Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa
File: 3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa (raw, json)
Hash identifier: 37lpnBa4Nsmw9t09Qo02WLg5+MVXXnRKupYOqt10ZMk=
Subject key identifier: DC:BA:BD:C2:5F:BA:43:A2:27:00:28:F8:40:9B:C3:93:C2:1E:D9:9C
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019C000D7FBB53839E61FE2D1A20D647ED25
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa
Signing time: Tue 27 Jan 2026 15:23:30 +0000
ROA not before: Tue 27 Jan 2026 15:23:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 82.206.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:00:0d:7f:bb:53:83:9e:61:fe:2d:1a:20:d6:47:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Jan 27 15:23:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcbabdc25fba43a2270028f8409bc393c21ed99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:43:21:e7:b7:c8:43:d0:6c:70:57:5e:c5:
9e:88:95:7c:09:ba:2b:b3:1f:bf:bd:20:da:7d:91:
81:41:21:4b:ef:ce:6c:9a:21:37:aa:70:bc:e7:d5:
08:41:d1:33:82:4f:5f:48:09:9a:57:fe:d6:9e:cb:
35:02:b9:a2:b3:50:d0:6a:3b:a8:54:3d:02:15:a5:
b2:20:a6:42:02:a2:b9:26:42:52:7e:06:da:30:1b:
83:94:c5:44:4e:be:0e:2b:29:c7:4a:5e:b3:f5:91:
8e:e0:56:a5:5f:44:1a:15:04:ea:f3:31:ce:c0:7e:
31:96:26:de:2e:93:95:9c:c3:8e:e1:db:f3:1d:85:
a9:85:4b:0f:dd:ce:3c:85:1c:cd:25:38:50:58:6f:
68:56:d0:c8:b7:f8:c4:6a:8a:21:d4:78:b1:f7:49:
30:f1:50:62:91:82:e9:cc:2c:29:e2:6c:e6:ce:26:
d8:2d:14:8c:14:f0:24:ac:78:90:22:cf:91:65:e2:
45:a4:9c:11:b4:a2:3a:99:59:ca:1c:9c:c5:39:bd:
b5:11:de:f1:75:92:6a:a5:d0:8e:13:3e:53:ef:97:
90:89:53:c8:9a:cf:18:06:40:c9:cc:f6:bf:6c:08:
6c:1d:67:71:30:6e:1f:ac:79:6e:b9:7d:ac:b5:37:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:BD:C2:5F:BA:43:A2:27:00:28:F8:40:9B:C3:93:C2:1E:D9:9C
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/3Lq9wl-6Q6InACj4QJvDk8Ie2Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.72.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:2b:9b:4b:4c:99:43:9f:ed:3b:c1:55:35:6d:cb:76:ea:29:
38:d2:79:53:75:0d:c5:00:ee:37:bc:1b:f4:eb:76:c3:97:5d:
57:fe:87:34:f3:ac:9d:d0:41:bf:22:22:72:a1:f2:a5:f2:e7:
82:92:28:03:32:85:f5:1c:05:95:b8:d5:35:b0:38:5c:cb:ac:
2c:af:51:c3:28:c6:9f:04:4d:ae:9e:52:8e:92:7f:7f:5e:fb:
50:2d:48:f3:70:ee:7f:d2:dc:9a:a6:9f:5c:85:69:60:fa:7d:
b7:a4:41:9c:4f:48:a9:df:4d:25:93:cb:be:52:c9:dc:cb:07:
20:bb:ac:ba:cc:aa:e2:15:c4:22:f6:90:ed:96:dd:3e:84:86:
83:46:84:22:26:e1:78:fe:b3:44:9c:00:2d:0d:3f:72:7b:c8:
28:36:36:a7:f9:ff:89:83:73:57:9c:b5:f7:8e:2d:06:65:eb:
b7:01:34:30:ba:d8:44:cf:35:31:20:3f:b2:46:67:e1:14:e6:
a6:13:dc:92:31:f6:fc:98:27:06:f0:ff:e8:a5:5a:18:ce:02:
ab:3f:06:db:6b:b5:35:d9:68:83:22:66:6c:6d:16:f9:01:30:
79:ab:18:45:48:8e:dd:61:46:08:b0:5e:11:0e:0b:c1:09:f9:
2e:8c:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:21 2026 by rpki-client