Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3z70-Uv1A4W8s1oiuZXBI6GjgDI.roa
File: 3z70-Uv1A4W8s1oiuZXBI6GjgDI.roa (raw, json)
Hash identifier: 3pnL9VpDXKIFRptCK+UKpmnCWBU3Nx70bk4NKoiCu4A=
Subject key identifier: DF:3E:F4:F9:4B:F5:03:85:BC:B3:5A:22:B9:95:C1:23:A1:A3:80:32
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0B96520C1777AEEF96CEE50BFEB74BD81
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3z70-Uv1A4W8s1oiuZXBI6GjgDI.roa
Signing time: Sat 19 Sep 2026 11:20:07 +0000
ROA not before: Sat 19 Sep 2026 11:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 2a13:c340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:65:20:c1:77:7a:ee:f9:6c:ee:50:bf:eb:74:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 19 11:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3ef4f94bf50385bcb35a22b995c123a1a38032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:ec:f3:b6:b4:23:b0:30:e7:75:cc:f3:67:
d4:5f:0d:0c:86:18:bb:36:ce:65:36:94:e5:5b:b6:
3a:ab:2e:0a:e2:b3:e2:c1:ea:ed:06:a7:0b:bb:8f:
df:a2:50:74:e2:ee:9a:de:e0:ae:db:ca:ba:63:fb:
9b:7e:5a:9f:b5:c4:e9:0e:7e:bc:88:72:4b:9f:66:
55:7f:69:f8:3a:22:56:88:83:a9:b2:21:c6:45:1d:
35:13:a2:2b:d5:47:51:90:b8:48:ff:96:51:47:0b:
15:ca:29:0c:ae:8b:42:a3:60:03:58:f9:f0:96:d4:
40:b1:7f:a7:51:e5:de:8f:17:f2:2e:30:2e:cf:f4:
37:88:6b:5b:cf:b4:80:95:7f:ad:60:be:3e:67:a9:
ba:1d:2e:b0:55:fe:68:02:12:3b:99:5e:24:47:47:
2f:2d:74:25:4d:66:bd:e5:4a:99:95:f6:39:87:6b:
0f:0d:0f:2d:a6:f6:13:cf:92:e7:60:ea:7d:1d:05:
43:9c:e3:82:5b:56:58:45:9b:44:1f:17:20:01:5e:
cb:45:b6:97:06:62:7e:57:ba:6f:18:51:5b:c4:ec:
74:95:5c:0d:a2:34:49:63:69:00:ee:0a:d3:d3:3b:
b7:56:5b:36:92:f5:1d:45:6a:38:a9:12:ed:4b:2b:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:F4:F9:4B:F5:03:85:BC:B3:5A:22:B9:95:C1:23:A1:A3:80:32
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3z70-Uv1A4W8s1oiuZXBI6GjgDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
6c:ea:0b:f6:b0:36:d7:e1:e8:0b:58:de:01:ee:1a:5c:86:87:
f2:54:1a:d9:64:8f:5d:ec:60:de:fd:b1:c0:21:9a:84:eb:37:
fe:d6:0c:d3:f5:c4:c0:32:3e:aa:29:74:a5:0b:86:05:00:95:
69:bb:f5:2b:47:ff:99:e1:47:ff:88:06:4d:47:4d:7e:46:83:
9c:31:e5:e9:9f:e3:24:e4:02:dc:f5:3c:66:4f:af:90:3a:93:
09:ff:d1:ac:97:c7:22:76:5b:37:38:ca:d6:c3:90:ad:13:22:
32:35:92:85:b3:9f:d5:ba:cb:e6:ae:c5:db:26:49:8b:56:94:
a5:e5:b0:3d:f4:63:06:77:aa:18:e7:61:a6:f4:a0:74:c9:9d:
d3:e6:4f:59:79:66:a7:f4:b3:4c:f2:7e:0f:08:3c:c5:fc:c8:
01:3e:b0:23:7e:6a:06:a0:d5:99:20:3c:95:51:08:0c:4e:17:
03:f6:7b:5e:50:b0:f6:46:10:f0:96:c8:7e:62:eb:2b:be:05:
20:e9:1f:0e:5a:33:19:13:7e:26:64:f0:e5:f9:57:97:04:78:
09:f2:05:d6:93:9a:41:db:fa:fe:ed:4d:62:4b:13:77:18:df:
2c:89:3e:c4:d6:7b:ef:06:95:03:60:c9:7f:67:6f:3a:f0:c1:
3c:93:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:42 2026 by rpki-client