Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/bF4AIoJbZesIwX86iDSdyGssluQ.roa
File: bF4AIoJbZesIwX86iDSdyGssluQ.roa (raw, json)
Hash identifier: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=
Subject key identifier: 6C:5E:00:22:82:5B:65:EB:08:C1:7F:3A:88:34:9D:C8:6B:2C:96:E4
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 019C9E6AD32CD6A52A0FCBB6CAF62B8B3591
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/bF4AIoJbZesIwX86iDSdyGssluQ.roa
Signing time: Fri 27 Feb 2026 09:25:26 +0000
ROA not before: Fri 27 Feb 2026 09:25:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213839
IP address blocks: 2a0a:3e45:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:6a:d3:2c:d6:a5:2a:0f:cb:b6:ca:f6:2b:8b:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Feb 27 09:25:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c5e0022825b65eb08c17f3a88349dc86b2c96e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:2e:c6:6b:90:85:f4:a4:57:ed:3a:ed:80:
52:61:3f:01:82:5f:60:7f:39:7c:c4:f9:57:61:2d:
96:ae:d5:6a:32:65:d3:4e:95:0d:99:ef:0e:b4:4a:
f8:bd:80:30:05:ca:1f:70:07:c7:8b:d9:66:40:02:
c5:80:38:a0:d8:ee:8e:45:0b:1f:b1:70:89:4e:b7:
d1:92:89:f7:f5:84:5f:a7:cf:94:cb:e0:45:cf:63:
d9:18:74:68:58:d7:dc:f5:f5:9b:e4:1a:9e:0f:26:
b8:4c:84:cd:b9:fa:cd:e2:05:ee:5b:c1:c3:46:eb:
cd:f6:d0:d2:03:e9:7c:8d:ec:7b:83:fb:ea:b2:16:
dc:08:99:18:2c:9d:52:9f:64:e7:34:a1:cc:43:ac:
0e:1e:cc:ac:57:06:d0:67:ec:d4:a3:f3:0a:8a:6c:
37:a2:57:f3:9b:d0:27:60:89:d4:7a:f3:6a:f1:50:
6b:4e:76:66:7f:75:76:99:e5:56:a6:9e:a4:ce:98:
ac:20:5d:16:4d:10:aa:b4:d1:4f:ba:8f:49:45:3b:
0f:07:37:53:53:6d:87:e8:42:bc:06:e6:89:75:70:
00:0e:a8:7f:b9:03:4a:9c:75:15:0d:8a:bc:fe:49:
0f:56:83:0a:00:24:1c:5a:3a:d6:db:ae:63:14:62:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:00:22:82:5B:65:EB:08:C1:7F:3A:88:34:9D:C8:6B:2C:96:E4
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/bF4AIoJbZesIwX86iDSdyGssluQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45:200::/40
Signature Algorithm: sha256WithRSAEncryption
c3:98:a3:a7:36:61:15:e4:ee:6a:8e:b7:c7:da:21:72:10:73:
56:94:38:0a:e2:ba:d6:a8:9f:9a:4e:51:5f:ac:2c:b7:57:dd:
86:aa:3e:bd:4d:d4:8a:48:60:49:21:fc:08:29:a1:0e:09:77:
db:1b:34:33:8c:ab:26:f0:3d:fa:b9:65:ff:15:fd:c1:fe:07:
09:d1:75:b6:98:40:8a:ed:63:93:95:c5:a0:fc:b4:79:37:0b:
23:24:57:34:e9:be:fa:4d:28:da:2d:35:1c:2a:95:76:a9:a7:
8b:1b:6b:ce:97:8b:10:77:7f:cc:30:d4:c2:c6:02:bb:d4:78:
70:92:b6:d3:f3:75:8f:82:1c:8b:f9:72:12:cc:e1:de:d0:5a:
db:59:cc:87:20:28:74:2c:f1:99:01:c0:a4:08:e1:6c:10:35:
7d:80:0b:f6:4f:87:8b:3c:34:7c:41:60:07:8d:65:6f:e3:4e:
82:6d:3e:6f:49:96:c8:8c:41:2c:43:22:9b:22:c8:d7:99:b0:
61:cd:f0:53:44:d1:3c:f1:fd:53:51:af:4b:cd:77:13:12:87:
f6:cc:59:ba:18:1e:c1:97:22:e8:f8:67:72:e3:94:73:12:4c:
2a:a8:a3:8c:07:0c:e9:67:1b:03:a2:a4:9d:f5:d5:cb:c4:29:
9c:12:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:12:29 2026 by rpki-client