Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ru0_3NDOl86gYPSlVCdGuegyidk.roa
File: ru0_3NDOl86gYPSlVCdGuegyidk.roa (raw, json)
Hash identifier: FadD8JITUr9vffUiSHO92yQ0svt1O66Z6S1J5wnXeFM=
Subject key identifier: AE:ED:3F:DC:D0:CE:97:CE:A0:60:F4:A5:54:27:46:B9:E8:32:89:D9
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019FA8AEC79A7A8A7E7FC5CF515130636AFC
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ru0_3NDOl86gYPSlVCdGuegyidk.roa
Signing time: Tue 28 Jul 2026 12:24:14 +0000
ROA not before: Tue 28 Jul 2026 12:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214290
IP address blocks: 176.28.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:ae:c7:9a:7a:8a:7e:7f:c5:cf:51:51:30:63:6a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jul 28 12:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeed3fdcd0ce97cea060f4a5542746b9e83289d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:71:58:a2:40:15:ba:99:bb:57:46:3a:5f:
54:56:72:66:d5:a9:47:ad:b3:17:37:9f:e7:27:55:
6f:c8:13:1a:ec:44:b5:45:9e:a2:ac:a6:08:8b:36:
70:38:f8:93:d6:7b:93:33:93:52:6d:d0:5c:96:c3:
f9:f3:d3:81:f8:d4:3b:2f:e6:63:0e:55:9e:3c:ff:
d2:c2:eb:29:74:06:0c:b4:28:f3:5c:40:f2:b4:4e:
c0:a2:3b:35:31:b1:a2:8d:21:5b:3d:b1:6f:d3:85:
5d:e7:b3:4f:86:c7:1a:ac:97:54:f9:8e:01:c3:f2:
ea:94:fb:93:ae:cc:09:47:a0:3f:f5:d3:d7:56:f9:
77:97:b8:82:21:a1:fe:99:fd:fd:0d:a7:92:2c:e6:
21:31:39:00:83:4b:54:e1:cb:88:89:7e:d9:fc:1e:
dd:7c:35:5a:7f:d7:ad:85:60:48:3d:33:b0:9f:4b:
34:d8:58:67:f1:73:64:17:5d:0c:46:cf:bf:63:7e:
aa:08:51:64:5d:0a:0e:fb:90:02:bf:59:88:d1:88:
d4:51:1e:10:77:1a:04:74:d8:4f:96:ae:07:73:01:
87:68:af:1f:f1:41:5f:ad:bc:d7:31:0c:42:34:10:
52:49:8d:51:cf:b9:cd:30:ff:4c:3e:e5:61:dd:a1:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:3F:DC:D0:CE:97:CE:A0:60:F4:A5:54:27:46:B9:E8:32:89:D9
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ru0_3NDOl86gYPSlVCdGuegyidk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.28.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:43:70:9b:93:cb:5e:63:d1:5a:8a:b7:d9:da:e8:ed:6f:53:
0e:07:43:c3:e5:4b:bf:83:f2:c2:e2:2f:8f:50:ab:02:4d:03:
56:18:a9:ee:4f:dc:29:b3:25:49:1a:93:43:57:df:26:ef:c5:
e5:56:f7:b6:99:8f:73:b8:1c:c4:93:99:9e:5a:f2:e8:dc:43:
db:00:13:e6:0f:f4:b7:f7:d0:9d:9d:71:6a:e3:27:b2:f4:75:
03:88:84:f4:9f:33:be:47:33:04:5b:8c:cb:ca:e8:58:ed:50:
41:0d:e5:a4:f6:e3:6c:c2:e4:ce:4f:db:37:ce:d0:bf:db:95:
5b:62:fc:59:7f:c6:57:b3:90:5d:ab:ff:02:d6:34:72:50:19:
c6:27:cf:65:8f:7c:db:de:0d:33:61:ff:70:64:fb:c0:18:04:
e9:48:68:4c:91:ef:ae:d7:ea:ae:4e:f1:4b:11:87:46:55:9d:
a9:06:40:2a:df:05:1b:fb:8d:93:25:b2:d0:58:17:6f:4f:32:
84:be:fc:c4:12:43:38:94:ec:ef:79:e0:a2:45:d0:e8:ab:39:
7b:13:68:fb:fa:d3:a8:9a:80:56:e6:df:d4:63:4a:67:96:60:
b9:b2:9a:37:b0:88:93:13:63:fa:f9:ad:ae:f9:b1:4e:13:ad:
76:7b:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:37 2026 by rpki-client