Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3ArU6WU6cFEkNu22yPImQpYwkUo.roa
File: 3ArU6WU6cFEkNu22yPImQpYwkUo.roa (raw, json)
Hash identifier: D6DGvzh+9CkCLxDbDZ8RLHs9eJ+ZwFZrF7M1LNbXRKo=
Subject key identifier: DC:0A:D4:E9:65:3A:70:51:24:36:ED:B6:C8:F2:26:42:96:30:91:4A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D24D9AFA4A61A065A7ADB16A847E45B6C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3ArU6WU6cFEkNu22yPImQpYwkUo.roa
Signing time: Wed 25 Mar 2026 11:55:39 +0000
ROA not before: Wed 25 Mar 2026 11:55:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200867
IP address blocks: 206.203.36.0/23 maxlen: 23
206.203.36.0/24 maxlen: 24
206.203.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:d9:af:a4:a6:1a:06:5a:7a:db:16:a8:47:e4:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 11:55:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc0ad4e9653a70512436edb6c8f226429630914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:f4:d8:19:0e:2a:e9:af:b9:8b:dc:d9:83:
af:0b:57:c6:8d:03:0a:fb:ee:22:33:4a:d1:18:22:
a0:b5:48:fa:b7:9e:35:3c:4c:a6:c2:18:aa:5c:8d:
e5:4d:42:77:73:0e:c8:b4:35:91:12:62:9f:d2:c7:
08:49:88:71:2f:95:36:29:0d:92:6d:41:c6:d3:40:
10:60:e8:17:73:dc:77:bf:dc:7a:90:5d:7a:5a:20:
07:fb:69:13:27:c2:68:7a:99:1e:e4:71:1b:c7:0a:
1b:24:a4:79:40:ca:c5:52:50:74:6a:a2:dc:e7:7a:
67:b2:2b:9c:b8:e2:e9:7d:03:53:f3:6f:6c:ea:05:
22:ff:ff:f3:cc:53:ad:08:83:98:9f:27:8a:ae:67:
d2:84:cf:67:a1:b4:a5:b8:ff:25:a2:1f:09:cb:a4:
2b:8f:c3:d4:a6:7a:3c:5d:06:57:dd:e6:45:12:bb:
07:73:9a:43:4d:92:5a:f2:8b:74:16:a6:dc:f8:57:
2f:99:41:59:52:8c:7e:57:65:c4:16:de:01:6a:73:
40:81:65:cf:d9:71:2c:16:50:93:f9:5b:c4:08:b5:
f8:22:c7:72:8f:bf:8f:04:10:79:d8:c8:ef:04:05:
08:24:6a:99:2a:3c:e3:7e:65:0b:1a:e0:f0:c4:ae:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:D4:E9:65:3A:70:51:24:36:ED:B6:C8:F2:26:42:96:30:91:4A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/3ArU6WU6cFEkNu22yPImQpYwkUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.36.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:0b:d0:6d:2a:04:44:dd:f1:10:4a:95:c5:7c:40:ec:30:a7:
4b:07:03:41:e4:71:45:a8:7c:3b:a6:f9:16:92:e4:77:b6:f4:
8f:6f:fe:cc:37:ad:45:5a:cc:cd:60:63:8b:0e:7a:01:42:39:
89:35:97:4e:1e:8b:b6:a4:a7:2f:d1:dc:a4:66:7f:36:6a:3a:
be:06:7e:07:17:70:a0:d8:7e:d1:3b:63:5d:21:dc:1c:47:5a:
c0:89:11:55:03:58:6a:50:8c:b0:8a:f5:3a:38:f3:d2:40:dc:
8d:25:0e:b1:8c:c7:ee:46:96:9d:b2:68:4c:12:da:de:e3:2d:
9f:d5:7e:65:95:e0:c0:ae:ca:d3:fe:1b:f2:b3:c9:c8:ec:22:
a0:7f:e8:41:65:47:24:fd:7d:0c:62:09:14:e1:b9:63:b7:cb:
45:c2:cd:8b:82:c8:c7:08:01:de:8d:ab:e7:8f:29:b4:98:6e:
6a:99:fc:2b:99:4a:2c:a3:2d:49:b8:69:12:35:8b:cb:e8:4e:
9c:34:b2:ad:77:40:41:1e:60:60:47:47:d2:fc:41:c7:c9:9b:
fc:c8:f0:53:d4:86:ec:df:b9:24:3a:b6:89:d1:02:82:8e:ee:
74:88:41:8c:fe:f2:ea:af:24:f4:a0:92:5c:78:27:8c:b6:b2:
f3:f3:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:29 2026 by rpki-client