Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa
File: 3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa (raw, json)
Hash identifier: 0vj83vMIqnpXNhmG4mayWQ/wJnUNYY8OdPbnu2KwES4=
Subject key identifier: DC:04:81:E7:30:AB:0D:E9:99:29:20:2C:D1:9C:7D:93:61:7F:73:C1
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019C2A12ADC00B3F16666A7ED92A9C1D1A22
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa
Signing time: Wed 04 Feb 2026 19:13:13 +0000
ROA not before: Wed 04 Feb 2026 19:13:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 2a01:ecc0:2c1::/48 maxlen: 48
2a01:ecc0:340::/42 maxlen: 42
2a01:ecc0:380::/42 maxlen: 42
2a01:ecc0:3c0::/42 maxlen: 42
2a01:ecc0:400::/42 maxlen: 42
2a01:ecc0:440::/42 maxlen: 42
2a01:ecc0:480::/42 maxlen: 42
2a01:ecc0:4c0::/42 maxlen: 42
2a01:ecc0:500::/42 maxlen: 42
2a01:ecc0:540::/42 maxlen: 42
2a01:ecc0:a00::/40 maxlen: 42
2a01:ecc0:b00::/40 maxlen: 42
2a01:ecc0:c00::/39 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:12:ad:c0:0b:3f:16:66:6a:7e:d9:2a:9c:1d:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Feb 4 19:13:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc0481e730ab0de99929202cd19c7d93617f73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:5f:14:d7:d7:ee:0e:84:3e:d0:b7:cc:2e:
16:3f:f6:ac:a6:50:1f:36:e3:f2:03:2f:80:f4:34:
a7:e2:47:f2:c2:1c:41:60:5d:39:25:a3:3b:4a:7c:
93:1d:bf:0e:d3:65:d1:be:94:88:3c:73:df:e9:c8:
d8:e8:4a:7c:64:46:27:15:ac:68:71:56:48:98:40:
65:17:fa:54:1b:ce:86:8a:5a:fc:7d:58:fe:2e:ee:
df:04:9a:cb:33:8b:dc:91:e8:f2:bd:5f:31:9f:82:
23:40:8c:b8:c3:f4:32:4c:2a:ab:be:c3:94:58:8f:
8a:1a:39:0c:f7:7d:21:7c:b4:e2:db:d8:a0:f8:84:
67:b2:de:97:ff:53:1c:f0:1f:1a:18:ca:1e:53:7e:
f3:76:79:6b:ea:09:37:45:1c:83:06:8a:43:f2:1b:
d1:50:6f:35:af:44:ed:3a:b5:82:fe:d9:74:af:83:
50:59:4d:9f:0f:d2:e7:9f:2c:52:b9:ad:24:ab:c1:
12:71:dd:ca:f6:e6:9d:10:2c:0e:a4:76:72:c9:6e:
99:a9:84:a0:e9:d9:f9:69:06:c2:23:d4:f9:6b:1f:
50:30:33:d6:44:bc:88:8a:6a:00:91:e7:e8:7f:86:
6b:92:51:a8:ce:ee:d0:67:d3:83:a7:94:b9:c8:92:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:81:E7:30:AB:0D:E9:99:29:20:2C:D1:9C:7D:93:61:7F:73:C1
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:2c1::/48
2a01:ecc0:340::-2a01:ecc0:57f:ffff:ffff:ffff:ffff:ffff
2a01:ecc0:a00::-2a01:ecc0:dff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:a3:0c:6c:a4:e8:a9:cc:25:51:4b:51:e3:70:21:d6:a4:e3:
39:e8:c3:14:6f:2f:a8:a4:53:8f:96:eb:27:d5:43:a7:f1:20:
e2:12:fa:3b:1a:4b:d0:4e:70:4c:cc:b7:4d:05:2a:a3:c1:9d:
93:86:48:c2:dc:b9:8b:f8:ee:d8:99:33:36:20:54:04:67:5a:
6f:03:5a:ac:cc:28:6b:89:3e:c9:2b:6d:0a:12:dc:86:d4:58:
be:d6:2f:ec:0a:13:db:9f:92:54:1d:bb:bd:af:89:f1:9d:5b:
cd:d6:c9:3a:ad:6e:a1:11:ee:e2:cb:64:e3:44:86:67:3e:65:
1b:be:87:b6:b5:4b:2d:c7:ea:cb:21:a6:ba:f4:b0:bc:66:8f:
fc:d7:77:d6:6c:ae:12:90:39:52:b1:bf:08:66:71:83:52:78:
4e:0b:4c:c1:f7:d2:94:a9:ea:4f:7a:eb:a2:68:59:d8:d8:82:
02:5b:19:89:d1:e7:87:be:bb:a1:75:61:a1:ef:6f:61:54:ba:
f2:df:dc:25:20:81:f7:d5:1c:df:71:b9:e3:fe:09:e2:c8:18:
14:68:b9:fb:35:ce:7c:a9:0c:02:84:f0:0b:35:b2:6e:98:b4:
c5:53:00:4b:cc:e9:01:ba:f6:b8:8d:b6:c8:7f:81:f3:85:1f:
69:6c:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:10:53 2026 by rpki-client