Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/3z2E0B-6Qfimxbr8mMwcWrvKa8w.roa
File: 3z2E0B-6Qfimxbr8mMwcWrvKa8w.roa (raw, json)
Hash identifier: PBmait2/VPYqqZlhx49/ypGsNPZylOrkMZEsz5efntc=
Subject key identifier: DF:3D:84:D0:1F:BA:41:F8:A6:C5:BA:FC:98:CC:1C:5A:BB:CA:6B:CC
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 019B7EA4A67FE1F991C29477B3C87E83ADB0
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/3z2E0B-6Qfimxbr8mMwcWrvKa8w.roa
Signing time: Fri 02 Jan 2026 12:17:58 +0000
ROA not before: Fri 02 Jan 2026 12:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215199
IP address blocks: 185.130.103.0/24 maxlen: 24
2a14:3140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a4:a6:7f:e1:f9:91:c2:94:77:b3:c8:7e:83:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Jan 2 12:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3d84d01fba41f8a6c5bafc98cc1c5abbca6bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:cf:2b:45:f7:ce:bb:45:d6:66:8c:2b:13:
83:7b:1d:d0:f5:31:af:a1:63:a2:d2:42:9f:59:64:
f4:96:df:dc:b6:aa:a7:d3:d5:96:8d:03:54:73:8d:
b0:55:2a:c2:25:3b:e9:5e:fd:bc:15:34:c0:09:9e:
de:1e:73:ca:fb:c0:2f:dc:35:46:4d:09:ee:8e:ea:
c4:98:71:f5:5c:bd:eb:b8:b0:e7:c5:cd:a6:6a:90:
e8:1e:62:27:82:0f:8d:0f:bc:62:cc:95:01:53:2f:
33:af:fb:10:be:2d:e2:87:12:9f:c9:17:28:c4:2f:
59:f1:95:b3:c1:66:a5:97:94:da:c6:4d:97:9e:63:
e5:1b:e5:6e:a5:aa:f3:2a:b6:cf:94:f3:f4:37:62:
77:40:8c:43:df:eb:1e:44:c5:e9:0a:05:1d:95:31:
c2:e9:ed:b9:da:8c:ca:99:5f:ce:e0:65:6e:b0:2f:
ff:11:d0:4e:bc:c5:4d:f2:8f:68:5c:6d:0b:ec:c7:
77:68:a2:69:46:b9:83:3b:67:bf:7d:49:39:e7:70:
cd:70:aa:67:ec:e9:9b:0a:07:c3:de:b7:b2:19:40:
d6:4a:f4:4f:f8:75:0d:a8:65:22:dc:e8:2e:64:a5:
9f:b4:8b:64:40:6f:4d:cd:92:1b:90:ff:3f:f5:c6:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3D:84:D0:1F:BA:41:F8:A6:C5:BA:FC:98:CC:1C:5A:BB:CA:6B:CC
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/3z2E0B-6Qfimxbr8mMwcWrvKa8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.103.0/24
IPv6:
2a14:3140::/29
Signature Algorithm: sha256WithRSAEncryption
a4:c0:52:62:cc:c4:2e:79:6c:e9:66:69:39:04:be:39:f2:07:
55:8e:42:e0:cf:f8:47:d7:6f:52:ba:f7:99:a9:a5:e1:c9:e1:
b7:b2:f1:7a:4f:da:f0:41:49:dc:fc:1a:06:8f:b4:47:4d:b2:
ed:70:6d:01:81:53:19:f5:b7:7d:f7:e4:a1:bb:19:44:26:48:
93:c4:f8:c8:46:5d:7a:c6:3c:83:93:0a:25:5f:56:fd:c2:9a:
56:80:be:85:46:ac:36:a7:6a:1c:4f:cf:cf:cf:5a:29:70:9e:
99:6f:36:4d:88:24:ad:54:42:78:5b:0e:73:91:28:4a:77:54:
02:59:3e:cc:1d:83:6b:e4:fa:4a:7b:a9:97:05:22:20:53:33:
c4:df:da:45:79:3d:55:3c:9a:11:7e:4e:4d:77:1a:48:47:96:
4b:93:f9:b1:90:aa:55:05:58:50:ca:b2:dc:76:3d:81:54:b1:
6a:ab:97:ac:df:4e:e1:8b:d9:46:0c:c2:3f:6f:af:e1:e8:23:
81:76:c4:0e:1c:56:60:af:58:0f:62:1e:2c:93:a5:01:42:ee:
da:e5:c0:ae:99:bd:13:e9:74:f8:ef:41:40:0a:a1:fd:d1:d0:
43:d5:06:1c:ac:90:82:d9:13:1a:4e:28:cb:a5:2c:54:c3:e6:
9e:f1:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:46 2026 by rpki-client