Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/3Vm3Oktnx8KvP1haXniio4xSd7E.roa
File: 3Vm3Oktnx8KvP1haXniio4xSd7E.roa (raw, json)
Hash identifier: SLmhP4hElNk8zWp8To7vw3HRb5k9+pG32JQ2QJ/o0SE=
Subject key identifier: DD:59:B7:3A:4B:67:C7:C2:AF:3F:58:5A:5E:78:A2:A3:8C:52:77:B1
Certificate issuer: /CN=e92af4dda2fc01f8e14793084b0acc8965a7716c
Certificate serial: 019D106DE0F781710A35250B6EAF271E1779
Authority key identifier: E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/3Vm3Oktnx8KvP1haXniio4xSd7E.roa
Signing time: Sat 21 Mar 2026 12:45:29 +0000
ROA not before: Sat 21 Mar 2026 12:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213279
IP address blocks: 2a14:b400::/32 maxlen: 32
2a14:b400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:6d:e0:f7:81:71:0a:35:25:0b:6e:af:27:1e:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92af4dda2fc01f8e14793084b0acc8965a7716c
Validity
Not Before: Mar 21 12:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd59b73a4b67c7c2af3f585a5e78a2a38c5277b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:0d:07:e6:82:6c:9b:2b:84:71:aa:79:bb:
b2:ee:62:35:23:e8:40:b3:f6:dd:b6:2c:0d:f3:f4:
7e:e3:b3:5b:48:24:20:5f:eb:3b:8b:4f:31:87:25:
26:5c:40:54:9a:e1:b0:59:d0:b2:ec:36:12:53:c5:
1a:f5:db:05:96:9e:b6:7c:a4:5d:d7:c6:e7:da:04:
03:b4:93:a0:7e:1c:18:ca:6a:7e:7b:43:28:9c:43:
a9:7b:7a:74:38:10:a3:04:04:23:95:11:fa:54:06:
62:60:b5:fc:20:46:46:c2:40:a8:74:c7:d9:f8:a0:
95:12:73:98:77:72:37:e5:d8:82:74:93:1f:9f:41:
a0:f4:45:79:47:76:d5:c1:99:29:61:a4:ef:ed:c1:
79:9b:c8:70:65:c7:1c:c4:cb:19:57:70:c0:71:77:
dd:40:1d:af:e4:99:20:0a:66:39:5d:ae:4a:8e:4a:
9d:56:c3:bf:a5:b6:14:fd:87:fc:78:10:5d:85:ed:
ae:16:c8:04:ec:03:ac:d7:dc:db:7f:41:cc:5d:31:
0b:21:71:be:e1:0b:78:4b:3d:5d:be:a8:39:df:61:
6c:62:68:3d:de:60:84:35:75:07:c9:86:64:b2:59:
92:a6:1d:65:64:60:fc:b5:68:90:a5:e3:ac:62:3e:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:B7:3A:4B:67:C7:C2:AF:3F:58:5A:5E:78:A2:A3:8C:52:77:B1
X509v3 Authority Key Identifier:
keyid:E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/3Vm3Oktnx8KvP1haXniio4xSd7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/32
Signature Algorithm: sha256WithRSAEncryption
28:92:84:6a:8b:2b:a1:e1:fa:4a:8e:c0:eb:44:b0:b5:f5:39:
30:01:49:8c:cc:72:0c:94:60:de:d8:52:dd:7f:d4:c9:3e:be:
9e:fb:98:31:9d:8d:03:bc:df:2f:d1:fc:75:8b:5c:4a:bd:8c:
fe:fe:9b:07:ff:63:24:be:af:46:3f:63:2b:a6:da:fa:20:56:
7b:4d:b1:ec:47:65:15:b6:e5:27:c7:ba:3a:c3:e2:85:7e:6a:
22:82:77:20:91:6c:95:c8:08:be:a4:53:94:ca:6a:35:56:7a:
9d:05:20:53:c5:29:2e:d2:2a:e7:fa:8a:4c:42:dc:eb:83:cb:
91:49:e7:16:d1:2e:78:69:66:98:63:c2:59:2d:ff:b2:af:db:
71:2f:4f:e0:0d:56:9f:e5:39:20:d7:a2:45:8f:ca:5c:8f:2f:
b2:01:53:f4:84:fc:d2:c6:77:4d:a1:49:53:a9:c3:ff:b8:c6:
0b:8f:79:21:84:8a:f3:24:23:a4:43:49:0f:1c:d2:32:c2:88:
d7:e6:47:72:9f:e4:bc:3e:62:e4:79:2c:4d:3f:73:62:e7:2e:
39:e1:a9:dc:43:8d:34:6f:5c:f2:80:88:b6:ac:1c:c3:07:6e:
38:d4:05:89:72:51:34:f7:a8:63:24:f1:51:c3:b8:26:ec:c3:
88:f8:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:18:45 2026 by rpki-client