Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa
File: EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa (raw, json)
Hash identifier: Pj/MNI9vX2PM78P8r4xx/BcMGeXmStJFcOh545nj9ww=
Subject key identifier: 12:C3:F4:4E:7C:1C:21:1F:ED:A7:7E:A5:AD:EE:83:43:B8:DC:F4:B7
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 01A0242964D63B4666EB3154B90A3745AC77
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa
Signing time: Fri 21 Aug 2026 11:51:27 +0000
ROA not before: Fri 21 Aug 2026 11:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206805
IP address blocks: 45.84.152.0/23 maxlen: 24
45.84.154.0/24 maxlen: 24
45.84.155.0/24 maxlen: 24
45.145.188.0/23 maxlen: 23
45.145.190.0/23 maxlen: 23
45.145.190.0/24 maxlen: 24
45.145.191.0/24 maxlen: 24
80.85.248.0/23 maxlen: 23
80.85.250.0/23 maxlen: 23
80.85.252.0/24 maxlen: 24
80.85.253.0/24 maxlen: 24
80.85.254.0/23 maxlen: 24
130.49.133.0/24 maxlen: 24
130.49.134.0/24 maxlen: 24
176.119.0.0/21 maxlen: 21
178.159.32.0/23 maxlen: 24
185.159.111.0/24 maxlen: 24
185.228.48.0/22 maxlen: 24
185.247.192.0/22 maxlen: 24
188.64.149.0/24 maxlen: 24
188.64.150.0/23 maxlen: 24
193.19.100.0/23 maxlen: 24
193.141.230.0/23 maxlen: 23
193.142.20.0/23 maxlen: 23
193.246.144.0/24 maxlen: 24
193.246.150.0/24 maxlen: 24
193.246.153.0/24 maxlen: 24
193.246.159.0/24 maxlen: 24
203.81.208.0/20 maxlen: 24
2a0c:ee00::/32 maxlen: 40
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00:200::/40 maxlen: 40
2a0c:ee00:20c::/48 maxlen: 48
2a0c:ee00:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:29:64:d6:3b:46:66:eb:31:54:b9:0a:37:45:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Aug 21 11:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=12c3f44e7c1c211feda77ea5adee8343b8dcf4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:aa:f6:44:5f:94:90:79:59:fa:15:bc:6d:
3e:a9:63:a1:de:ea:52:aa:d0:a5:2e:ba:cd:4d:b8:
bb:58:05:92:a8:37:84:1b:7c:f6:4d:c6:61:c1:12:
37:ab:95:52:c2:d1:68:17:5d:5d:59:16:a6:cc:3d:
31:8e:fc:c2:59:82:4e:db:af:f6:00:8c:c6:a9:89:
b5:3d:14:49:85:45:92:10:99:4e:ed:47:fa:80:41:
c6:d6:80:03:7f:ca:e1:eb:38:04:3c:92:42:7f:52:
f7:22:39:b9:96:7a:cf:59:b4:65:1a:b9:6b:cf:84:
9f:76:52:bc:41:42:51:d9:9e:5f:10:15:a4:6c:79:
91:0a:07:f3:7f:18:46:bc:ce:92:07:45:f1:d1:2d:
c0:6c:3c:a6:54:62:f6:fb:86:72:5b:bf:01:bf:7e:
f1:a5:39:d4:c1:84:5c:98:18:b3:3f:9c:7c:83:26:
9a:3f:8f:89:91:6f:4b:e9:d3:8f:ed:8d:fd:66:71:
b2:b9:e3:36:60:71:d6:ac:34:a8:1f:04:bb:bb:f2:
ad:e0:95:58:ba:14:79:9a:a3:e5:3c:57:ca:b0:2c:
f5:e2:e6:b3:1c:72:4b:25:34:80:b4:bc:1a:57:47:
28:6d:e1:96:fb:a7:44:26:09:5f:69:0a:1e:d1:13:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:F4:4E:7C:1C:21:1F:ED:A7:7E:A5:AD:EE:83:43:B8:DC:F4:B7
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/22
80.85.248.0/21
