Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/sy3L82X_k9pwFlctV8Qn2oAe67I.roa
File: sy3L82X_k9pwFlctV8Qn2oAe67I.roa (raw, json)
Hash identifier: +J5tZGTBeOIKaWbei0v5OTAxSvX0Rhp7+cQe3w9eO48=
Subject key identifier: B3:2D:CB:F3:65:FF:93:DA:70:16:57:2D:57:C4:27:DA:80:1E:EB:B2
Certificate issuer: /CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Certificate serial: 01A06221D7F10182ED36D4383C9C03E73456
Authority key identifier: 95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/sy3L82X_k9pwFlctV8Qn2oAe67I.roa
Signing time: Wed 02 Sep 2026 12:39:40 +0000
ROA not before: Wed 02 Sep 2026 12:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 224
IP address blocks: 129.177.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:21:d7:f1:01:82:ed:36:d4:38:3c:9c:03:e7:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=959f9721a9c8a3da8fc237c6e63e6cb8424a57b9
Validity
Not Before: Sep 2 12:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32dcbf365ff93da7016572d57c427da801eebb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:65:54:a4:c3:c0:05:11:7b:33:00:45:ae:
db:76:bd:a4:38:c3:6e:53:bd:9f:f7:e8:5b:76:6a:
7c:f7:e5:91:25:28:3f:30:fb:99:ab:d6:59:9e:ee:
ec:b6:cf:95:8e:9b:a7:aa:63:6d:be:7e:08:df:54:
30:15:44:3c:ff:e4:2a:0e:cc:63:ed:fe:d7:7b:16:
00:b0:bc:3a:19:59:f0:c1:cd:c7:1b:eb:67:60:f8:
0d:44:5b:02:40:f1:08:5e:80:98:35:44:64:2e:a1:
d5:36:7f:c7:aa:ea:06:57:f2:4e:4f:58:d9:55:89:
b6:f7:97:b4:20:3e:71:f9:d3:b1:23:9c:c3:10:29:
83:bb:3a:3e:b9:5d:86:e9:df:d6:8f:8f:b8:ba:34:
b3:31:d4:ed:4a:6b:d8:1f:09:89:79:21:54:74:4b:
4b:f0:b6:0e:08:54:b7:95:79:2e:d5:fa:0c:7f:ff:
47:3d:97:7d:85:24:fb:41:de:c8:05:52:68:ea:96:
41:61:07:12:54:fc:56:98:39:b1:ef:39:c4:20:7c:
56:dd:74:2d:a6:1f:eb:5d:2b:f2:10:6c:ab:bf:3c:
29:01:b0:f1:14:58:37:5a:56:fa:c4:fc:b6:1d:a2:
49:c7:7a:34:ee:ca:d7:92:6a:64:03:7c:d4:f8:de:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:CB:F3:65:FF:93:DA:70:16:57:2D:57:C4:27:DA:80:1E:EB:B2
X509v3 Authority Key Identifier:
keyid:95:9F:97:21:A9:C8:A3:DA:8F:C2:37:C6:E6:3E:6C:B8:42:4A:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZ-XIanIo9qPwjfG5j5suEJKV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/sy3L82X_k9pwFlctV8Qn2oAe67I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a57ea-7fc3-45a2-8678-b0fb0f12ed71/1/lZ-XIanIo9qPwjfG5j5suEJKV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.177.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:2b:01:06:31:72:cc:b6:0e:82:85:40:7f:86:37:1c:ae:5c:
ca:a6:82:38:d0:d7:14:7b:a9:64:55:0d:3d:b3:93:9d:f3:50:
d7:1c:b5:95:b7:70:eb:9b:01:25:88:f7:0c:94:7d:ce:d9:18:
ea:ee:09:67:d1:36:64:61:4c:01:5b:7e:b5:77:20:e2:26:0f:
e7:ee:a8:a8:a9:4f:98:ee:f5:22:8f:14:97:8d:f5:09:ec:94:
72:92:5a:b3:c4:fa:00:00:a2:74:d6:18:5e:e6:32:cd:c7:ea:
34:f7:7d:dd:4c:de:87:e5:45:49:7c:ce:09:d1:1f:df:63:37:
2a:d9:81:39:4e:75:c8:7d:8d:14:67:11:ab:f6:fb:a4:d0:19:
21:d2:f0:fa:2f:03:19:30:f5:08:ff:65:89:e5:47:cb:89:34:
ad:9e:e1:91:06:34:04:fc:65:ed:81:6f:58:18:68:0a:5e:78:
09:c0:6c:c6:66:ba:99:ac:b5:2b:a1:07:8c:8b:e5:48:8d:49:
69:33:b6:20:5b:5f:1a:1f:43:f1:8a:22:28:33:da:e9:36:4d:
31:49:ea:92:fc:45:34:ba:d0:13:d8:fa:99:71:95:1f:11:96:
7f:19:41:ee:33:88:9c:8b:5d:b2:3b:01:9f:7f:c3:dd:7e:b4:
d7:e8:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:59:56 2026 by rpki-client