Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa
File: K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa (raw, json)
Hash identifier: 7xWm5vmFHcwrGZ0rwDT2McSScZ+s+zumGsB6jff1aek=
Subject key identifier: 2B:71:97:65:14:58:8B:F5:B0:B6:4C:8C:92:1B:54:B3:FA:1A:20:45
Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Certificate serial: 019DBB22B410637062C224BD7908100F93FA
Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa
Signing time: Thu 23 Apr 2026 16:18:26 +0000
ROA not before: Thu 23 Apr 2026 16:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214706
IP address blocks: 217.65.129.0/24 maxlen: 24
2a12:6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:22:b4:10:63:70:62:c2:24:bd:79:08:10:0f:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6
Validity
Not Before: Apr 23 16:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b71976514588bf5b0b64c8c921b54b3fa1a2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:91:8d:48:e4:97:55:88:38:1b:79:9f:09:
bf:59:64:50:41:43:46:b5:33:79:db:99:0c:73:2b:
cb:db:9a:24:c5:76:1b:46:23:76:eb:19:5e:49:68:
09:45:f6:35:fc:ea:d6:b6:d4:3a:8d:1f:bf:49:76:
81:67:22:63:d5:17:ab:65:ef:53:4f:5f:c4:0f:a1:
9a:fb:3f:03:5d:f1:e3:20:f8:db:5f:64:58:65:a1:
11:89:8a:29:94:04:80:df:1a:80:3c:4f:a9:1f:e5:
a5:77:de:46:cd:1b:f8:3a:7e:5a:f0:c4:bc:1e:21:
49:c4:bc:ad:4a:e5:38:a6:2e:a0:52:b8:e2:db:49:
99:6a:9b:94:ad:ee:b0:81:a3:6a:11:70:44:49:74:
60:a3:11:14:ce:78:f3:7a:af:22:e8:05:54:1f:b4:
db:bd:0c:39:34:0e:4e:c6:3a:16:90:d9:37:e9:3a:
72:90:01:24:a9:d3:5b:54:a9:70:de:02:2e:fb:c6:
07:5a:28:33:6f:f8:39:2a:81:2b:a4:b2:29:4f:5b:
a2:2d:97:17:7f:65:d6:9f:0e:19:6c:8f:75:31:8a:
ca:63:5a:18:31:ed:e4:57:43:6d:bc:da:fc:33:b9:
ea:d9:89:38:b6:43:52:36:43:13:75:61:da:9d:70:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:97:65:14:58:8B:F5:B0:B6:4C:8C:92:1B:54:B3:FA:1A:20:45
X509v3 Authority Key Identifier:
keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/K3GXZRRYi_WwtkyMkhtUs_oaIEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.129.0/24
IPv6:
2a12:6c0::/29
Signature Algorithm: sha256WithRSAEncryption
c4:5f:94:8a:b2:34:4e:47:c1:8c:b7:7d:a4:11:06:63:35:8d:
28:d3:0e:b4:c8:92:60:69:f8:de:01:02:c8:a4:21:99:fd:ae:
4f:f5:c6:45:22:be:4e:38:34:fe:81:34:13:59:c9:3d:65:ed:
62:fe:48:ec:c2:4c:bf:0b:2f:73:2c:fb:5a:53:05:b1:64:73:
1f:a4:91:1e:4a:f1:81:58:9b:1a:65:ff:1e:e5:b1:ec:c4:78:
ab:d8:38:bf:37:90:62:cb:05:0e:2e:d5:20:7a:21:48:c1:39:
f2:39:58:3a:db:13:ad:a2:9f:1c:28:27:ed:2d:a7:f9:92:9a:
ce:0e:ca:19:09:48:88:0b:b1:0b:4a:01:6f:56:af:7b:fc:89:
fe:5e:9e:7a:09:f8:76:fb:10:ad:4e:ef:0c:4f:26:df:84:07:
da:6e:c6:49:16:08:f8:24:88:50:d3:33:bb:ab:b5:51:30:0e:
fb:69:bd:34:e2:1a:8d:12:39:5a:d6:60:c6:80:d4:f2:c0:18:
04:eb:0f:03:96:6b:9f:bb:ce:c8:9f:e4:6d:05:bf:59:6d:30:
b2:4e:fb:b2:91:7a:86:81:ba:b0:78:69:24:93:0c:88:be:a6:
13:43:ae:c4:68:f6:7a:26:22:da:a1:05:69:36:83:d5:b1:f7:
90:1c:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:07 2026 by rpki-client