Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n3qL0U5O59kTYO8i_VapSoASKmc.roa
File: n3qL0U5O59kTYO8i_VapSoASKmc.roa (raw, json)
Hash identifier: tsbQUSxeZLoxmMggAB9U1UA5AvqgQHEoy4fl+w478ME=
Subject key identifier: 9F:7A:8B:D1:4E:4E:E7:D9:13:60:EF:22:FD:56:A9:4A:80:12:2A:67
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019C8F06659B30B318D3EA5C83BD06A3AB12
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n3qL0U5O59kTYO8i_VapSoASKmc.roa
Signing time: Tue 24 Feb 2026 09:41:26 +0000
ROA not before: Tue 24 Feb 2026 09:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274268
IP address blocks: 5.56.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:06:65:9b:30:b3:18:d3:ea:5c:83:bd:06:a3:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Feb 24 09:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7a8bd14e4ee7d91360ef22fd56a94a80122a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:3f:47:b5:72:c3:82:7e:9c:8c:d4:07:a4:
d7:ff:ec:14:4b:e6:1b:ea:8b:31:8d:c7:23:ec:c5:
e4:7f:2c:8e:16:45:01:99:02:6c:2f:2b:d8:9d:4c:
88:36:a0:a7:e0:5b:53:c2:f1:81:81:1c:88:b1:59:
fe:2b:d6:5a:96:cd:11:0e:22:81:57:fc:03:1b:a6:
9d:c8:76:f0:f0:a3:a4:9d:7e:0d:60:a9:fa:b6:fd:
56:fe:b7:a1:3a:5a:73:58:46:3e:4f:b4:35:a6:2c:
26:16:43:c6:6a:21:c7:a4:f4:af:ce:26:66:a4:b6:
5c:82:bb:ed:c7:a9:d1:1a:d4:1f:85:f6:aa:92:36:
da:37:0f:95:a8:85:9f:47:07:1b:ac:82:d0:8c:5c:
73:3d:58:87:fc:ae:40:8a:87:58:38:81:bc:bd:a7:
7d:73:71:79:55:ef:e2:b3:66:ea:2d:7a:f0:03:25:
e1:74:0c:41:e8:46:69:cf:d7:99:cc:ed:e6:c1:6c:
b4:21:6d:62:16:96:94:cb:c3:1d:5c:e4:4a:f0:7e:
5e:05:9d:ac:c4:a6:c8:4b:99:a2:bc:5b:43:f4:7d:
70:51:1d:99:8c:23:6f:1b:07:48:d4:96:1e:96:6e:
ca:af:78:da:4a:9d:70:5d:8a:87:94:29:17:67:64:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:8B:D1:4E:4E:E7:D9:13:60:EF:22:FD:56:A9:4A:80:12:2A:67
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/n3qL0U5O59kTYO8i_VapSoASKmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:13:62:b3:86:98:c0:5b:74:bd:ff:c1:24:53:56:7f:8a:e8:
7a:36:04:45:ca:8a:f4:55:d9:bf:89:cf:75:a5:f7:cd:79:88:
a9:90:c5:2f:ae:e1:65:66:dc:dc:be:52:70:6d:6e:3f:64:7f:
f7:b4:c8:9d:a1:2d:95:ec:66:37:16:e9:d2:5f:92:f7:20:fb:
c0:c1:8e:59:39:11:b3:fb:15:a7:9d:68:3f:1a:f0:23:5d:5c:
b8:c0:f5:6e:17:c9:b4:2b:07:a3:41:61:e8:01:1a:b5:ba:fe:
0d:a0:72:82:82:0d:61:d4:1a:6a:1f:77:6a:71:50:7d:ed:31:
ba:5e:76:dd:2c:76:ec:0e:ff:6c:79:c1:60:38:9f:5f:4b:29:
09:5b:15:2b:65:c7:bd:bd:45:ec:97:e9:6a:c0:3a:da:00:3e:
49:14:7d:12:d8:94:8b:ba:6b:a2:14:d4:07:07:33:e0:ad:d6:
84:9d:32:41:6f:eb:a0:4b:ca:0e:11:63:49:68:f5:03:a9:88:
04:4d:a1:0d:48:11:b6:fe:c8:7f:95:f3:16:64:6b:42:c0:3a:
cf:53:6e:7f:7b:e8:4b:c5:08:3f:49:0a:68:fa:92:ae:3c:58:
59:04:03:14:9a:b2:51:72:25:56:17:32:81:74:64:2d:fa:c8:
50:5d:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:18:32 2026 by rpki-client