Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa
File: 3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa (raw, json)
Hash identifier: wiSgmKaOMIcmWFd8GaxGj7Vm+74phyS4WrLi0VpoF/I=
Subject key identifier: DE:B9:30:AF:3C:6A:05:5D:C7:62:17:71:22:A1:5A:F1:59:3E:7D:E2
Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315
Certificate serial: 019EBC3AD04BC8DCFDD04E337B3DFBCAFAA2
Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa
Signing time: Fri 12 Jun 2026 14:27:11 +0000
ROA not before: Fri 12 Jun 2026 14:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 65.87.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:3a:d0:4b:c8:dc:fd:d0:4e:33:7b:3d:fb:ca:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315
Validity
Not Before: Jun 12 14:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=deb930af3c6a055dc762177122a15af1593e7de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:e1:40:66:ad:02:4a:f7:3c:e9:d4:16:ef:
67:16:e2:c6:e6:0d:bc:ac:74:51:e3:eb:61:b2:1f:
ec:5a:28:54:a1:23:cb:55:27:c2:08:c1:19:dd:85:
dd:f0:f7:19:63:73:4a:78:1f:94:e2:1a:eb:1c:40:
67:9a:45:d1:9c:b5:c6:b3:bc:c0:76:99:a7:5e:22:
31:f8:fa:db:8c:15:3a:64:bc:39:d0:d3:22:5a:1a:
37:ac:59:8c:37:1f:73:e8:72:a7:51:c2:a6:f9:1a:
c2:08:89:0e:ad:80:61:de:5c:31:87:71:5e:ea:8a:
c0:0c:53:63:ca:d7:d1:2a:97:5d:42:84:39:17:78:
b0:e8:9b:b1:6e:bc:83:99:63:4b:3f:8f:36:bb:75:
ce:73:22:0a:90:83:d8:3d:f3:1d:db:8e:0e:16:05:
1a:2b:7a:0e:0c:8c:10:a2:c7:af:2d:fe:a3:2b:1b:
57:6b:fb:d4:a4:4d:24:4f:55:e4:29:81:dd:88:10:
a1:8b:7f:9f:64:1f:13:19:92:95:ac:98:bc:23:d2:
b2:ce:d4:9e:43:51:7f:00:7a:51:85:d3:08:cc:1f:
7a:f8:13:b9:33:02:6e:93:d6:17:6f:ed:89:92:46:
e5:a7:d4:07:e8:06:67:b1:85:24:89:3a:bb:4e:71:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:30:AF:3C:6A:05:5D:C7:62:17:71:22:A1:5A:F1:59:3E:7D:E2
X509v3 Authority Key Identifier:
keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/3rkwrzxqBV3HYhdxIqFa8Vk-feI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1e:70:71:26:11:0d:f7:bd:b7:da:19:2c:a5:fb:0f:2f:21:
1d:e4:a3:ab:63:9e:24:bf:c1:c1:19:34:1b:3e:de:71:aa:23:
80:9b:2d:39:be:c9:b7:92:24:a6:68:4b:63:c5:b1:39:7a:ef:
e2:d3:87:cb:49:63:11:57:98:65:42:af:bf:5e:48:be:dd:1b:
8c:15:a7:58:c4:10:69:8b:c9:63:19:44:5f:35:32:27:48:5b:
da:d2:c8:64:e6:df:bd:5d:72:d0:d7:98:06:65:7b:14:8a:03:
ff:d7:34:a4:a0:1c:61:0a:1d:8b:74:b7:41:5b:ea:6e:ef:bf:
e7:6e:22:fc:2b:00:52:83:41:18:26:d1:b4:72:98:8f:70:55:
2d:36:68:56:22:3a:ea:af:89:5d:ac:ca:7d:23:e0:3f:be:98:
f6:8e:55:cb:c4:cf:66:c1:23:aa:1e:6b:74:cd:d2:a2:a7:44:
b0:14:12:32:a5:7c:fb:cd:26:a1:5a:b8:a8:ad:ff:8e:ed:85:
14:98:6c:9c:3d:be:49:9d:67:4e:ed:38:9f:2a:54:1f:2c:9c:
88:81:3a:14:72:6b:d2:b6:fb:02:73:09:8f:09:7a:4d:2b:ba:
05:bf:06:56:e4:4c:50:72:a8:36:86:7b:df:8f:68:55:10:5f:
a9:ae:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:50 2026 by rpki-client