Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3NqC3Lr6Muy1jZRxnFDtwC-IaKA.roa
File: 3NqC3Lr6Muy1jZRxnFDtwC-IaKA.roa (raw, json)
Hash identifier: IPaaOBWWh1Vz7KPZWaSJNsmovNS02f4tCSyvTK5k7vU=
Subject key identifier: DC:DA:82:DC:BA:FA:32:EC:B5:8D:94:71:9C:50:ED:C0:2F:88:68:A0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CF7AC9B14D6776D41A45CC2FE843657CD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3NqC3Lr6Muy1jZRxnFDtwC-IaKA.roa
Signing time: Mon 16 Mar 2026 17:23:30 +0000
ROA not before: Mon 16 Mar 2026 17:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 2a05:b300::/29 maxlen: 32
2a06:1184:11::/48 maxlen: 48
2a06:35c3:100::/48 maxlen: 48
2a09:17c1:4a::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0c:7882:2::/48 maxlen: 48
2a0e:15c7:101::/48 maxlen: 48
2a0e:1a83:99::/48 maxlen: 48
2a0e:c786:122::/48 maxlen: 48
2a0e:c787:1000::/48 maxlen: 48
2a0e:f600:2a::/48 maxlen: 48
2a0f:1200:10::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:6::/48 maxlen: 48
2a0f:18c0::/29 maxlen: 32
2a0f:1e07::/32 maxlen: 32
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1fc0::/29 maxlen: 32
2a0f:3046:85::/48 maxlen: 48
2a0f:3047:fe48::/48 maxlen: 48
2a0f:31c7::/32 maxlen: 32
2a0f:3d80:1312::/48 maxlen: 48
2a0f:3e80::/29 maxlen: 29
2a0f:7d00:100::/48 maxlen: 48
2a0f:7d06:11::/48 maxlen: 48
2a0f:bc04:1004::/48 maxlen: 48
2a0f:da40::/29 maxlen: 32
2a0f:de40::/29 maxlen: 32
2a0f:e1c0:1312::/48 maxlen: 48
2a0f:e1c7:77::/48 maxlen: 48
2a0f:e202:33::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e740::/29 maxlen: 32
2a0f:e7c7:b4::/48 maxlen: 48
2a0f:ea44:55::/48 maxlen: 48
2a0f:ea44:acab::/48 maxlen: 48
2a0f:ec00::/29 maxlen: 29
2a10:4e00::/29 maxlen: 32
2a10:5400::/29 maxlen: 29
2a10:67c2:d6::/48 maxlen: 48
2a10:67c5:2::/48 maxlen: 48
2a10:6f00::/29 maxlen: 32
2a10:7700::/29 maxlen: 32
2a12:ac46:77::/48 maxlen: 48
2a12:ac46:99::/48 maxlen: 48
2a12:ecc0:11::/48 maxlen: 48
2a12:ecc0:3e2::/48 maxlen: 48
2a13:18c5:11::/48 maxlen: 48
2a13:18c6:101::/48 maxlen: 48
2a13:18c6:8512::/48 maxlen: 48
2a13:2c40::/29 maxlen: 32
2a13:3080::/29 maxlen: 29
2a13:8100::/29 maxlen: 32
2a13:8c86:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:9180::/29 maxlen: 32
2a13:9285:100::/48 maxlen: 48
2a13:c900:120::/48 maxlen: 48
2a13:e100:323::/48 maxlen: 48
2a13:e102:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:ac:9b:14:d6:77:6d:41:a4:5c:c2:fe:84:36:57:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 16 17:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcda82dcbafa32ecb58d94719c50edc02f8868a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:3e:6a:6e:ae:97:d8:58:42:d5:63:47:0e:
27:02:30:18:71:a5:67:fe:a2:7e:65:16:83:46:35:
5b:bc:c3:5f:3c:02:ed:06:e8:11:77:bc:aa:63:60:
07:9b:ac:f1:ea:db:5e:39:29:d4:a3:9f:37:1f:c0:
