Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/U1fhkg5y5xUtqGNEn9McUqpEylc.roa
File: U1fhkg5y5xUtqGNEn9McUqpEylc.roa (raw, json)
Hash identifier: 95Xw9ZYQd5qnA/jgZbdPv+nuYYnJ21FjxNy+dlqjEJs=
Subject key identifier: 53:57:E1:92:0E:72:E7:15:2D:A8:63:44:9F:D3:1C:52:AA:44:CA:57
Certificate issuer: /CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Certificate serial: 019C7CD825BCDC7FA685AE077EA214CA657B
Authority key identifier: F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/U1fhkg5y5xUtqGNEn9McUqpEylc.roa
Signing time: Fri 20 Feb 2026 20:57:46 +0000
ROA not before: Fri 20 Feb 2026 20:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39906
IP address blocks: 2001:678:e54::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:d8:25:bc:dc:7f:a6:85:ae:07:7e:a2:14:ca:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79a19f4aef71a466001fd7859142a8e26f3eeff
Validity
Not Before: Feb 20 20:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5357e1920e72e7152da863449fd31c52aa44ca57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:5d:e7:5f:18:67:49:e3:ee:5c:77:1a:fd:
27:0b:ba:7d:c1:bd:91:dd:db:0c:a3:5b:af:73:18:
10:cf:ca:f6:95:fe:5c:93:32:7d:0e:2c:8e:d7:6d:
1d:95:d9:f3:b1:39:a7:02:05:ca:2e:a3:34:ed:a4:
d2:32:b0:cb:de:ab:87:22:2a:8d:5c:66:65:b4:83:
96:76:ea:30:74:14:9b:27:19:7c:44:15:d7:2e:4a:
32:42:6d:b9:9e:04:bc:c3:4a:73:dc:b9:38:0f:11:
68:d8:fe:f8:29:73:47:ca:8f:40:f6:38:f8:f2:8d:
6a:f4:89:dc:c8:a7:17:75:bd:c6:6a:b9:25:8e:1f:
24:ae:12:04:f4:f7:46:bd:79:5b:12:63:18:d8:18:
f1:ed:c6:6e:dd:92:50:d9:be:d2:8b:bd:71:f2:e5:
b8:ab:5c:11:8f:63:d0:36:3e:c7:cc:7e:f6:fb:38:
5e:e4:4b:7a:89:0c:64:15:08:e9:a6:e6:06:19:31:
90:c2:28:e4:4c:7e:4d:e0:2a:bb:64:de:69:5c:22:
fa:6b:bf:63:f1:47:3f:b4:c0:85:cb:17:5b:dc:6f:
2a:4b:f3:3a:ce:50:1c:bd:54:94:38:84:64:58:17:
8d:d0:fa:bd:c2:0d:0a:ce:a5:2d:4b:4b:39:ef:c3:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:57:E1:92:0E:72:E7:15:2D:A8:63:44:9F:D3:1C:52:AA:44:CA:57
X509v3 Authority Key Identifier:
keyid:F7:9A:19:F4:AE:F7:1A:46:60:01:FD:78:59:14:2A:8E:26:F3:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95oZ9K73GkZgAf14WRQqjibz7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/U1fhkg5y5xUtqGNEn9McUqpEylc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3fd543-e413-4885-8d59-c0cb827fd7f3/1/95oZ9K73GkZgAf14WRQqjibz7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e54::/48