130.49.133.0-130.49.134.255
176.119.0.0/21
178.159.32.0/23
185.159.111.0/24
185.228.48.0/22
185.247.192.0/22
188.64.149.0-188.64.151.255
193.19.100.0/23
193.141.230.0/23
193.142.20.0/23
193.246.144.0/24
193.246.150.0/24
193.246.153.0/24
193.246.159.0/24
203.81.208.0/20
IPv6:
2a0c:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
66:68:cc:d2:e5:7d:72:6b:5a:d4:44:63:72:2d:88:8e:f9:55:
fe:0c:b9:c5:9b:41:24:90:c7:fb:32:96:9d:d5:93:86:cc:93:
fc:b9:5a:0d:2c:a5:65:84:2f:50:38:7f:81:c8:84:64:0a:10:
ac:22:38:02:0d:14:d6:54:72:65:5c:68:2f:cc:31:3e:6b:2b:
24:6b:f5:33:d1:4c:49:09:69:86:48:60:23:95:2f:55:97:46:
65:b2:57:f6:36:89:e6:36:30:8f:4a:0b:39:3e:a4:c1:b7:aa:
10:dc:59:c6:19:d4:59:bf:03:02:7b:b5:7f:07:1a:94:27:61:
7a:03:b0:40:f9:ac:1c:18:0f:b7:d7:fd:a6:7d:44:60:dc:e7:
99:7b:43:09:dc:7b:57:a1:78:8b:3b:c2:dc:fa:55:eb:94:76:
30:3c:45:c4:73:ba:aa:5d:bd:23:5c:74:36:a3:f3:c3:59:f5:
cf:cc:0a:81:f8:d5:93:45:6d:30:c8:1c:6d:35:bc:22:d9:df:
c2:2b:09:d9:aa:25:22:53:73:a2:f7:03:50:23:2d:ae:6b:26:
b0:ed:84:c5:f2:67:30:a8:3e:28:84:3c:c6:ff:f4:73:b2:1b:
8d:cd:23:26:10:c5:44:f7:5e:0f:9f:8c:59:1b:22:39:c0:b9:
4a:3d:83:3e
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAaAkKWTWO0Zm6zFUuQo3Rax3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1
ZmRkMWQwHhcNMjYwODIxMTE1MTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmMzZjQ0ZTdjMWMyMTFmZWRhNzdlYTVhZGVlODM0M2I4ZGNmNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZiq9kRflJB5WfoVvG0+qWOh3upS
qtClLrrNTbi7WAWSqDeEG3z2TcZhwRI3q5VSwtFoF11dWRamzD0xjvzCWYJO26/2
AIzGqYm1PRRJhUWSEJlO7Uf6gEHG1oADf8rh6zgEPJJCf1L3Ijm5lnrPWbRlGrlr
z4SfdlK8QUJR2Z5fEBWkbHmRCgfzfxhGvM6SB0Xx0S3AbDymVGL2+4ZyW78Bv37x
pTnUwYRcmBizP5x8gyaaP4+JkW9L6dOP7Y39ZnGyueM2YHHWrDSoHwS7u/Kt4JVY
uhR5mqPlPFfKsCz14uazHHJLJTSAtLwaV0cobeGW+6dEJglfaQoe0RNRBwIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFBLD9E58HCEf7ad+pa3ug0O43PS3MB8GA1UdIwQY
MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt
MmQwYTc4YmU4OTJkLzEvRXNQMFRud2NJUl90cDM2bHJlNkRRN2pjOUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk
LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBggQCAAEwfAMEAi1U
mAMEAi2RvAMEA1BV+DAMAwQAgjGFAwQAgjGGAwQDsHcAAwQBsp8gAwQAuZ9vAwQC
ueQwAwQCuffAMAwDBAC8QJUDBAO8QJADBAHBE2QDBAHBjeYDBAHBjhQDBADB9pAD
BADB9pYDBADB9pkDBADB9p8DBATLUdAwDQQCAAIwBwMFACoM7gAwDQYJKoZIhvcN
AQELBQADggEBAGZozNLlfXJrWtREY3ItiI75Vf4MucWbQSSQx/sylp3Vk4bMk/y5
Wg0spWWEL1A4f4HIhGQKEKwiOAINFNZUcmVcaC/MMT5rKyRr9TPRTEkJaYZIYCOV
L1WXRmWyV/Y2ieY2MI9KCzk+pMG3qhDcWcYZ1Fm/AwJ7tX8HGpQnYXoDsED5rBwY
D7fX/aZ9RGDc55l7Qwnce1eheIs7wtz6VeuUdjA8RcRzuqpdvSNcdDaj88NZ9c/M
CoH41ZNFbTDIHG01vCLZ38IrCdmqJSJTc6L3A1AjLa5rJrDthMXyZzCoPiiEPMb/
9HOyG43NIyYQxUT3Xg+fjFkbIjnAuUo9gz4=
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:53:37 2026 by rpki-client