Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/df7iaJQLWuMKkjAOiXAC6Z4nko8.roa
File: df7iaJQLWuMKkjAOiXAC6Z4nko8.roa (raw, json)
Hash identifier: C/7lssJNPjMIGGjDfXe7RzVQ6k3TBnKs7T8bCHpVh1s=
Subject key identifier: 75:FE:E2:68:94:0B:5A:E3:0A:92:30:0E:89:70:02:E9:9E:27:92:8F
Certificate issuer: /CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Certificate serial: 01A043214830375AD1332DD74CB49C420304
Authority key identifier: 3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/df7iaJQLWuMKkjAOiXAC6Z4nko8.roa
Signing time: Thu 27 Aug 2026 12:10:49 +0000
ROA not before: Thu 27 Aug 2026 12:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a0a:7a80::/48 maxlen: 48
2a0a:7a80:1::/48 maxlen: 48
2a0a:7a80:2::/48 maxlen: 48
2a0a:7a80:3::/48 maxlen: 48
2a0a:7a80:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:21:48:30:37:5a:d1:33:2d:d7:4c:b4:9c:42:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af4fded7e10bbeaf4b4300b0403f0cec252c95e
Validity
Not Before: Aug 27 12:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75fee268940b5ae30a92300e897002e99e27928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:7b:cf:34:06:d7:6f:aa:90:e6:5e:59:43:
8f:df:88:4b:78:fb:a0:63:df:31:26:59:fb:2e:c5:
55:b2:ad:73:7a:2e:0c:6a:f8:64:94:99:be:78:94:
d0:7f:a3:a5:3e:09:02:dc:38:dc:81:2a:f8:fb:ae:
0e:0d:95:de:64:6f:94:87:7b:23:77:5a:69:68:9b:
ac:db:5e:3d:2a:a2:bf:84:b4:69:34:6c:f0:58:31:
9c:20:5b:0d:19:95:79:a6:0e:56:83:44:c6:d4:c6:
29:e6:d3:c0:8f:65:b2:b3:ca:55:f9:d7:79:34:04:
a6:a6:dc:41:0f:d3:21:eb:73:b4:ce:cc:a2:e8:7b:
09:50:2f:3a:54:4b:ff:ad:0c:39:b7:ca:7c:59:fa:
2e:6e:6a:4c:7c:e3:4f:4c:3b:f9:35:9e:77:d0:a0:
5d:55:ee:93:8c:b9:23:63:ed:be:dc:7f:9e:52:9e:
03:83:c8:74:bc:09:4d:c7:a1:3a:85:1c:c8:27:6d:
cd:0c:ae:b1:3e:7c:bd:4c:2c:46:64:ba:4e:f4:58:
11:71:d1:69:ba:55:a9:9a:ff:c9:b0:a3:23:e4:d5:
ee:d2:33:ab:8a:00:b2:31:fe:da:47:02:1e:b8:ac:
15:a6:c5:c8:ee:a6:e3:5d:fe:8e:0f:47:0e:d3:5f:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:E2:68:94:0B:5A:E3:0A:92:30:0E:89:70:02:E9:9E:27:92:8F
X509v3 Authority Key Identifier:
keyid:3A:F4:FD:ED:7E:10:BB:EA:F4:B4:30:0B:04:03:F0:CE:C2:52:C9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvT97X4Qu-r0tDALBAPwzsJSyV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/df7iaJQLWuMKkjAOiXAC6Z4nko8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29837c-2ba7-40c4-860f-ffebe559027c/1/OvT97X4Qu-r0tDALBAPwzsJSyV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7a80::/46
2a0a:7a80:100::/48
Signature Algorithm: sha256WithRSAEncryption
53:f7:a2:5d:19:83:96:40:ab:ab:60:63:22:97:2e:bc:ce:fd:
f3:c0:77:dc:ed:d4:58:11:1b:5d:69:e0:b4:3c:37:ab:27:ce:
98:41:8b:7e:ef:ef:cb:02:9d:38:cc:59:85:14:7d:36:b8:91:
2f:44:e0:4a:c1:0b:ae:92:79:d2:da:3f:60:1d:06:0c:a0:92:
74:ec:4e:fc:a7:08:51:f6:8b:4a:a9:a4:d2:83:73:51:a8:a7:
8b:ac:7b:ec:28:56:00:1e:d5:cf:cc:db:67:94:7c:2b:84:d0:
52:a0:ac:4f:db:1f:56:a2:f5:44:0d:70:61:e2:4c:31:2e:f6:
b3:57:ac:74:20:2c:0b:7d:97:11:f5:35:05:d4:21:1f:44:11:
c6:0a:19:dd:5f:f6:06:a7:65:ef:0b:f3:da:94:51:7f:51:cd:
a0:b2:55:bc:ca:98:72:ef:b4:31:1e:d5:0f:d0:e0:e2:d9:b7:
98:59:9f:c5:34:9a:42:14:38:b7:7e:d9:e9:ab:19:23:5a:2f:
45:ac:ea:d1:b2:ec:d7:6a:92:6c:38:6f:1c:32:05:ee:4b:75:
4c:9d:81:df:30:5c:82:32:8c:76:d4:42:0d:ec:9c:fd:bb:85:
15:5b:24:b7:ae:1b:17:85:b8:bb:71:e5:4c:c5:a4:b5:e8:f7:
70:e4:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:55 2026 by rpki-client