Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/C3YXK2axKQQL03NOSjgoGxmbHCY.roa
File: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (raw, json)
Hash identifier: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=
Subject key identifier: 0B:76:17:2B:66:B1:29:04:0B:D3:73:4E:4A:38:28:1B:19:9B:1C:26
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FBD3F7D0E2D27673EDF156551BB2
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/C3YXK2axKQQL03NOSjgoGxmbHCY.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201848
IP address blocks: 2a04:ac00:1::/48 maxlen: 48
2a04:ac00:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:d3:f7:d0:e2:d2:76:73:ed:f1:56:55:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b76172b66b129040bd3734e4a38281b199b1c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:5e:48:0c:cd:e4:e5:8c:7e:84:fe:30:34:
02:1a:f7:d9:86:44:d1:f1:32:6c:81:82:9a:15:cb:
25:7f:d2:d1:18:23:e1:92:dc:02:f8:35:6d:af:ff:
06:f8:92:6d:2a:8a:1d:91:9f:7a:55:1e:b8:99:17:
61:2c:18:4f:88:76:f4:02:1f:b9:c3:d8:97:14:d0:
06:b6:b3:0a:2b:4f:bd:bd:4d:ce:9d:4a:f8:45:ea:
f0:63:85:98:6f:33:0a:e7:d8:9e:31:1b:43:39:5c:
3e:5c:13:ed:47:6f:e5:fa:2a:0a:00:bb:65:7d:bb:
28:3a:c6:a9:ae:ef:35:fb:8c:75:96:5d:b6:2d:e3:
2a:a0:f3:40:d6:6a:12:0e:67:3a:a1:88:3f:0d:cd:
59:09:b7:e9:94:56:bb:59:d4:a1:24:a9:7a:10:6f:
10:7c:6d:5a:49:50:58:71:ef:55:35:a7:fe:03:10:
1d:ef:a7:16:f7:fe:cb:8e:8e:b1:63:bc:77:70:2b:
f8:f1:e8:3d:16:95:12:5a:ff:8a:2a:55:d0:d8:41:
b0:52:43:52:ca:97:5c:e4:43:79:41:3e:00:8b:b3:
0a:df:60:21:a1:00:fb:1f:94:fb:32:59:e9:50:bf:
6a:72:47:83:6c:54:2f:a6:61:88:c4:6d:e7:f4:e9:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:17:2B:66:B1:29:04:0B:D3:73:4E:4A:38:28:1B:19:9B:1C:26
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/C3YXK2axKQQL03NOSjgoGxmbHCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:1::/48
2a04:ac00:4::/48
Signature Algorithm: sha256WithRSAEncryption
46:9a:f1:b2:1b:a6:15:1f:4b:8f:b8:7a:90:0d:d7:42:6a:fd:
e1:e0:f9:3e:5f:dc:9c:1e:5a:9a:64:e2:a4:26:55:95:42:c7:
e2:6f:11:aa:e1:a2:89:d3:0f:74:db:de:c8:c7:63:e7:0c:6f:
db:ba:48:e9:6b:1b:5e:83:07:df:4b:cf:eb:c6:9a:bf:da:0b:
a8:d9:f1:67:15:c6:23:2d:d3:2c:fc:11:fa:0d:f2:de:17:87:
98:d6:36:f1:f7:da:b1:89:c7:11:e1:d7:8d:23:8e:43:35:89:
74:c2:3d:ef:95:e2:cd:86:34:c0:b2:57:e3:35:52:8f:b1:db:
58:92:d4:38:50:30:d7:8a:a8:6a:d0:fa:57:f4:3d:05:0f:af:
3c:ee:cd:5d:24:c3:1f:6d:e3:cc:29:c9:6a:a6:33:45:08:66:
12:c1:0d:df:7b:a2:b5:7d:6f:02:b9:b4:e3:d3:bc:e8:4f:5d:
06:3a:d6:cc:ce:62:aa:ff:51:8e:13:ba:6a:76:1b:78:f9:b6:
97:e4:d2:58:e2:cd:ac:60:79:bc:11:f2:d4:37:db:f3:67:c9:
5a:78:13:34:a4:fd:15:1d:e2:ba:16:77:30:d0:26:82:25:05:
0c:db:0e:1e:34:f0:d0:30:c5:c9:2e:10:d8:ba:8b:4a:b7:0a:
28:ac:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:56 2026 by rpki-client