Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/3Pw-xMjHFEa_DJc-t87_PbjL4Zc.roa
File: 3Pw-xMjHFEa_DJc-t87_PbjL4Zc.roa (raw, json)
Hash identifier: zTfhFfaMlLmlyAUqgXotDKaMObFvyNT/uKROeyD9mjE=
Subject key identifier: DC:FC:3E:C4:C8:C7:14:46:BF:0C:97:3E:B7:CE:FF:3D:B8:CB:E1:97
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019F990D025B3EE1ABD6B7148B0B4218A29E
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/3Pw-xMjHFEa_DJc-t87_PbjL4Zc.roa
Signing time: Sat 25 Jul 2026 11:33:14 +0000
ROA not before: Sat 25 Jul 2026 11:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3180::/29 maxlen: 29
2001:3380::/29 maxlen: 29
2a0e:a780::/29 maxlen: 32
2a10:6c40::/29 maxlen: 32
2a10:9600::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:bfc0::/32 maxlen: 32
2a13:d2c0::/32 maxlen: 32
2a13:d2c4::/32 maxlen: 32
2a13:d2c6::/32 maxlen: 32
2a13:d2c7::/32 maxlen: 32
2a13:ddc0::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:6b40::/29 maxlen: 29
2a14:6bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:0d:02:5b:3e:e1:ab:d6:b7:14:8b:0b:42:18:a2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 25 11:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcfc3ec4c8c71446bf0c973eb7ceff3db8cbe197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:71:76:88:30:44:13:89:c7:6e:1e:e9:12:
1e:7c:28:a2:a9:fc:3d:4e:1f:80:14:29:24:3b:57:
a0:b1:da:f1:ae:f2:7f:37:37:91:d5:47:f3:f6:1b:
b3:59:ea:89:b4:3e:ec:48:d4:eb:ce:ce:34:a9:c8:
2f:c6:d9:c8:cb:7a:d4:41:26:af:70:3a:9f:32:b3:
f0:11:7c:ef:e8:68:31:5f:35:06:85:e2:d4:15:19:
a5:f9:23:7e:46:08:b5:a6:bc:dd:15:ec:ff:83:89:
7e:5f:3f:64:36:b7:23:58:97:74:29:6c:0b:81:0c:
37:72:be:19:bf:43:59:e7:b1:2f:01:01:0e:0f:79:
47:fe:8b:ee:19:1b:eb:5d:29:b9:8c:31:7d:47:06:
35:75:e8:31:e2:27:ce:15:a0:b4:22:d1:73:53:b6:
62:c4:40:6f:05:3c:31:11:2c:57:c3:63:02:fe:b3:
f7:2d:a8:a1:4a:f9:b0:c6:ee:dd:ab:9d:1f:42:50:
6c:6c:e3:78:4b:d8:d0:e6:ef:a0:b1:71:9e:74:fb:
ac:4a:bd:cc:53:77:33:af:0e:c7:c3:9a:36:b0:34:
df:5d:10:f1:d2:10:90:a2:61:0b:e0:1f:e7:63:f6:
de:5a:2f:be:b2:89:70:83:fb:6b:e1:04:8c:bb:62:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:3E:C4:C8:C7:14:46:BF:0C:97:3E:B7:CE:FF:3D:B8:CB:E1:97
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/3Pw-xMjHFEa_DJc-t87_PbjL4Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
2001:3380::/29
2a0e:a780::/29
2a10:6c40::/29
2a10:9600::/29
2a13:b840::/29
2a13:bfc0::/32
2a13:d2c0::/32
2a13:d2c4::/32
2a13:d2c6::/31
2a13:ddc0::/29
2a14:6ac0::/29
2a14:6b40::/29
2a14:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
00:5e:fa:57:8d:d3:b0:ef:04:91:96:0c:f3:4f:06:2b:51:75:
2d:b1:01:ec:22:63:74:9b:8d:d4:44:37:08:ab:a3:a3:02:29:
26:93:ef:c1:64:6b:ee:c2:f7:65:59:9d:ab:01:c5:01:e3:b3:
56:d0:8e:96:52:ea:55:02:5b:14:93:2c:f5:be:7e:1f:da:f6:
76:72:9e:c4:92:3b:6e:ba:2f:0d:7a:18:42:2f:61:24:3d:fe:
5c:88:fe:90:5e:36:cf:86:22:bc:a6:fa:ba:9d:b6:16:7e:98:
a3:10:c9:a4:00:67:2e:c7:a6:b4:1b:b2:64:cc:98:0f:28:d5:
27:d3:61:ec:73:bc:ec:53:aa:a4:cf:24:df:59:e4:04:1c:1a:
63:15:f9:e2:5e:db:c7:69:c9:2d:3e:fb:62:34:3a:21:f1:4c:
77:ef:7b:f3:3b:e4:5b:52:3c:a3:a3:a5:09:dd:33:ee:48:1e:
05:a0:f7:f2:b3:2a:44:da:ee:90:7b:1f:d0:bf:5e:b0:9a:5d:
d9:6b:24:3c:41:af:63:5e:29:f3:af:b7:e7:49:dc:32:49:77:
6e:c4:82:66:ec:69:a1:8f:66:a6:be:fa:39:7e:32:bc:74:9e:
a6:33:13:fa:d0:98:5f:e1:1e:7b:cd:b1:33:ad:84:61:da:05:
de:20:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:11 2026 by rpki-client