:f1:25:69:39:a7:bd:1b:ff:7e:5a:4c:3c:10:1d:
61:0e:8d:9e:2c:a7:af:cd:85:d5:5f:97:6f:ea:9f:1d:ea:32:
b6:9f:9f:8e:45:24:a2:fb:25:f6:3e:3b:39:d4:37:92:52:10:
bd:17:f5:40:6d:23:a8:16:19:36:d7:ef:da:95:c9:7a:1d:49:
a8:e6:43:31:b2:88:bd:12:7a:3d:ae:c3:9c:7a:b7:96:5b:80:
38:ff:8c:1a:e2:ae:2d:ac:4d:03:f7:03:a1:29:75:fe:5a:55:
bf:aa:90:1c:00:c4:df:98:69:95:05:a5:0d:b4:46:db:33:7e:
26:83:fe:88:08:c6:2e:09:be:28:e0:fd:fe:1d:44:9d:29:be:
c4:06:c3:c2:c0:49:49:fc:38:8f:56:fb:b0:cf:dc:a4:5d:97:
e8:1b:b3:20:32:8c:42:77:01:cf:d2:0a:5e:5f:77:02:1f:87:
48:46:18:b9:81:62:54:62:4e:0c:dd:de:8b:cb:72:72:b0:0c:
a5:75:1b:4f:04:07:97:ea:33:47:e7:67:2d:b3:6e:ff:95:b3:
25:47:50:9a:a6:62:12:ac:12:0d:02:c4:c9:40:b8:de:87:a1:
e4:85:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:14 2026 by rpki-client