Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3kofNfneUbGC6yqJ9IjtzzSgbn4.roa
File: 3kofNfneUbGC6yqJ9IjtzzSgbn4.roa (raw, json)
Hash identifier: Es6OviWiCNKJJQVaIEBIYgsls4R3BMCASTXwr6ncoew=
Subject key identifier: DE:4A:1F:35:F9:DE:51:B1:82:EB:2A:89:F4:88:ED:CF:34:A0:6E:7E
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019CE6CDC5851ED6DA01EA2B0E0D9C3A06DC
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3kofNfneUbGC6yqJ9IjtzzSgbn4.roa
Signing time: Fri 13 Mar 2026 10:46:10 +0000
ROA not before: Fri 13 Mar 2026 10:46:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200116
IP address blocks: 2a03:5840:13e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:cd:c5:85:1e:d6:da:01:ea:2b:0e:0d:9c:3a:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 13 10:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de4a1f35f9de51b182eb2a89f488edcf34a06e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:96:42:23:d7:9f:31:27:d8:58:71:1f:42:
0f:46:0c:7a:fd:cc:5b:5e:20:d5:b0:4f:bc:e0:f7:
ba:48:18:93:40:8e:e2:5c:26:bb:4d:e3:e1:31:fe:
7c:11:0a:d1:96:33:a8:58:71:7d:0e:4b:4b:8e:c4:
e0:48:e0:48:32:09:fe:6c:f5:39:ef:ce:d8:83:18:
67:a7:4e:c0:11:37:4f:20:d3:a5:1d:a9:97:e2:cf:
bc:fb:a2:b5:1f:2b:2b:77:33:98:a0:3a:8b:bf:92:
f5:c1:a2:e8:e1:26:17:73:cf:c0:5c:cb:ab:83:b2:
80:c3:f9:40:ee:2e:70:cb:38:68:88:85:b4:9a:39:
22:c8:b9:4c:d5:5a:44:93:7f:dc:2b:cb:1a:6e:67:
64:71:f4:4f:87:c4:95:dd:44:1b:6c:21:ff:7d:23:
18:43:ad:9f:da:41:2d:c0:06:45:21:43:35:76:12:
56:42:34:75:95:1a:f6:cf:c6:05:31:dc:8c:a8:8d:
94:e2:64:6a:00:7c:8e:76:c6:d8:5f:c6:49:ff:46:
f0:29:86:c5:b5:57:f7:81:4f:ff:f9:3c:f2:fb:bf:
8a:ac:52:d9:53:25:91:fa:1f:ee:1e:3c:aa:ce:04:
ce:33:ca:27:24:a9:69:fe:44:c7:2c:9e:59:b0:25:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4A:1F:35:F9:DE:51:B1:82:EB:2A:89:F4:88:ED:CF:34:A0:6E:7E
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/3kofNfneUbGC6yqJ9IjtzzSgbn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:13e::/48
Signature Algorithm: sha256WithRSAEncryption
09:76:92:b6:0e:b6:20:5b:09:6f:68:e2:7e:a4:3b:d3:58:c0:
d7:fb:19:90:f6:aa:16:cd:0b:c7:92:fb:48:a1:bb:d2:3d:5d:
c7:21:5e:7a:7c:42:a2:78:5c:d7:03:3f:3e:22:b1:b9:bb:86:
67:3f:b3:58:2f:6c:38:3f:d6:69:f6:69:39:4f:d8:7b:bc:a9:
7c:e8:b0:c1:dc:c0:d0:0c:56:75:c5:53:1d:5c:71:f5:08:01:
d5:47:93:b1:22:55:dc:8f:8d:b6:e1:cb:13:0e:0e:f3:62:21:
33:3d:c9:41:3e:1b:47:d4:b7:a4:f9:aa:27:41:c9:a5:cd:1b:
5e:b2:a7:1f:b9:49:2c:53:cb:20:a0:ae:6c:9f:db:b4:e6:be:
96:63:fc:7a:ff:61:32:3e:aa:f0:40:57:15:29:04:51:25:b9:
aa:80:dd:f5:5c:72:6b:09:2f:fe:62:9e:00:6c:b1:91:10:7c:
2b:42:d2:31:b0:83:75:27:2a:a7:bc:3c:a1:0d:51:6b:5f:5f:
e2:d5:04:0a:76:d5:dd:40:eb:69:42:b5:92:e9:4d:19:41:52:
25:80:58:4b:22:96:fc:55:8a:98:f2:ff:39:53:89:0d:0d:9a:
1d:56:56:18:e1:5e:0a:8c:f2:bb:9c:b7:70:a4:43:ca:6c:07:
88:07:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:35:47 2026 by rpki-client