Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3O7puYCGeaoochmZgK1F4Zova0c.roa
File: 3O7puYCGeaoochmZgK1F4Zova0c.roa (raw, json)
Hash identifier: 8cczSVzGE4DlrK+JwupGLwa2lh+V3J3LsQk0x1uHZOY=
Subject key identifier: DC:EE:E9:B9:80:86:79:AA:28:72:19:99:80:AD:45:E1:9A:2F:6B:47
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019D816E90F08A0C003B60560A4A1F1ED9C8
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3O7puYCGeaoochmZgK1F4Zova0c.roa
Signing time: Sun 12 Apr 2026 11:23:20 +0000
ROA not before: Sun 12 Apr 2026 11:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0f:63c0::/29 maxlen: 29
2a10:3e80::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a13:5040::/29 maxlen: 29
2a13:be40::/32 maxlen: 32
2a13:be41::/32 maxlen: 32
2a13:be42::/32 maxlen: 32
2a13:be44::/32 maxlen: 32
2a13:be45::/32 maxlen: 32
2a13:be46::/32 maxlen: 32
2a13:be47::/32 maxlen: 32
2a13:bec0::/29 maxlen: 29
2a13:d0c0::/29 maxlen: 29
2a13:d140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 13:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:6e:90:f0:8a:0c:00:3b:60:56:0a:4a:1f:1e:d9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 12 11:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dceee9b9808679aa2872199980ad45e19a2f6b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:31:00:0f:22:ef:2b:74:ae:54:be:24:62:
4e:bd:85:c7:18:90:bb:ee:45:a4:0a:e2:44:94:1f:
8d:15:26:f1:55:6c:96:aa:cc:7a:61:40:16:9f:cd:
3d:43:f4:35:99:d6:72:d5:ff:cc:c1:7a:14:2a:ab:
98:42:ba:47:71:d2:52:51:c6:b2:6b:b3:31:cf:b9:
70:e0:f1:3c:a6:7f:97:de:30:89:13:24:38:5e:f5:
95:b8:81:15:76:64:b7:8c:f8:d2:4e:76:96:12:d8:
22:0b:12:f9:b1:3c:0e:8e:c4:a5:69:e2:b3:99:b4:
b1:c2:0f:05:b4:83:74:ba:fe:e1:49:28:65:78:6a:
f9:c1:2c:0b:95:23:4f:3f:67:9a:f5:c6:69:43:43:
c9:c1:25:9f:1c:e1:3d:94:27:56:56:4e:59:1e:75:
74:01:d6:bf:ea:01:74:48:c1:ff:af:8b:bd:de:3a:
a1:63:6a:78:f8:a3:46:8e:0f:df:80:46:e2:ad:13:
1b:6d:78:0e:5a:0c:dd:95:70:25:e9:a1:c9:27:37:
64:85:00:81:89:b5:d6:14:d9:1e:79:47:c5:81:15:
c3:bb:0e:59:9c:87:29:6a:55:21:a3:f6:85:9d:bf:
98:48:36:66:e1:ae:0d:36:c7:bd:36:d3:30:72:bc:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:E9:B9:80:86:79:AA:28:72:19:99:80:AD:45:E1:9A:2F:6B:47
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/3O7puYCGeaoochmZgK1F4Zova0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:63c0::/29
2a10:3e80::/29
2a10:7ac0::/29
2a10:a9c0::/29
2a13:5040::/29
2a13:be40::-2a13:be42:ffff:ffff:ffff:ffff:ffff:ffff
2a13:be44::/30
2a13:bec0::/29
2a13:d0c0::/29
2a13:d140::/29
Signature Algorithm: sha256WithRSAEncryption
cc:7e:ec:f8:e4:85:d6:be:42:e1:70:52:5b:cb:58:50:e7:2a:
a6:90:52:45:60:b0:15:3a:5a:d7:1f:b4:32:69:0c:50:0e:e9:
22:d4:c9:2d:31:37:cc:a6:2b:02:04:57:69:82:fa:7e:80:81:
ac:01:bd:2b:0f:b4:0c:7e:0a:9c:ac:79:71:1b:9b:5d:c6:b2:
ab:ec:1d:e0:9d:52:de:03:aa:5b:04:4f:45:8f:4b:ad:20:7f:
54:f2:a0:d3:98:df:7f:71:4e:fd:b2:64:47:98:33:4d:c1:92:
d6:13:ec:51:35:9a:cc:ae:c9:57:c1:45:be:e8:b5:41:a8:45:
b7:a5:90:de:f5:53:46:23:f4:fb:be:86:26:ad:24:f7:75:85:
77:35:92:c8:8d:18:7a:f8:17:59:84:41:c8:3c:95:da:72:f1:
42:77:02:c5:33:e8:f2:f7:67:79:a0:f9:ee:e2:28:a8:78:51:
33:bb:cf:af:21:ee:28:7d:0d:ec:24:6f:4c:8d:57:57:81:b0:
b3:ff:8a:8c:87:30:78:78:87:f3:73:3d:a8:9b:78:45:3d:b0:
e0:b7:23:83:59:28:26:b6:33:97:b7:ec:16:11:8e:16:0c:83:
7f:48:60:d7:50:0c:a1:ad:cd:58:dc:b8:53:da:55:7b:dd:7d:
e8:2b:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:54 2026 by rpki-client