Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/c3XF_SjoSQek7z3cHzTjtI8Fokw.roa
File: c3XF_SjoSQek7z3cHzTjtI8Fokw.roa (raw, json)
Hash identifier: GXkDc6xHm9kftP5OkfDlpQPmVp8Ugz9fWlEAUF00Quc=
Subject key identifier: 73:75:C5:FD:28:E8:49:07:A4:EF:3D:DC:1F:34:E3:B4:8F:05:A2:4C
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019ED2066B5C01788A6F68C94021768573EA
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/c3XF_SjoSQek7z3cHzTjtI8Fokw.roa
Signing time: Tue 16 Jun 2026 20:01:36 +0000
ROA not before: Tue 16 Jun 2026 20:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219481
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:06:6b:5c:01:78:8a:6f:68:c9:40:21:76:85:73:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 16 20:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7375c5fd28e84907a4ef3ddc1f34e3b48f05a24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:a2:f4:f2:85:93:18:e2:21:ac:17:ab:45:
98:21:69:c4:12:ad:d9:5c:19:8e:02:2b:7a:16:ab:
12:f4:ba:d4:f1:24:da:b9:37:83:8d:3f:fc:e2:d5:
1b:07:17:58:a7:11:34:34:2c:16:38:c3:5b:16:5d:
12:04:7b:22:3a:4e:11:b4:79:3e:b3:80:e9:3e:03:
d9:8c:46:5b:b5:ae:43:82:e9:8c:1a:84:3b:8a:70:
c2:57:23:9e:15:05:7c:40:68:3c:bb:a5:67:15:5d:
49:0a:73:56:4e:9a:e2:5f:9b:9b:d4:41:7c:5e:96:
b4:e7:2c:81:1d:91:b1:67:94:fa:06:b2:15:9f:c4:
2b:7f:1c:53:8f:8b:85:4e:cb:b0:a9:99:b1:e3:7c:
fc:01:5b:a4:ef:1d:33:9c:cb:41:22:13:08:43:b0:
d5:a7:70:2c:7b:ae:92:15:89:a7:e8:e9:a3:45:c3:
1e:5a:59:52:d7:16:01:c5:24:cc:df:31:f7:a0:d6:
31:23:42:39:7d:d8:69:e1:85:6e:90:79:56:94:80:
c8:02:a0:73:24:6e:84:67:d6:3a:af:10:f2:1d:44:
23:6b:18:ef:e8:ed:0a:bf:8b:72:ad:c7:d8:a8:f1:
22:80:1c:2f:3d:28:ba:73:01:ba:d5:ec:73:03:a5:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:75:C5:FD:28:E8:49:07:A4:EF:3D:DC:1F:34:E3:B4:8F:05:A2:4C
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/c3XF_SjoSQek7z3cHzTjtI8Fokw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:20:12:4d:d5:6d:f3:7f:92:65:bd:40:ae:d9:0d:07:a3:01:
54:eb:ef:14:c1:af:b5:a2:aa:cc:0d:f5:ab:2b:38:38:1f:0b:
63:44:68:83:72:d2:6c:a5:16:1f:bb:5f:9a:17:2b:65:0b:fe:
c7:1e:9f:aa:b7:9e:c7:d2:4f:da:06:dc:c0:cb:12:39:ab:85:
dc:72:d4:36:3e:83:50:07:74:e0:6b:28:8e:c4:3c:ba:b4:44:
6d:dc:b2:91:b6:12:c9:46:7f:88:b9:30:73:2f:af:3b:98:b9:
4d:9e:ba:05:1d:51:82:fb:af:cb:eb:ba:7b:64:9c:8a:43:67:
25:77:6e:cf:90:da:58:b2:05:43:8e:70:eb:3f:25:37:e2:f3:
c4:23:78:c9:d8:2d:d2:cb:ad:99:c2:3f:98:ca:34:fe:6d:76:
15:a8:32:26:cf:a8:cb:a0:8d:b3:9d:8e:f6:86:73:ab:6d:a3:
4e:24:77:0b:42:a4:9e:8c:b7:b9:f0:ad:a9:53:d8:4f:e6:f4:
72:2c:80:9b:1f:a1:c7:58:d5:51:e4:88:98:4d:f1:66:ec:86:
73:88:88:09:d0:35:20:2c:b7:f7:78:e1:9e:bb:5c:4d:10:f0:
af:94:7d:76:76:61:1f:9f:c1:80:d2:8f:5d:42:41:31:2f:fa:
f2:5b:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:08:14 2026 by rpki-client