Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa
File: ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa (raw, json)
Hash identifier: hTTuLE8cgZlfa+nvncE4HoPgMuLOWUMunYCYp0aquvs=
Subject key identifier: 30:BD:DB:8B:89:B1:EF:62:29:C7:82:A0:D6:93:04:F4:B4:19:95:1A
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F23683F125BD134D703C04C8F73E6AF60
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48944
IP address blocks: 2a05:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3f:12:5b:d1:34:d7:03:c0:4c:8f:73:e6:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30bddb8b89b1ef6229c782a0d69304f4b419951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:88:62:01:2e:2d:03:d5:70:14:97:5f:f7:
d8:b7:3c:b2:82:7a:77:e6:6b:2a:c9:24:60:b4:19:
c1:0e:79:0b:65:1a:3d:c1:2d:7f:f3:23:76:7e:c5:
2f:18:ba:68:83:b3:de:21:8c:af:44:35:3f:c2:c7:
4a:ce:97:56:08:0e:2c:fa:41:1a:df:46:1a:35:1c:
86:7d:df:33:2c:d4:54:e8:39:c2:00:28:f0:0f:67:
81:5f:58:82:b7:57:8d:de:dc:81:6b:86:dd:6f:60:
c4:86:69:de:52:5b:7b:8d:6c:b9:21:84:24:22:a3:
d9:25:6f:89:96:00:1f:84:16:47:63:bf:22:1b:ea:
2f:ea:59:63:2a:26:72:a9:39:52:e4:f2:1b:ae:84:
01:11:05:dc:81:a0:ff:98:be:f8:8e:ef:47:40:83:
47:fb:93:4d:5f:51:ad:48:69:24:b9:1f:82:c7:1f:
6b:01:64:a6:0f:87:dd:26:42:1f:ea:ee:ff:08:95:
5c:19:f0:4b:7b:30:8a:57:00:a1:b6:35:ae:03:cc:
2d:52:7a:ec:6c:a0:13:66:8d:f5:81:c8:24:98:06:
06:d4:9d:df:89:54:77:42:73:7f:7f:92:f5:03:c5:
7f:e4:28:1b:42:50:da:fe:e1:43:85:49:bc:0c:9a:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BD:DB:8B:89:B1:EF:62:29:C7:82:A0:D6:93:04:F4:B4:19:95:1A
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ML3bi4mx72Ipx4Kg1pME9LQZlRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
50:ba:c6:2d:07:20:07:e3:da:e3:fc:33:a4:ba:9e:a3:74:1d:
64:61:11:47:71:67:0d:e1:69:0d:35:29:32:f3:c2:9e:45:8b:
c0:cd:7a:de:fe:6a:3c:8a:6f:4b:a0:14:9b:d3:8a:ae:4e:48:
5d:96:1f:98:aa:c4:35:75:00:c6:27:0f:bc:d3:21:a8:74:1f:
2e:b0:3f:b0:68:e2:fc:26:fc:87:60:b3:15:3a:6b:55:d9:85:
f5:35:55:17:e1:0b:ed:19:9b:0a:66:20:40:9c:02:5f:e3:ce:
1a:e8:b9:8d:49:3e:21:ba:e9:71:d8:f5:37:2d:ff:ae:0b:a8:
fd:9b:5d:cd:18:a0:e2:5d:bb:e5:f9:e1:1f:5a:8c:b5:e7:aa:
da:2c:6d:cd:b0:6b:05:c5:3f:c0:73:01:e8:e7:77:2c:da:5d:
f1:06:bd:e4:57:2d:8f:4b:fa:82:67:3d:43:bd:5a:20:4a:da:
ca:0c:82:b0:19:9d:ff:80:41:89:a3:f5:4f:37:38:94:d7:3f:
ae:16:15:b9:a3:f1:59:8e:3b:e5:b1:0c:45:24:2b:e8:ad:b2:
72:4f:55:0f:bc:1a:38:b3:5d:be:bc:c6:34:2e:b9:ca:b6:6a:
d8:c5:8d:f8:06:8d:3b:d1:15:87:b6:c7:31:73:35:6d:1f:bb:
f7:90:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:23 2026 by rpki-client