Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/3JZ0DQSWcI313x9N6g_CKCT7Yp0.roa
File: 3JZ0DQSWcI313x9N6g_CKCT7Yp0.roa (raw, json)
Hash identifier: DbZRXPiF1om6CizKcF+vdcvUSTOQMb5J5wanobXR+7E=
Subject key identifier: DC:96:74:0D:04:96:70:8D:F5:DF:1F:4D:EA:0F:C2:28:24:FB:62:9D
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A0A93FD2ADF019EC5C0D7C4280F6A7B587
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/3JZ0DQSWcI313x9N6g_CKCT7Yp0.roa
Signing time: Wed 16 Sep 2026 08:05:27 +0000
ROA not before: Wed 16 Sep 2026 08:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218661
IP address blocks: 2a0a:87c0:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:3f:d2:ad:f0:19:ec:5c:0d:7c:42:80:f6:a7:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Sep 16 08:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc96740d0496708df5df1f4dea0fc22824fb629d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:b4:a7:c9:2c:61:4e:ba:bc:ce:24:57:ce:
57:c0:27:3e:27:77:35:e9:3f:d5:13:14:10:b2:72:
59:ab:21:86:0c:25:78:7d:92:98:07:c1:98:b8:c1:
f7:9e:53:be:5f:a9:b8:03:f3:c3:48:6b:64:90:e1:
1a:8a:53:60:c9:8b:5e:3d:de:a2:de:89:02:1c:7e:
5e:5f:cb:b2:26:79:dd:49:97:7d:72:e4:ec:cc:5c:
8a:cf:74:af:27:0a:b6:d8:54:26:71:6d:ff:17:9e:
5d:39:e2:06:9b:a9:0d:cf:fe:b0:72:b7:1a:49:9f:
8c:06:4a:5a:ce:64:7d:96:d8:2c:4c:68:90:a0:08:
3e:32:98:d1:f3:39:2f:3a:71:c7:91:be:c3:64:09:
94:dc:78:a3:d2:a0:cb:9c:b0:ce:f5:8d:00:9e:28:
7b:d6:ff:87:5c:4d:bc:6f:85:71:c3:c9:97:00:ea:
eb:21:30:05:87:04:95:bf:92:ba:b4:89:db:f2:ec:
a4:40:31:de:1b:c7:76:a1:62:b7:cc:49:5f:41:1e:
38:79:b6:6e:3f:3c:48:88:a3:2c:dd:6b:90:53:d9:
71:b3:92:79:1a:a4:5b:84:d5:0c:33:2b:ec:dc:9f:
bd:8d:9f:e3:cc:45:e9:be:d3:16:cd:3b:1c:d2:6e:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:74:0D:04:96:70:8D:F5:DF:1F:4D:EA:0F:C2:28:24:FB:62:9D
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/3JZ0DQSWcI313x9N6g_CKCT7Yp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
47:71:05:ed:6f:a4:07:20:4d:ea:a3:72:dd:e9:bc:73:7b:45:
9d:0c:18:91:12:43:61:7a:b6:5d:29:29:47:09:c3:0d:8f:9a:
3b:d9:23:ec:e2:2c:4b:22:01:1a:52:ae:d7:5f:69:a5:2e:ee:
ae:cd:41:51:e5:48:e9:a2:90:a9:45:b9:93:93:77:ba:4f:e1:
fd:4f:18:1f:5d:c2:bd:2e:3b:7e:7e:a9:ff:a3:92:04:3c:f3:
b3:33:a6:1a:59:ea:40:f2:4c:99:04:a6:d4:2f:a4:a4:68:58:
07:ea:05:3a:3e:84:d0:53:36:3f:64:02:5b:4e:84:46:4f:90:
34:5d:c8:13:ed:9c:e6:d5:dd:11:01:55:80:92:61:4e:52:ee:
61:8b:2a:2b:85:a2:fd:08:8c:41:86:4f:2c:e1:3a:4f:43:e6:
81:84:a2:73:53:fe:c3:12:e6:66:9a:67:93:6b:65:2f:e8:c2:
df:bd:0c:3c:a7:90:35:8d:d5:85:98:a9:2b:bc:88:7e:7e:59:
61:66:5f:f2:49:73:4f:e1:7d:ed:23:30:a9:f6:e3:72:f9:85:
38:54:52:fc:60:22:48:71:c8:4f:a8:32:1e:fb:29:23:cd:78:
71:5d:02:fb:31:a8:ad:c0:1c:58:95:9b:2d:5d:04:6f:3d:4c:
20:24:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:23 2026 by rpki-client