Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/3gai81UGgfLPbQftciy3jGMkOwI.roa
File: 3gai81UGgfLPbQftciy3jGMkOwI.roa (raw, json)
Hash identifier: kiaWDVp8FEgRP18QSL61NeSbPNIL/KFNeSuP3Gkl88Q=
Subject key identifier: DE:06:A2:F3:55:06:81:F2:CF:6D:07:ED:72:2C:B7:8C:63:24:3B:02
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019C815CA915B36CE42F6C421CA8372D1A80
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/3gai81UGgfLPbQftciy3jGMkOwI.roa
Signing time: Sat 21 Feb 2026 18:00:59 +0000
ROA not before: Sat 21 Feb 2026 18:00:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a13:9ac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:5c:a9:15:b3:6c:e4:2f:6c:42:1c:a8:37:2d:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 21 18:00:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de06a2f3550681f2cf6d07ed722cb78c63243b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:86:d3:31:94:a5:a5:0c:1c:96:f7:ad:20:
92:9c:da:ac:df:50:78:3b:ce:92:88:9d:4a:23:5d:
cf:a8:bd:48:63:98:1c:ee:ab:6c:b4:1d:a7:42:fc:
98:ae:ed:bd:8e:40:97:e7:c1:83:90:8d:a2:61:69:
57:46:0e:f7:97:db:dc:0b:70:44:d8:88:c6:9c:4e:
44:2e:61:bb:14:90:d4:1f:b4:16:12:8e:d8:a8:c5:
41:c8:67:08:4e:10:36:c2:4c:5f:b9:ec:b0:f5:19:
3d:54:8b:1d:19:4c:80:f7:e4:87:23:f8:02:de:07:
c0:90:98:f7:21:a9:8c:9b:ce:a7:f2:52:9c:b1:e8:
e9:2a:58:e3:ce:91:fb:02:b0:24:5e:35:c7:9b:de:
37:c0:68:7e:f6:1c:c4:fa:a2:3a:41:79:c5:03:e6:
70:5d:6c:db:24:9c:2f:f9:f2:78:ab:b5:2d:98:28:
69:cb:70:69:be:0a:f5:e8:9e:ab:0f:51:e8:59:2c:
a7:fa:b7:4a:ea:ab:f3:51:bc:e0:f5:68:5d:1a:5d:
e6:8d:3f:6e:b6:b3:9b:de:d8:d8:34:e0:f4:43:49:
0b:d9:90:27:10:c6:d4:98:57:43:3b:a3:29:84:ea:
e4:79:d1:c4:d6:aa:b0:8e:f5:69:6b:88:df:28:f6:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:06:A2:F3:55:06:81:F2:CF:6D:07:ED:72:2C:B7:8C:63:24:3B:02
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/3gai81UGgfLPbQftciy3jGMkOwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:ef:11:ca:c7:0e:2d:47:a1:58:62:1d:19:86:ca:03:a6:aa:
f0:97:41:d3:eb:97:ee:52:6d:53:53:2f:82:3c:8c:60:ed:e4:
58:bc:40:bf:e0:4e:62:45:72:ee:b5:de:6f:7d:b4:fd:24:2e:
cd:f8:e8:15:fd:ab:40:ef:d7:dd:28:b7:d8:b7:10:c5:39:96:
6f:15:b5:cd:1c:37:a2:d5:e2:b0:35:c2:a9:73:25:38:5f:b4:
7f:39:ca:6a:33:79:39:e7:f1:c3:78:34:5c:80:d6:ab:40:90:
51:19:da:99:00:ff:13:eb:37:fd:1d:d2:01:7a:db:2f:d9:23:
7f:ef:ea:2f:e9:b2:b8:08:4a:17:1e:83:c4:56:5f:4d:b0:97:
68:f8:23:bd:f8:d4:e7:90:46:30:be:69:94:c1:7b:be:4f:cf:
17:8b:7f:da:67:72:9c:73:61:96:a3:a1:26:d4:ca:03:be:3f:
10:e5:6c:c1:1a:a9:72:ef:ac:2c:2a:0e:78:ce:a7:ed:5b:84:
ad:58:68:b5:eb:dd:d5:2d:75:89:f6:31:49:45:15:e4:ff:bd:
a6:7a:48:8c:d8:d8:1c:af:7c:5d:31:87:45:84:5b:50:2d:63:
32:1f:ab:a2:8e:87:d2:66:43:53:d5:04:90:8e:55:04:e2:e4:
14:31:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:23 2026 by rpki-client