Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7B3hMuYmskeFWHUL6pi3wSkA9IM.roa
File: 7B3hMuYmskeFWHUL6pi3wSkA9IM.roa (raw, json)
Hash identifier: RR3dT9YqB4UWBpr+hhRfFHH0sHYcOwsWCdxqS1qV7bI=
Subject key identifier: EC:1D:E1:32:E6:26:B2:47:85:58:75:0B:EA:98:B7:C1:29:00:F4:83
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019D24D25C66D1614D13BC384EAEE72ED3CF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7B3hMuYmskeFWHUL6pi3wSkA9IM.roa
Signing time: Wed 25 Mar 2026 11:47:39 +0000
ROA not before: Wed 25 Mar 2026 11:47:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34696
IP address blocks: 206.203.24.0/22 maxlen: 22
206.203.24.0/23 maxlen: 23
206.203.24.0/24 maxlen: 24
206.203.25.0/24 maxlen: 24
206.203.26.0/23 maxlen: 23
206.203.26.0/24 maxlen: 24
206.203.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:d2:5c:66:d1:61:4d:13:bc:38:4e:ae:e7:2e:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 25 11:47:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec1de132e626b2478558750bea98b7c12900f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4c:1e:87:d1:2f:d6:c9:ac:7c:0e:87:9d:09:
a9:5c:1b:9a:7d:30:07:3f:7f:3f:14:3a:3f:dc:6e:
cb:4d:82:64:2f:ae:f9:00:4f:2b:fd:9a:66:4b:6a:
85:9c:7b:8a:66:b8:5e:fc:4c:80:31:1b:e0:bb:f3:
5c:73:a4:90:b1:da:c3:93:5b:c8:af:a6:98:96:90:
f8:e2:d1:6d:b0:96:63:3f:5b:2f:54:af:4c:ff:28:
9a:38:2a:f9:fc:5a:4a:0e:2c:ce:10:1d:39:67:65:
df:0c:40:30:88:fb:34:2a:f7:c9:9c:62:dd:f6:55:
54:4f:16:ae:1c:16:c0:25:43:49:4f:9c:47:9c:b7:
31:b4:81:3e:87:d6:9a:11:39:3e:ec:9f:a0:a5:2e:
ff:58:53:d0:85:6b:94:f0:62:93:56:76:6c:c7:bf:
ef:67:0c:4b:ba:14:09:cf:89:6e:f4:24:43:73:db:
a5:06:b6:a9:cf:94:17:c4:8b:73:f3:18:21:34:3f:
b5:ad:68:e0:d7:28:bc:5e:bf:d3:a2:79:1f:d7:4d:
cf:df:b4:a1:d9:6f:b9:26:e6:b5:fd:31:ed:e3:72:
68:bf:2f:77:93:74:3b:e9:a4:36:c4:36:c4:aa:42:
f9:c1:37:f0:7a:4f:4b:d1:29:49:8f:f9:6f:78:e9:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:E1:32:E6:26:B2:47:85:58:75:0B:EA:98:B7:C1:29:00:F4:83
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7B3hMuYmskeFWHUL6pi3wSkA9IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.203.24.0/22
Signature Algorithm: sha256WithRSAEncryption
82:cd:f8:a6:e4:d1:ea:b6:3c:f5:c6:ab:f5:ac:d8:04:6c:17:
cf:87:1b:73:8c:ca:33:a2:5f:fa:e0:c0:77:18:e7:fa:df:77:
20:65:d1:e2:fd:11:df:e7:0d:13:f3:d1:51:c3:d5:cc:4e:8c:
c3:b2:37:74:76:5d:eb:2b:a9:56:f6:a9:f9:27:3a:a8:2b:b5:
c5:b7:18:c9:4d:46:63:0d:e8:00:ae:e3:ce:4f:b4:3b:71:e8:
ce:b5:52:ef:da:6b:7d:96:a5:b0:4c:6a:aa:24:c4:b8:44:82:
c0:dd:f9:26:db:6d:c7:21:a9:a6:ed:4b:1a:5a:ad:95:67:04:
bf:e0:5d:86:8d:cb:74:20:44:54:f7:e4:40:f6:5d:10:63:69:
81:44:dd:da:56:46:1e:cc:2e:29:47:18:83:41:89:87:8e:9a:
e4:1a:13:e3:13:10:06:13:4d:34:95:d6:c1:4e:3a:6c:1b:f8:
84:e0:5d:63:c9:ea:75:26:d5:39:80:65:eb:e5:71:37:d2:ca:
2f:74:b1:b3:f3:f9:09:ac:fd:24:19:df:de:0e:d8:1e:88:40:
41:98:58:08:8c:e3:14:69:09:25:ba:ed:4e:ea:58:c5:0c:b7:
21:78:82:b6:30:d0:46:3e:62:f6:6e:e0:b0:0b:a5:ab:f8:74:
7a:48:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:02:14 2026 by rpki-client