Signature Algorithm: sha256WithRSAEncryption
43:59:88:a5:dd:3e:c5:75:6e:70:57:86:a5:e0:68:97:3d:b9:
ce:9d:e1:5d:13:29:59:63:7f:5d:d7:0a:77:25:7b:47:3d:ee:
6c:97:2d:7b:4b:d1:e3:38:59:7f:7a:b7:60:c5:ce:40:8e:91:
68:ff:68:a8:2d:ec:86:f7:a5:ff:2a:cf:0e:2b:c6:71:59:70:
e0:a6:ab:76:75:8d:bf:c9:66:c7:f2:04:0a:70:98:c9:6c:cb:
01:da:62:44:c3:b4:bf:87:98:7f:b5:0b:8d:4c:41:be:6c:c2:
24:f7:bd:71:f7:15:67:ea:32:3d:a1:81:f3:29:c8:56:46:19:
00:b4:df:80:9d:04:ab:a7:c3:3c:20:88:86:e6:3a:6b:ea:06:
5d:78:67:68:46:4f:f7:23:0e:f8:42:80:00:ea:1c:9a:e8:ee:
35:15:01:4c:21:8b:7c:57:c5:53:37:a5:f5:1a:8d:01:ee:56:
22:95:79:66:c1:83:4d:a1:cf:4d:f0:3f:99:e4:26:f0:e0:ea:
0f:38:8c:39:64:29:0a:50:ea:8c:61:be:da:0e:11:14:c0:85:
a2:ad:a3:69:50:c3:26:02:af:0a:da:31:61:cf:0c:55:38:41:
4f:f2:df:d3:ec:19:d8:99:76:6f:bc:5e:d2:9e:b9:57:be:d0:
fd:c2:08:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZx82CW83H+mha4HfqIUymV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWExOWY0YWVmNzFhNDY2MDAxZmQ3ODU5MTQyYThlMjZm
M2VlZmYwHhcNMjYwMjIwMjA1NzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzU3ZTE5MjBlNzJlNzE1MmRhODYzNDQ5ZmQzMWM1MmFhNDRjYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLhd518YZ0nj7lx3Gv0nC7p9wb2R
3dsMo1uvcxgQz8r2lf5ckzJ9DiyO120dldnzsTmnAgXKLqM07aTSMrDL3quHIiqN
XGZltIOWduowdBSbJxl8RBXXLkoyQm25ngS8w0pz3Lk4DxFo2P74KXNHyo9A9jj4
8o1q9IncyKcXdb3Garkljh8krhIE9PdGvXlbEmMY2Bjx7cZu3ZJQ2b7Si71x8uW4
q1wRj2PQNj7HzH72+zhe5Et6iQxkFQjppuYGGTGQwijkTH5N4Cq7ZN5pXCL6a79j
8Uc/tMCFyxdb3G8qS/M6zlAcvVSUOIRkWBeN0Pq9wg0KzqUtS0s578MhAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFNX4ZIOcucVLahjRJ/THFKqRMpXMB8GA1UdIwQY
MBaAFPeaGfSu9xpGYAH9eFkUKo4m8+7/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTkt
YzBjYjgyN2ZkN2YzLzEvVTFmaGtnNXk1eFV0cUdORW45TWNVcXBFeWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zZmQ1NDMtZTQxMy00ODg1LThkNTktYzBjYjgyN2ZkN2Yz
LzEvOTVvWjlLNzNHa1pnQWYxNFdSUXFqaWJ6N3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA5U
MA0GCSqGSIb3DQEBCwUAA4IBAQBDWYil3T7FdW5wV4al4GiXPbnOneFdEylZY39d
1wp3JXtHPe5sly17S9HjOFl/erdgxc5AjpFo/2ioLeyG96X/Ks8OK8ZxWXDgpqt2
dY2/yWbH8gQKcJjJbMsB2mJEw7S/h5h/tQuNTEG+bMIk971x9xVn6jI9oYHzKchW
RhkAtN+AnQSrp8M8IIiG5jpr6gZdeGdoRk/3Iw74QoAA6hya6O41FQFMIYt8V8VT
N6X1Go0B7lYilXlmwYNNoc9N8D+Z5Cbw4OoPOIw5ZCkKUOqMYb7aDhEUwIWiraNp
UMMmAq8K2jFhzwxVOEFP8t/T7BnYmXZvvF7SnrlXvtD9wgi7
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:06 2026 by rpki-client