Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa
File: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (raw, json)
Hash identifier: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=
Subject key identifier: 0A:4D:EB:38:8E:97:6B:91:A3:ED:D9:DD:97:17:5E:87:73:6B:06:67
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 019F23B8D50C6EED237F9F02A24445FA42E4
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa
Signing time: Thu 02 Jul 2026 16:45:43 +0000
ROA not before: Thu 02 Jul 2026 16:45:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219359
IP address blocks: 2a05:1640:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:b8:d5:0c:6e:ed:23:7f:9f:02:a2:44:45:fa:42:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Jul 2 16:45:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a4deb388e976b91a3edd9dd97175e87736b0667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a9:e1:71:08:2f:9d:3a:0c:a5:e4:f7:70:
da:a1:bb:00:33:39:e7:8d:07:e6:0c:72:ea:ab:86:
38:d7:fe:af:df:33:d0:3f:b0:22:f8:b3:f8:b5:70:
af:ea:ec:5a:9e:ed:1b:36:ab:a3:04:e4:b1:4c:4c:
60:2d:fc:08:40:2f:e6:b7:42:cd:74:4a:9d:42:48:
3a:10:b0:17:f7:04:f6:0c:20:6a:1f:5e:c3:a4:96:
69:15:d1:c0:90:5e:b8:0d:3e:a4:e0:17:c7:97:d4:
92:36:98:5b:6d:ae:3d:c6:04:79:ee:a8:c6:b9:45:
1e:0c:ba:fb:69:3d:5f:71:dd:8b:32:88:58:ce:c2:
05:5c:85:9f:08:11:24:43:b0:5c:dd:42:4e:d6:40:
e1:e0:1e:27:ce:33:af:6c:be:66:cb:75:e8:c7:08:
c4:52:f6:77:ea:13:58:6e:f1:89:16:e8:5d:c1:4b:
4e:bf:16:86:d0:16:ba:37:a8:81:83:eb:06:29:64:
ea:1f:07:39:61:87:e4:68:66:d3:20:c2:11:81:05:
a0:3d:5a:32:d3:bc:d4:91:fd:c8:46:cf:c2:a9:c6:
46:f3:f1:fb:ac:b1:ea:ab:cd:bb:d2:6f:e9:43:a1:
10:a5:0c:bb:3c:9b:90:59:7c:c2:07:cf:ab:19:ae:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:EB:38:8E:97:6B:91:A3:ED:D9:DD:97:17:5E:87:73:6B:06:67
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1640:1::/48
Signature Algorithm: sha256WithRSAEncryption
ba:07:8a:06:95:7c:9b:63:b1:c8:52:5a:14:39:49:98:f2:1e:
c0:5f:98:82:00:5c:76:4a:a9:91:2f:d6:f1:5a:c2:e5:aa:b7:
00:7e:8b:e4:f3:a7:bd:49:c3:ba:42:7a:82:18:d5:17:87:3b:
04:07:90:30:d5:95:32:76:c9:16:65:62:e6:ae:9d:d8:b0:56:
3f:59:9b:83:96:78:90:49:00:79:cd:1a:9f:52:cc:65:fb:00:
08:b1:97:4d:fe:a8:db:f5:31:8b:4d:26:b0:b9:0c:c7:d2:c3:
af:6f:fc:1a:44:d1:04:a2:47:9d:09:a7:41:a1:e5:15:08:15:
44:2e:42:60:5d:21:bd:82:97:dd:70:6c:84:bc:27:bf:11:d3:
2c:fc:cc:62:a2:ee:06:81:5c:94:fb:b2:b4:99:f5:d3:0e:7e:
b4:ee:65:a0:f1:57:be:03:2d:72:ba:c2:b0:2b:13:bc:a5:81:
d5:ff:44:7b:2f:f8:26:ed:d3:99:85:ec:70:76:76:b5:98:eb:
ae:2f:60:9e:1e:a5:bf:6a:aa:5e:b1:c8:2a:b8:f9:07:9d:6f:
de:29:21:25:6a:1d:d4:6a:ae:64:f9:22:14:97:82:d1:60:a9:
93:88:74:5d:df:08:98:aa:f5:e4:d7:8e:b7:88:00:8b:10:ab:
7d:47:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:22 2026 by rpki-client