Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa
File: 3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa (raw, json)
Hash identifier: Pri0BDp61F1x6W2ZNNi8m6bCY1kGNmKIt3J8iAi4+nI=
Subject key identifier: DC:6A:B1:2F:D0:60:B1:F5:40:E6:6D:99:0E:44:7E:64:B2:C8:5F:D0
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 01A0AABD992D35A32E2D79B019761BC50A98
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa
Signing time: Wed 16 Sep 2026 15:02:27 +0000
ROA not before: Wed 16 Sep 2026 15:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59711
IP address blocks: 176.97.0.0/24 maxlen: 24
176.97.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:bd:99:2d:35:a3:2e:2d:79:b0:19:76:1b:c5:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Sep 16 15:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc6ab12fd060b1f540e66d990e447e64b2c85fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:ee:eb:9a:11:fe:44:13:f3:f4:37:dd:3d:
e3:42:a4:8d:97:86:c2:c4:1c:e5:9f:2c:0e:7b:d1:
7a:89:5e:04:f6:bc:fe:18:cf:26:6e:de:f7:30:f6:
d6:16:48:c7:79:a2:38:bc:1e:e4:e4:49:e1:b7:fa:
6f:6f:37:db:26:54:2b:32:67:f5:21:02:61:01:76:
9d:19:ff:3a:bb:99:44:08:38:13:62:a1:0f:fa:f1:
60:a7:fe:d1:2f:42:8c:c3:28:9c:64:56:5d:ff:e9:
99:7e:67:35:df:87:b2:26:1d:27:f4:ab:74:64:39:
ee:39:84:29:5e:ce:2b:6a:94:ca:e1:48:a0:f9:61:
ec:cf:69:b0:3c:9b:63:78:17:87:62:2a:0d:01:75:
31:06:e4:a0:29:9a:ba:4e:f8:e5:58:bd:6c:3d:0a:
d6:7b:af:8a:4e:24:44:de:8d:d3:e7:34:20:eb:cd:
07:20:6c:28:a3:41:e3:b4:c9:6f:8b:f2:19:87:db:
ea:4f:ff:8b:f9:27:82:a8:37:90:2e:ff:4f:a8:ce:
55:d0:45:01:17:d3:85:5c:48:b1:04:35:e0:4e:98:
80:85:4d:26:90:71:99:f1:db:42:84:1c:1a:0b:9f:
6e:f1:26:75:fb:ed:a6:d9:e6:d3:a7:3a:af:6e:fa:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:B1:2F:D0:60:B1:F5:40:E6:6D:99:0E:44:7E:64:B2:C8:5F:D0
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.0.0/24
176.97.2.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b7:ff:04:e0:c3:14:72:05:5b:53:95:e7:79:7b:50:aa:a3:
61:ca:57:af:89:5e:ae:0d:b4:2a:47:5c:e8:67:ca:f7:b4:87:
4b:b2:76:8d:a4:b3:06:c3:df:64:16:f4:8f:aa:99:09:88:ba:
29:9b:fd:37:6e:03:56:2a:8c:5b:f2:90:27:63:00:6d:98:84:
db:cf:d8:86:4d:a8:d3:17:41:72:53:92:a4:38:5d:56:a8:bd:
38:7b:cb:9b:10:92:7f:4a:82:6a:9e:77:e7:b7:2d:26:d8:10:
3e:5b:d4:5d:58:6b:69:55:15:a3:14:e1:43:2d:29:37:85:24:
01:79:5f:a5:94:8b:a6:c6:93:ab:a4:8c:81:2a:99:aa:02:4a:
35:ad:6a:66:6a:56:30:fa:78:41:db:d3:e4:66:9a:97:71:d0:
b4:31:0a:56:be:e0:82:21:76:17:b2:3d:cd:55:d1:ea:9f:0e:
63:50:47:ac:71:be:78:fd:c3:79:14:95:b7:b4:3a:4f:40:2f:
88:f5:16:3a:32:93:9b:6e:1f:e8:1e:4b:fc:93:44:9d:dd:c9:
43:b9:f4:e6:79:1c:4a:15:eb:9f:0c:39:c4:c4:a1:33:b9:ed:
dd:95:9a:b9:6c:55:7b:58:78:83:96:89:0c:15:8c:a4:9a:41:
e9:4e:86:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCqvZktNaMuLXmwGXYbxQqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjYwOTE2MTUwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzZhYjEyZmQwNjBiMWY1NDBlNjZkOTkwZTQ0N2U2NGIyYzg1ZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMzu65oR/kQT8/Q33T3jQqSNl4bC
xBzlnywOe9F6iV4E9rz+GM8mbt73MPbWFkjHeaI4vB7k5Enht/pvbzfbJlQrMmf1
IQJhAXadGf86u5lECDgTYqEP+vFgp/7RL0KMwyicZFZd/+mZfmc134eyJh0n9Kt0
ZDnuOYQpXs4rapTK4Uig+WHsz2mwPJtjeBeHYioNAXUxBuSgKZq6TvjlWL1sPQrW
e6+KTiRE3o3T5zQg680HIGwoo0HjtMlvi/IZh9vqT/+L+SeCqDeQLv9PqM5V0EUB
F9OFXEixBDXgTpiAhU0mkHGZ8dtChBwaC59u8SZ1++2m2ebTpzqvbvoV0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNxqsS/QYLH1QOZtmQ5EfmSyyF/QMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvM0dxeEw5QmdzZlZBNW0yWkRrUi1aTExJWDlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsGEAAwQA
sGECMA0GCSqGSIb3DQEBCwUAA4IBAQCZt/8E4MMUcgVbU5XneXtQqqNhyleviV6u
DbQqR1zoZ8r3tIdLsnaNpLMGw99kFvSPqpkJiLopm/03bgNWKoxb8pAnYwBtmITb
z9iGTajTF0FyU5KkOF1WqL04e8ubEJJ/SoJqnnfnty0m2BA+W9RdWGtpVRWjFOFD
LSk3hSQBeV+llIumxpOrpIyBKpmqAko1rWpmalYw+nhB29PkZpqXcdC0MQpWvuCC
IXYXsj3NVdHqnw5jUEescb54/cN5FJW3tDpPQC+I9RY6MpObbh/oHkv8k0Sd3clD
ufTmeRxKFeufDDnExKEzue3dlZq5bFV7WHiDlokMFYykmkHpToZ8
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:32 2026 by rpki-client