Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa
File: en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa (raw, json)
Hash identifier: l3a1Se4v22VtVm5ZL/5W5MYgFfditJOkAKvu9Xf04q4=
Subject key identifier: 7A:7D:C3:81:C8:3E:40:26:15:EE:76:A6:EE:AD:C5:08:FE:59:91:1D
Certificate issuer: /CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Certificate serial: 019F236914FC3E6A3B03937B7947C40600FD
Authority key identifier: AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47975
IP address blocks: 2a03:2300::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:14:fc:3e:6a:3b:03:93:7b:79:47:c4:06:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf2d0857b34a9c44e3e545b56a8169bc7c3ed98
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a7dc381c83e402615ee76a6eeadc508fe59911d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:26:4e:83:02:fe:5f:30:3b:aa:73:4e:cf:
3f:8e:2d:e8:0b:60:53:be:4c:26:fe:a0:5d:e6:d2:
ae:e9:37:16:89:ca:54:b3:f9:12:ec:e9:67:4c:51:
71:2f:f3:b8:e0:80:ad:77:df:67:1f:e0:d6:ba:d3:
24:8d:22:b9:8b:4b:96:ee:03:58:74:a9:c6:a4:46:
51:89:5a:55:f4:49:d2:c1:a1:56:66:49:47:9e:a6:
f4:8c:49:ce:a1:6b:db:6f:70:98:b1:65:5b:21:f6:
7d:3a:1f:ac:69:4b:4c:78:94:5c:07:f1:76:38:b4:
af:b0:e5:bb:9b:94:5c:4c:c5:7a:5b:1b:11:5a:d6:
15:56:b5:8f:dd:0c:e6:0f:5f:50:63:26:11:27:ce:
32:96:3f:15:b9:f6:91:ad:e8:73:9f:03:8f:dc:6d:
16:71:2f:7d:3f:28:bf:c4:f2:ea:3e:1a:68:26:7d:
3d:5f:31:ef:73:7d:0c:a4:0b:a4:3c:50:56:fb:6e:
01:39:65:5f:48:d0:c7:dc:52:f5:18:88:75:55:9e:
49:f9:51:cb:75:80:60:69:b1:ca:82:22:d1:95:8e:
2e:40:64:94:cb:37:5f:69:c4:9c:12:12:11:c6:8d:
88:9d:99:eb:83:82:d5:17:25:a9:95:6d:da:e0:57:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7D:C3:81:C8:3E:40:26:15:EE:76:A6:EE:AD:C5:08:FE:59:91:1D
X509v3 Authority Key Identifier:
keyid:AD:F2:D0:85:7B:34:A9:C4:4E:3E:54:5B:56:A8:16:9B:C7:C3:ED:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfLQhXs0qcROPlRbVqgWm8fD7Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/en3Dgcg-QCYV7nam7q3FCP5ZkR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/rfLQhXs0qcROPlRbVqgWm8fD7Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
83:7b:d0:23:1c:0d:ab:a2:a8:32:e2:6a:12:57:11:23:14:f1:
57:6e:2f:3b:74:9a:2c:5c:eb:96:e8:46:dd:8d:86:1e:22:41:
29:08:d0:39:86:18:2b:7f:4e:80:7c:21:f5:bd:0b:53:08:66:
03:2f:54:cd:5d:a6:e6:f3:34:0e:44:7b:80:16:11:95:f6:49:
63:15:3e:54:5c:f7:c8:25:b2:25:c7:01:dc:64:0d:e2:03:b7:
e6:59:e1:f6:f7:d7:35:2d:f9:8a:b9:2e:99:a8:93:11:ba:d2:
93:ae:5c:5b:0f:44:6d:30:7a:a5:f9:41:ce:44:e6:78:a9:f0:
30:59:53:f9:19:4e:df:37:ce:95:f4:e8:8a:d1:50:b2:cb:74:
25:37:48:34:dd:1d:91:81:48:09:ab:c4:de:3d:f2:4d:b2:14:
72:ef:af:6f:df:f7:18:95:81:e8:11:d0:c5:bc:0e:c3:2e:2a:
50:6e:77:84:b9:93:93:e0:71:08:6a:b4:66:11:0e:96:4b:3c:
d4:fd:83:89:67:d3:4f:e2:27:c2:f4:af:e1:39:0c:6b:da:25:
e7:e3:3f:03:ff:6c:2d:ab:27:b4:19:72:3d:f2:a0:97:55:77:
b9:30:7d:a8:4c:c0:a9:61:8f:c8:b9:b7:30:32:78:03:ba:40:
79:9a:a1:27
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaRT8Pmo7A5N7eUfEBgD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjJkMDg1N2IzNGE5YzQ0ZTNlNTQ1YjU2YTgxNjliYzdj
M2VkOTgwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdkYzM4MWM4M2U0MDI2MTVlZTc2YTZlZWFkYzUwOGZlNTk5MTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlUmToMC/l8wO6pzTs8/ji3oC2BT
vkwm/qBd5tKu6TcWicpUs/kS7OlnTFFxL/O44ICtd99nH+DWutMkjSK5i0uW7gNY
dKnGpEZRiVpV9EnSwaFWZklHnqb0jEnOoWvbb3CYsWVbIfZ9Oh+saUtMeJRcB/F2
OLSvsOW7m5RcTMV6WxsRWtYVVrWP3QzmD19QYyYRJ84ylj8VufaRrehznwOP3G0W
cS99Pyi/xPLqPhpoJn09XzHvc30MpAukPFBW+24BOWVfSNDH3FL1GIh1VZ5J+VHL
dYBgabHKgiLRlY4uQGSUyzdfacScEhIRxo2InZnrg4LVFyWplW3a4FeV6wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHp9w4HIPkAmFe52pu6txQj+WZEdMB8GA1UdIwQY
MBaAFK3y0IV7NKnETj5UW1aoFpvHw+2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZMUWhYczBxY1JPUGxSYlZxZ1dtOGZEN1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt
NTJmZTQ0MzQzNTBlLzEvZW4zRGdjZy1RQ1lWN25hbTdxM0ZDUDVaa1IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl
LzEvcmZMUWhYczBxY1JPUGxSYlZxZ1dtOGZEN1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgMjADAN
BgkqhkiG9w0BAQsFAAOCAQEAg3vQIxwNq6KoMuJqElcRIxTxV24vO3SaLFzrluhG
3Y2GHiJBKQjQOYYYK39OgHwh9b0LUwhmAy9UzV2m5vM0DkR7gBYRlfZJYxU+VFz3
yCWyJccB3GQN4gO35lnh9vfXNS35irkumaiTEbrSk65cWw9EbTB6pflBzkTmeKnw
MFlT+RlO3zfOlfToitFQsst0JTdINN0dkYFICavE3j3yTbIUcu+vb9/3GJWB6BHQ
xbwOwy4qUG53hLmTk+BxCGq0ZhEOlks81P2DiWfTT+InwvSv4TkMa9ol5+M/A/9s
LasntBlyPfKgl1V3uTB9qEzAqWGPyLm3MDJ4A7pAeZqhJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:07 2026 by rpki-client