Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/k3PO0XiLFwevKSf5kgFB8CckAoo.roa
File: k3PO0XiLFwevKSf5kgFB8CckAoo.roa (raw, json)
Hash identifier: 3ZT0fPbZiRqzWH4bsacy5YP5K85Xrhz1kRXfC2g2D9E=
Subject key identifier: 93:73:CE:D1:78:8B:17:07:AF:29:27:F9:92:01:41:F0:27:24:02:8A
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019D9C1C68EA43C77C6ECFB2C3F40D7CE210
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/k3PO0XiLFwevKSf5kgFB8CckAoo.roa
Signing time: Fri 17 Apr 2026 15:43:20 +0000
ROA not before: Fri 17 Apr 2026 15:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198797
IP address blocks: 213.218.164.0/22 maxlen: 22
2a12:e940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:1c:68:ea:43:c7:7c:6e:cf:b2:c3:f4:0d:7c:e2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Apr 17 15:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9373ced1788b1707af2927f9920141f02724028a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:02:01:03:0f:81:63:62:be:ca:dc:0b:dd:
0f:af:bd:38:7a:63:48:a7:d9:6e:1e:b1:34:0a:b8:
30:e9:8b:35:1e:85:7e:d1:48:3d:d1:74:e1:9d:83:
46:79:5d:d5:66:04:fc:3f:e2:49:1e:a9:e5:83:f2:
97:32:94:99:31:d6:6c:fc:d3:b9:b4:14:da:dd:10:
3e:42:41:e0:cb:a6:0f:9b:a4:c9:92:27:9c:19:1c:
39:f0:f3:df:fb:2f:c2:e5:ce:59:0e:49:05:2e:cf:
95:00:a0:82:b1:3f:f8:12:da:4a:08:64:68:8b:65:
7b:0e:3b:b7:b7:4a:02:bd:9f:50:dc:e1:8a:f3:82:
ab:da:d8:03:c4:85:b7:80:f2:1b:37:f6:9c:f3:46:
d2:49:91:3a:94:f1:24:58:15:47:c7:27:2d:91:93:
7f:87:ef:3a:74:47:d0:2e:0b:bd:64:8e:ca:9d:f8:
62:d3:e5:72:1f:07:bc:44:89:85:02:4e:13:45:48:
12:46:62:14:72:61:fb:cb:5f:ce:da:11:26:18:fe:
71:8f:32:f3:8d:1e:36:a2:09:8d:db:68:1f:22:de:
1f:98:93:dc:86:1e:f0:cd:e0:70:43:45:30:04:3c:
5c:f0:59:9e:7f:2f:9f:e4:f1:ed:72:f1:05:79:21:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:CE:D1:78:8B:17:07:AF:29:27:F9:92:01:41:F0:27:24:02:8A
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/k3PO0XiLFwevKSf5kgFB8CckAoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.164.0/22
IPv6:
2a12:e940::/29
Signature Algorithm: sha256WithRSAEncryption
06:36:18:ca:b8:1e:9c:8e:4c:70:77:87:5f:a8:fc:2d:ec:69:
8c:be:c7:63:d3:77:58:d4:33:9a:6d:cc:3b:d3:2d:20:4f:bf:
0f:2f:72:db:9e:c5:7e:40:f5:66:aa:1b:19:f6:e0:01:8e:59:
57:65:04:47:ac:cf:bb:47:c6:8d:71:7c:a8:37:77:87:c3:fd:
bb:6e:65:b2:af:6d:d6:b5:30:2f:3c:d8:33:45:71:84:ca:ba:
84:89:f5:6f:cd:aa:85:1a:a8:bc:ac:b2:f5:29:72:ce:8e:da:
35:21:14:1e:6a:13:96:b6:27:d4:77:13:93:7a:cb:f5:8a:ec:
5a:ee:a9:1a:c8:74:88:bf:1d:fd:3e:b6:b1:bc:63:02:72:fa:
c4:08:7b:be:ba:1e:59:2b:81:9f:e3:8b:9c:34:db:3e:de:cd:
9f:c1:04:e5:9e:13:55:0b:46:4e:cb:32:51:46:59:00:a0:4d:
e0:eb:ce:2c:e2:95:14:c2:6a:58:87:d8:8a:6c:9f:c8:80:e5:
45:53:41:d1:51:e2:9b:cb:6f:69:41:c1:7a:19:10:bc:d0:8c:
e1:87:f4:dc:90:4f:d5:d6:86:87:fc:49:6b:3d:e5:02:4a:80:
c3:89:a1:76:46:3b:21:f0:dd:2a:11:60:95:62:fc:70:f0:a8:
f5:be:6e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:36 2026 by rpki-client