Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/3dGXQaAN8gyj0pfiUomGURLr8Gk.roa
File: 3dGXQaAN8gyj0pfiUomGURLr8Gk.roa (raw, json)
Hash identifier: 29zMKU+zr2s5hhxmBkhcbzVqYD9Bjs33k2kXOnQbPmk=
Subject key identifier: DD:D1:97:41:A0:0D:F2:0C:A3:D2:97:E2:52:89:86:51:12:EB:F0:69
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01A09935AEE71EC6AD0DDDE2E8DB5A8886AB
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/3dGXQaAN8gyj0pfiUomGURLr8Gk.roa
Signing time: Sun 13 Sep 2026 05:20:27 +0000
ROA not before: Sun 13 Sep 2026 05:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2001:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:35:ae:e7:1e:c6:ad:0d:dd:e2:e8:db:5a:88:86:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Sep 13 05:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddd19741a00df20ca3d297e25289865112ebf069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:a4:07:70:5f:66:85:58:9f:03:ec:51:15:
7f:dc:ad:a7:b2:9c:04:1e:86:7e:d9:ad:38:69:52:
20:b9:31:6c:aa:30:00:17:86:8b:35:ee:dc:5f:32:
20:5a:b3:83:39:d5:ab:b7:66:07:18:91:05:e3:d5:
18:e9:41:9e:ae:f0:f6:c6:26:7b:6c:8d:b9:d2:50:
45:cb:15:87:42:b5:31:36:53:b3:3a:4a:be:ed:dd:
83:74:96:ca:d9:62:af:13:cd:80:5c:38:ce:77:11:
d4:7a:e7:ee:87:4a:83:79:d3:f2:1e:4b:67:5c:50:
5b:5a:f0:46:8b:a8:e8:de:4f:68:68:4c:92:d6:04:
5d:76:99:4c:3f:b9:e0:66:20:d5:3d:16:1a:74:d1:
c9:f8:59:dc:55:99:46:d7:47:95:ae:40:20:0a:a1:
0e:c4:fb:36:6e:cc:31:bc:8f:96:6a:fc:2b:96:08:
ce:41:ac:e5:24:c3:3a:3d:f9:f0:49:b1:05:95:c5:
0a:05:43:21:f7:24:c3:9a:e3:78:af:c2:99:92:aa:
2b:4f:f7:e1:70:33:5c:86:70:f1:e9:84:28:14:63:
98:05:12:16:e6:99:99:11:a2:4c:b6:30:20:61:af:
e2:68:56:16:b5:2d:40:11:ba:94:e3:67:46:6c:30:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:97:41:A0:0D:F2:0C:A3:D2:97:E2:52:89:86:51:12:EB:F0:69
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/3dGXQaAN8gyj0pfiUomGURLr8Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3580::/29
Signature Algorithm: sha256WithRSAEncryption
0c:18:23:1e:15:fc:b7:54:f2:16:c9:25:ef:fe:24:f8:a0:be:
b7:02:cd:5a:db:00:3d:e4:69:5a:0a:80:6d:88:16:b5:29:bb:
90:f0:44:e3:da:34:7a:48:c3:1b:ff:d3:43:2c:e5:aa:08:9d:
d9:a5:90:43:a3:ab:6e:bd:a8:2c:04:9d:97:9a:30:d2:31:ef:
bd:ed:ff:20:04:9f:99:ee:e7:d8:fa:bd:6c:13:78:31:6b:5d:
7f:6a:df:52:ba:3b:8b:63:9c:74:af:16:7e:f1:7f:f0:42:5d:
82:74:14:c4:a4:22:87:2d:b7:0d:31:62:2e:98:02:61:5e:52:
f0:ee:6c:97:a5:f6:4b:59:24:bb:ed:57:62:53:43:1b:c0:d7:
d1:bc:f3:a3:13:21:05:fc:76:19:b6:c4:8f:a6:22:4a:93:c9:
38:f9:f5:c4:06:42:38:67:d9:7e:26:7e:ce:b8:6b:5d:86:ca:
12:b0:f9:9c:45:e1:a1:3b:e1:b5:9b:12:a9:69:29:43:24:0e:
83:57:82:59:7a:bf:54:1a:9f:46:f4:bc:1d:73:7c:76:27:c4:
3c:13:60:a9:20:21:fe:94:0b:bc:5c:3f:69:24:80:26:db:00:
b8:f7:3d:1b:4f:0b:ee:41:a8:e8:ab:da:0f:b4:27:29:33:66:
ec:35:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:28 2026 by rpki-client