Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bOTUqpW34Tgiz4i9SYLdK8m1XE.roa
File: 3bOTUqpW34Tgiz4i9SYLdK8m1XE.roa (raw, json)
Hash identifier: OFW671n2TYezc3bZ3s+wC7/7oCyYNWHsOpleYR9meu4=
Subject key identifier: DD:B3:93:52:AA:56:DF:84:E0:8B:3E:22:F5:26:0B:74:AF:26:D5:71
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A1B103A660DFAFA16432ECB8EEBC2D8E62
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bOTUqpW34Tgiz4i9SYLdK8m1XE.roa
Signing time: Fri 06 Nov 2026 13:19:28 +0000
ROA not before: Fri 06 Nov 2026 13:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25159
IP address blocks: 2a10:4702::/32 maxlen: 32
2a10:4703::/32 maxlen: 32
2a13:93c1::/32 maxlen: 32
2a13:ac82::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:03:a6:60:df:af:a1:64:32:ec:b8:ee:bc:2d:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Nov 6 13:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb39352aa56df84e08b3e22f5260b74af26d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:51:79:f8:52:7b:8e:f2:dc:4b:a4:08:6c:
d7:1f:ea:75:15:9f:8f:32:7c:93:5f:c2:be:6d:39:
4b:46:29:58:dc:0d:fb:ca:0d:d9:0e:5e:b3:2a:a1:
a9:6c:70:68:b0:ab:9f:f1:be:1d:ec:ae:ed:7b:83:
c3:80:3d:b8:59:59:22:2b:b6:fc:d6:d9:f4:c0:26:
7b:fc:1a:1e:bb:fb:61:b0:d7:f5:0d:47:9a:a8:a4:
f8:47:ed:a1:46:34:6d:97:30:cc:83:ca:81:c3:41:
25:0d:b0:bf:c5:9e:2f:b6:2f:38:09:3c:70:e2:e0:
26:1f:be:4c:af:1e:c4:e9:0d:ea:bc:eb:fb:5f:cc:
3a:37:27:2b:ba:46:39:40:13:0c:e4:f4:b6:5a:99:
7e:64:1d:7f:5e:71:a4:33:3d:32:73:30:57:d4:5c:
6f:31:86:7d:b8:eb:4b:7f:ea:fd:59:66:58:5f:97:
98:b7:a5:3d:93:71:38:59:8d:63:81:3b:c1:a2:11:
9a:5a:de:1a:9b:67:28:8a:71:b7:93:a8:01:ba:58:
16:bb:1d:82:b0:b1:1e:f3:67:75:0a:45:3d:fb:5b:
a0:24:8e:9b:68:63:cb:0e:90:d4:39:71:e7:1f:5a:
b0:29:3f:6b:3e:9f:cd:64:7d:af:8b:61:93:6f:b1:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B3:93:52:AA:56:DF:84:E0:8B:3E:22:F5:26:0B:74:AF:26:D5:71
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/3bOTUqpW34Tgiz4i9SYLdK8m1XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4702::/31
2a13:93c1::/32
2a13:ac82::/32
Signature Algorithm: sha256WithRSAEncryption
58:fc:c1:bc:07:94:c8:11:77:4b:be:f8:ac:a8:2f:75:de:cb:
33:23:79:b4:91:78:ed:2e:ca:d1:c1:e0:0d:28:fa:17:fa:10:
45:9c:0f:6e:f7:8f:a3:b6:26:6f:65:d2:9c:cd:25:d7:58:1b:
89:16:72:5f:f2:0b:db:18:14:02:75:22:c0:25:d0:b9:e6:e2:
50:46:0b:9a:d9:72:7c:ad:b2:fb:f3:87:10:b5:10:33:0a:5f:
f3:d5:9a:e0:da:3f:12:a4:8d:3f:3c:c6:1f:15:c7:5f:6f:aa:
74:75:60:31:d8:3c:24:28:3e:b1:bc:c3:2b:f2:3a:5b:8c:c7:
1c:6b:c3:27:53:7f:f0:b3:dd:13:82:8d:bf:c3:a4:24:39:25:
ef:3f:64:37:84:4f:03:53:fe:32:c2:b9:25:d1:cc:24:5d:79:
19:df:7e:3e:aa:94:8e:72:06:98:21:83:98:b2:ad:1c:5b:39:
db:f7:44:2c:4b:71:ff:98:e1:07:f1:07:ba:72:81:fd:15:dd:
47:10:3f:41:a4:e7:4c:ec:98:e5:70:d9:c7:c7:2d:56:58:6c:
98:d4:3c:49:20:2a:b3:97:3f:b1:81:6b:6c:01:2a:0c:0c:39:
c0:17:32:b5:ee:0c:02:e6:32:ee:72:9e:f1:f1:62:2b:53:58:
5e:35:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:09:42 2026 by rpki-client