Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/rK3Z06ui9GxU24EFPRPZ2SZQtqM.roa
File: rK3Z06ui9GxU24EFPRPZ2SZQtqM.roa (raw, json)
Hash identifier: y+Xd7tf/dPd15wnig61j9RqRrveWiz8Qn1iu82YS4yA=
Subject key identifier: AC:AD:D9:D3:AB:A2:F4:6C:54:DB:81:05:3D:13:D9:D9:26:50:B6:A3
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 019CB8DAB63A59E0D8C17BDFFC7B25CD9B79
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/rK3Z06ui9GxU24EFPRPZ2SZQtqM.roa
Signing time: Wed 04 Mar 2026 12:37:46 +0000
ROA not before: Wed 04 Mar 2026 12:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214437
IP address blocks: 69.19.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:da:b6:3a:59:e0:d8:c1:7b:df:fc:7b:25:cd:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Mar 4 12:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acadd9d3aba2f46c54db81053d13d9d92650b6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:f4:c0:c4:63:26:3f:b2:f1:f6:cc:3a:40:
97:77:a6:fb:15:4e:4b:d9:5a:21:bd:64:3d:df:d3:
92:b0:8f:c2:1a:38:72:ee:8c:48:1f:86:a3:34:d3:
11:9e:c3:b8:fa:76:5e:fe:16:04:7f:c1:54:47:a7:
ba:75:60:1c:8b:ef:4d:a2:32:79:99:c6:1b:6f:5c:
41:80:30:98:bf:30:09:0f:98:ac:48:03:05:65:cb:
c4:68:f5:bc:5e:82:8c:6e:fb:08:4d:70:93:96:14:
ff:06:46:10:db:ed:fc:d3:64:be:6a:9f:73:82:13:
cc:d6:57:2f:fc:b0:7f:e6:3a:6b:a5:50:8e:48:e8:
f9:ab:4f:4d:a2:bd:1c:3a:bb:0b:63:62:bd:f9:4e:
ac:5e:4c:4c:1f:39:f0:7b:cd:7b:79:8e:a7:6f:62:
ee:97:70:c6:8a:7d:f7:8a:2c:eb:06:7c:d7:0a:bd:
df:ab:d0:a9:4a:c8:df:90:f5:43:96:a7:e5:50:f1:
77:68:78:bc:68:d6:5b:7a:3e:39:a3:c1:ac:63:4c:
b6:57:72:71:09:99:9d:0b:7e:b7:e7:69:b3:aa:78:
31:0b:88:c5:48:c9:f2:19:23:7c:38:fa:c3:b9:46:
43:05:13:4a:6c:b1:a5:20:9b:9e:a3:09:b4:b4:b3:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:D9:D3:AB:A2:F4:6C:54:DB:81:05:3D:13:D9:D9:26:50:B6:A3
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/rK3Z06ui9GxU24EFPRPZ2SZQtqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.19.142.0/23
Signature Algorithm: sha256WithRSAEncryption
19:14:44:4b:8c:06:ef:b0:a2:db:ae:e9:b5:e4:84:ae:8d:6f:
29:de:e4:5e:5a:31:e8:41:24:1f:63:8e:6d:55:4f:cc:3a:1c:
7d:c3:91:1a:9a:2b:e1:a3:25:b3:69:bd:b8:b7:97:b0:22:a0:
10:3b:b7:e0:f9:4c:24:db:e0:37:91:93:c6:aa:e5:88:b6:62:
0a:d4:e0:51:45:90:c2:41:00:bd:e8:34:f6:8e:42:ec:eb:a2:
5c:b1:03:0a:c5:13:b0:e1:e2:20:8f:e2:7c:93:f0:ed:9a:f5:
17:85:b1:a2:97:6b:0e:be:db:5a:b0:b6:73:09:ec:27:3d:ab:
05:02:c1:d3:6a:2a:32:d2:60:10:17:5d:81:0d:74:89:ef:4e:
dd:8c:f6:b3:18:18:3c:1f:98:c0:1d:25:d4:92:06:99:b5:ec:
61:1e:e9:80:40:20:5b:26:47:ea:ba:2b:4f:d4:46:8d:05:12:
26:f7:ae:e1:1d:29:0f:a0:bf:82:99:33:24:bd:69:72:18:6b:
5c:65:b4:84:11:80:0e:9c:34:56:02:9c:d3:01:0a:b2:9f:0b:
8a:ed:78:d2:95:fd:4f:6f:46:0e:ff:a0:eb:bb:6d:05:da:8b:
a3:5c:56:44:c0:2c:65:56:3a:4d:3d:af:5e:1a:e2:e5:be:dc:
bf:36:42:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy42rY6WeDYwXvf/HslzZt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2
NTI4YmMwHhcNMjYwMzA0MTIzNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2FkZDlkM2FiYTJmNDZjNTRkYjgxMDUzZDEzZDlkOTI2NTBiNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4v0wMRjJj+y8fbMOkCXd6b7FU5L
2VohvWQ939OSsI/CGjhy7oxIH4ajNNMRnsO4+nZe/hYEf8FUR6e6dWAci+9NojJ5
mcYbb1xBgDCYvzAJD5isSAMFZcvEaPW8XoKMbvsITXCTlhT/BkYQ2+3802S+ap9z
ghPM1lcv/LB/5jprpVCOSOj5q09Nor0cOrsLY2K9+U6sXkxMHznwe817eY6nb2Lu
l3DGin33iizrBnzXCr3fq9CpSsjfkPVDlqflUPF3aHi8aNZbej45o8GsY0y2V3Jx
CZmdC36352mzqngxC4jFSMnyGSN8OPrDuUZDBRNKbLGlIJueowm0tLNykwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyt2dOrovRsVNuBBT0T2dkmULajMB8GA1UdIwQY
MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt
YTRkNDEzZDdmODljLzEvckszWjA2dWk5R3hVMjRFRlBSUFoyU1pRdHFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj
LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRROOMA0G
CSqGSIb3DQEBCwUAA4IBAQAZFERLjAbvsKLbrum15ISujW8p3uReWjHoQSQfY45t
VU/MOhx9w5EamivhoyWzab24t5ewIqAQO7fg+Uwk2+A3kZPGquWItmIK1OBRRZDC
QQC96DT2jkLs66JcsQMKxROw4eIgj+J8k/DtmvUXhbGil2sOvttasLZzCewnPasF
AsHTaioy0mAQF12BDXSJ707djPazGBg8H5jAHSXUkgaZtexhHumAQCBbJkfquitP
1EaNBRIm967hHSkPoL+CmTMkvWlyGGtcZbSEEYAOnDRWApzTAQqynwuK7XjSlf1P
b0YO/6Dru20F2oujXFZEwCxlVjpNPa9eGuLlvty/NkI6
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:38 2026 by rpki-client