Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/03qDd_x5kIQisyJDyHVAhJWRLFM.roa
File: 03qDd_x5kIQisyJDyHVAhJWRLFM.roa (raw, json)
Hash identifier: Bmg2Fe/T2cmfuLkUG6xBLZwUcgZn+z1pedq3EUjKeVA=
Subject key identifier: D3:7A:83:77:FC:79:90:84:22:B3:22:43:C8:75:40:84:95:91:2C:53
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01A0E89D8CF97E68066495906B29154B2742
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/03qDd_x5kIQisyJDyHVAhJWRLFM.roa
Signing time: Mon 28 Sep 2026 15:23:54 +0000
ROA not before: Mon 28 Sep 2026 15:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57797
IP address blocks: 81.27.84.0/24 maxlen: 24
131.162.144.0/21 maxlen: 24
131.162.144.0/24 maxlen: 24
131.162.145.0/24 maxlen: 24
131.162.146.0/24 maxlen: 24
131.162.147.0/24 maxlen: 24
209.131.64.0/21 maxlen: 24
2a12:8ac0::/29 maxlen: 48
2a12:8ac0::/40 maxlen: 48
2a12:8ac1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:9d:8c:f9:7e:68:06:64:95:90:6b:29:15:4b:27:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Sep 28 15:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d37a8377fc79908422b32243c875408495912c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:86:37:cc:9d:a2:e0:e2:4c:12:7a:e2:eb:
92:63:57:47:27:a6:ec:e9:9b:59:1a:45:2e:2f:0a:
b5:10:19:f7:3f:ba:26:7c:dd:0f:f8:4e:93:c2:7d:
e5:3c:48:3b:dd:f5:77:3c:2e:4f:c4:a2:74:cc:22:
6d:7f:65:3a:6a:72:f4:24:d9:07:a5:61:92:24:5c:
40:2c:40:26:f9:6d:da:72:1e:f9:12:fa:b6:9f:b8:
f8:2b:9d:dd:a1:2e:db:c7:a2:99:5a:85:0a:05:f2:
6b:03:7f:be:05:0a:25:12:2d:06:d3:03:c7:bd:dd:
6a:5b:6c:88:87:cb:43:15:f2:ed:62:1c:fb:4b:3a:
4f:7d:17:23:5e:72:b4:fb:6d:b4:27:00:bb:13:0a:
f3:0f:05:1d:9f:3e:83:a0:81:77:b9:2c:0b:93:81:
2b:89:bc:0e:0f:94:86:1f:1a:1a:d7:5d:3f:22:d1:
20:49:8b:92:91:2a:e0:c5:dd:fd:c7:84:78:3c:fb:
cc:a7:6d:37:6a:9c:aa:32:98:b6:29:9a:6d:f3:e7:
23:7f:f0:8f:41:0a:70:49:b3:12:4c:57:5c:2d:3d:
e9:76:e5:bc:ec:3b:59:83:4b:4f:40:6b:5d:4b:6b:
f4:1a:97:60:c0:b3:db:19:fa:48:92:a9:0e:33:55:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:83:77:FC:79:90:84:22:B3:22:43:C8:75:40:84:95:91:2C:53
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/03qDd_x5kIQisyJDyHVAhJWRLFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.84.0/24
131.162.144.0/21
209.131.64.0/21
IPv6:
2a12:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
90:0b:61:2f:a8:31:9c:f4:0c:5e:73:37:f1:67:37:6e:32:aa:
15:e0:9c:53:23:e1:c4:a1:5a:af:37:a9:a9:e3:3b:69:1b:84:
af:c8:d5:b0:98:1a:6a:98:85:36:7d:5e:99:96:21:82:75:80:
22:77:8f:bf:6d:89:79:fd:95:45:f3:d7:d0:d2:bf:9d:be:24:
68:df:ef:aa:a8:96:42:6a:61:51:d9:01:3c:0b:64:a0:1c:15:
8c:46:c0:96:3b:34:38:02:ff:6b:88:e2:3d:2b:c7:1a:16:43:
d7:66:db:4a:cd:f9:df:67:4d:bd:3e:29:ae:48:fc:30:e1:7c:
5e:f9:e7:b8:2b:55:75:19:d4:78:74:ab:de:4c:71:62:06:ac:
25:73:5d:46:51:99:c7:a2:85:3f:86:e1:f4:23:35:d7:2e:89:
53:0d:ca:7a:e7:02:ac:f2:9f:0f:48:b1:ce:9e:53:af:fb:ad:
de:22:2e:88:55:be:90:39:e9:7c:4c:67:12:5f:2c:6d:37:ee:
8c:99:05:af:a1:cf:d5:43:f3:5d:1c:f1:8a:b0:55:ca:87:e1:
58:77:fc:e0:36:38:31:90:3e:67:72:09:8d:c8:78:fc:04:ff:
a1:c4:2b:af:2e:39:b2:5d:f0:dc:4b:e1:e9:b6:9b:24:79:03:
5a:bd:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:31:58 2026 by rpki-client