Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fSH3G_a-bwuXBrMn1TXBo_q8Qk.roa
File: 3fSH3G_a-bwuXBrMn1TXBo_q8Qk.roa (raw, json)
Hash identifier: eGSAQzI9PxIPds1Aj+5qgiHjJH8IWfw4Gu4O0+AgqtU=
Subject key identifier: DD:F4:87:DC:6F:DA:F9:BC:2E:5C:1A:CC:9F:54:D7:06:8F:EA:F1:09
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F9411B04AA018D2D21486F0E9FF74237D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fSH3G_a-bwuXBrMn1TXBo_q8Qk.roa
Signing time: Fri 24 Jul 2026 12:20:14 +0000
ROA not before: Fri 24 Jul 2026 12:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a06:b5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:11:b0:4a:a0:18:d2:d2:14:86:f0:e9:ff:74:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 24 12:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddf487dc6fdaf9bc2e5c1acc9f54d7068feaf109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:30:30:c4:6e:3f:af:2f:05:79:1f:4d:23:
d1:46:ef:58:64:00:6d:1a:d2:2d:68:e5:aa:dc:c3:
12:58:81:7c:2f:07:41:73:62:97:dd:ad:6d:50:37:
1c:c5:bf:b9:5e:81:1d:86:dc:57:fd:45:07:54:80:
c8:ee:af:2a:02:62:7c:91:b0:d1:86:79:42:c5:5d:
56:af:be:1e:94:42:97:de:14:bd:ec:68:f3:a0:5a:
43:ea:4c:4b:f6:a1:94:6c:27:8a:d3:52:27:e1:b9:
33:29:b0:81:f3:4c:ae:e0:6f:2f:93:22:74:4a:46:
e5:79:60:ee:b0:8c:5b:16:1d:82:71:0a:6a:55:20:
cc:81:c4:80:a8:88:4b:f8:4e:1b:8d:e9:81:05:e6:
c8:3e:c8:96:37:aa:dd:a9:5f:37:dd:8c:c3:2c:7d:
20:cf:fd:f0:2a:a5:1b:a4:fc:2e:cf:35:5c:eb:e9:
f2:dc:9a:99:52:88:d3:6b:f6:e8:a5:7c:05:3c:39:
ef:57:ec:bd:f0:68:88:94:ab:70:fe:a5:f9:04:61:
12:96:57:16:ae:50:eb:3e:4d:29:78:59:02:17:bd:
8e:11:41:dc:18:aa:ae:cf:0f:d3:3a:31:d3:a2:a9:
ef:aa:d8:21:91:0f:e7:b1:f0:ed:4e:93:3f:73:e9:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:87:DC:6F:DA:F9:BC:2E:5C:1A:CC:9F:54:D7:06:8F:EA:F1:09
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/3fSH3G_a-bwuXBrMn1TXBo_q8Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
ae:33:ed:4a:ce:52:63:53:85:cd:c8:d2:ec:fa:67:bd:de:c5:
47:3c:07:14:8a:e5:7e:0c:57:27:ff:6e:72:7f:c7:d0:11:29:
0c:69:4f:c2:a6:64:20:44:f6:5f:68:e7:c7:bc:f3:db:30:f8:
68:44:45:50:db:95:c4:2d:f6:55:7c:12:43:4c:05:25:63:be:
93:4d:bf:97:96:ba:97:7b:d8:47:81:44:c9:a6:6f:ad:4d:f7:
bb:b2:65:41:2e:80:c2:bb:1b:35:da:3e:d1:e9:20:21:ab:b2:
06:8e:b6:d8:e6:00:75:02:ac:32:a3:32:04:8d:d2:2a:94:73:
ab:89:86:8d:24:5d:6f:ed:55:43:d6:b8:8b:b8:73:4f:2b:94:
d0:0e:34:9a:67:d5:ca:68:92:c1:ac:4c:4a:bd:07:8f:23:dc:
59:da:0f:29:68:92:40:69:5d:d9:b3:92:a9:5d:8e:68:af:82:
99:cd:36:54:b8:11:ef:bf:b9:77:bc:85:5f:b3:96:ae:f5:ed:
fe:2c:82:d0:91:27:8d:43:0c:43:7c:18:d9:5f:21:fa:ab:7f:
e4:80:f1:88:04:e7:5b:ef:ba:0f:ce:2c:97:16:c7:e9:07:a4:
7c:92:47:49:b4:ee:df:16:0d:e6:79:7c:95:b0:ec:b2:bf:03:
12:33:8b:a9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ+UEbBKoBjS0hSG8On/dCN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwNzI0MTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGY0ODdkYzZmZGFmOWJjMmU1YzFhY2M5ZjU0ZDcwNjhmZWFmMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NkwMMRuP68vBXkfTSPRRu9YZABt
GtItaOWq3MMSWIF8LwdBc2KX3a1tUDccxb+5XoEdhtxX/UUHVIDI7q8qAmJ8kbDR
hnlCxV1Wr74elEKX3hS97GjzoFpD6kxL9qGUbCeK01In4bkzKbCB80yu4G8vkyJ0
SkbleWDusIxbFh2CcQpqVSDMgcSAqIhL+E4bjemBBebIPsiWN6rdqV833YzDLH0g
z/3wKqUbpPwuzzVc6+ny3JqZUojTa/bopXwFPDnvV+y98GiIlKtw/qX5BGESllcW
rlDrPk0peFkCF72OEUHcGKquzw/TOjHToqnvqtghkQ/nsfDtTpM/c+kVSQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFN30h9xv2vm8LlwazJ9U1waP6vEJMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvM2ZTSDNHX2EtYnd1WEJyTW4xVFhCb19xOFFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKga1wDAN
BgkqhkiG9w0BAQsFAAOCAQEArjPtSs5SY1OFzcjS7Ppnvd7FRzwHFIrlfgxXJ/9u
cn/H0BEpDGlPwqZkIET2X2jnx7zz2zD4aERFUNuVxC32VXwSQ0wFJWO+k02/l5a6
l3vYR4FEyaZvrU33u7JlQS6AwrsbNdo+0ekgIauyBo622OYAdQKsMqMyBI3SKpRz
q4mGjSRdb+1VQ9a4i7hzTyuU0A40mmfVymiSwaxMSr0HjyPcWdoPKWiSQGld2bOS
qV2OaK+Cmc02VLgR77+5d7yFX7OWrvXt/iyC0JEnjUMMQ3wY2V8h+qt/5IDxiATn
W++6D84slxbH6QekfJJHSbTu3xYN5nl8lbDssr8DEjOLqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:41 2026 by rpki-client