af:07:64:e9:a3:59:87:2e:ca:a9:3e:59:2e:7b:07:
50:0f:a3:cd:83:01:19:b7:78:62:0e:8f:19:71:72:
12:f1:a5:a5:c6:7d:6d:b0:e4:d6:a6:5e:d5:c3:af:
c9:89:cb:27:5f:46:ec:47:0c:1a:55:fa:bd:4c:1c:
ed:c1:d1:d2:12:34:35:6c:62:85:21:6c:58:e1:d3:
27:94:34:50:41:1b:43:ac:d4:ad:98:a2:f6:51:9e:
ed:3d:23:d7:ba:e7:75:f1:eb:ae:9b:ab:4b:b1:56:
1d:8d:c7:5b:01:7f:67:5b:b5:aa:a9:61:d1:a2:8f:
b2:af:8a:66:eb:78:b0:8b:3d:53:49:4e:84:40:4d:
ff:e1:4b:16:42:f9:97:53:8a:5e:3f:18:92:36:aa:
03:bd:70:99:43:38:d9:12:f5:5a:83:17:16:5c:0c:
c6:44:f8:77:35:5d:b3:45:75:3d:a1:72:6e:da:2e:
73:ff:4f:5c:dc:8e:cc:4b:62:6e:a6:f5:18:70:79:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DA:82:DC:BA:FA:32:EC:B5:8D:94:71:9C:50:ED:C0:2F:88:68:A0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3NqC3Lr6Muy1jZRxnFDtwC-IaKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:1184:11::/48
2a06:35c3:100::/48
2a09:17c1:4a::/48
2a0a:2d06:66::/48
2a0c:7882:2::/48
2a0e:15c7:101::/48
2a0e:1a83:99::/48
2a0e:c786:122::/48
2a0e:c787:1000::/48
2a0e:f600:2a::/48
2a0f:1200:10::/48
2a0f:1206:66::/48
2a0f:1584:6::/48
2a0f:18c0::/29
2a0f:1e07::/32
2a0f:1e80:1986::/48
2a0f:1fc0::/29
2a0f:3046:85::/48
2a0f:3047:fe48::/48
2a0f:31c7::/32
2a0f:3d80:1312::/48
2a0f:3e80::/29
2a0f:7d00:100::/48
2a0f:7d06:11::/48
2a0f:bc04:1004::/48
2a0f:da40::/29
2a0f:de40::/29
2a0f:e1c0:1312::/48
2a0f:e1c7:77::/48
2a0f:e202:33::/48
2a0f:e207:fd38::/48
2a0f:e740::/29
2a0f:e7c7:b4::/48
2a0f:ea44:55::/48
2a0f:ea44:acab::/48
2a0f:ec00::/29
2a10:4e00::/29
2a10:5400::/29
2a10:67c2:d6::/48
2a10:67c5:2::/48
2a10:6f00::/29
2a10:7700::/29
2a12:ac46:77::/48
2a12:ac46:99::/48
2a12:ecc0:11::/48
2a12:ecc0:3e2::/48
2a13:18c5:11::/48
2a13:18c6:101::/48
2a13:18c6:8512::/48
2a13:2c40::/29
2a13:3080::/29
2a13:8100::/29
2a13:8c86:88::/48
2a13:8c86:10a::/48
2a13:9180::/29
2a13:9285:100::/48
2a13:c900:120::/48
2a13:e100:323::/48
2a13:e102:1::/48
Signature Algorithm: sha256WithRSAEncryption
10:f6:c3:d5:fd:6e:a7:e9:c9:59:fe:3e:f2:c6:b7:0e:45:62:
59:3d:3b:7b:5d:d9:2a:3c:e1:e4:39:1c:76:45:4f:94:83:18:
a0:e7:37:a5:da:fe:fc:9b:ef:25:8d:67:4b:b2:24:84:e5:96:
d7:59:eb:78:ea:f5:99:45:c0:66:99:13:4f:56:32:db:ea:96:
21:fa:f4:83:b0:94:44:16:01:fd:b9:8a:86:99:fa:ef:0c:1f:
6b:94:92:ac:4d:bc:a5:05:37:82:36:09:f4:14:61:13:80:7e:
80:12:66:ac:47:cd:33:37:c3:e5:35:bf:78:0c:f6:e3:50:17:
03:c5:11:61:42:6b:c1:10:a9:c1:54:ec:db:7b:c5:69:c7:70:
8b:e6:38:69:ae:d8:e0:5b:0c:75:36:7a:ea:bd:69:60:8e:b7:
90:ab:57:f7:a8:59:57:48:59:6d:2b:8b:34:a1:bd:57:96:9e:
f9:e4:c1:b2:48:9f:d7:b8:7e:00:02:4c:53:25:84:34:bb:d1:
4c:31:23:fd:32:f7:60:fd:41:fa:76:25:5f:9e:7c:ea:a0:21:
e3:ba:b2:96:e0:6c:ac:09:2d:77:e2:c5:13:10:b4:da:60:09:
2c:8d:88:4d:50:14:2e:eb:b1:43:ad:a3:de:1f:88:27:a8:c9:
08:bc:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:45 2026 by rpki-client