Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/3v7_pd6AxduDKiF3xKgJGqymEqk.roa
File: 3v7_pd6AxduDKiF3xKgJGqymEqk.roa (raw, json)
Hash identifier: g+W/JVcPBEoaHA81/G0plL5WOD+5LjCl2XGzLzB5NuI=
Subject key identifier: DE:FE:FF:A5:DE:80:C5:DB:83:2A:21:77:C4:A8:09:1A:AC:A6:12:A9
Certificate issuer: /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial: 019F9033FED35C9B9990DE3035466DCBBD56
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/3v7_pd6AxduDKiF3xKgJGqymEqk.roa
Signing time: Thu 23 Jul 2026 18:19:14 +0000
ROA not before: Thu 23 Jul 2026 18:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12971
IP address blocks: 195.110.192.0/19 maxlen: 19
195.110.192.0/20 maxlen: 20
195.110.208.0/24 maxlen: 24
195.110.209.0/24 maxlen: 24
195.110.210.0/23 maxlen: 23
195.110.212.0/22 maxlen: 22
195.110.216.0/22 maxlen: 22
195.110.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:33:fe:d3:5c:9b:99:90:de:30:35:46:6d:cb:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Validity
Not Before: Jul 23 18:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=defeffa5de80c5db832a2177c4a8091aaca612a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:83:80:ae:61:4a:b3:2d:31:26:e1:ec:7c:
c7:0e:39:97:6f:a2:a8:af:c9:0a:21:aa:fa:b1:dd:
8c:d5:f5:24:19:50:78:57:2a:8f:8d:69:d5:d5:d8:
4f:5c:6c:32:b2:5f:6a:15:46:fa:2b:4c:4b:e9:ee:
3b:fb:f9:a1:d0:85:8c:e6:bd:7c:c7:c7:eb:2f:be:
25:6e:e7:76:23:86:f7:da:05:ca:0d:43:5c:43:17:
1e:ad:4e:91:00:f6:64:ce:9f:2b:ee:d0:74:7f:14:
8f:6b:14:c8:0c:36:d2:5b:cc:ab:05:9c:33:01:d2:
ec:5f:de:98:03:08:16:18:cb:ed:17:12:43:04:12:
33:e8:de:56:08:1b:7b:05:42:de:f6:4f:1d:d7:da:
28:4b:b7:d6:51:d7:27:50:8a:a4:62:e8:c5:18:8b:
b5:1f:1f:37:6d:5d:ae:6b:0c:b3:c9:fc:f1:41:76:
b5:a9:c7:06:5e:90:78:f7:f4:4b:ac:1a:a5:4c:08:
81:b3:15:1f:18:2a:c0:f4:af:32:d4:b2:92:41:04:
33:4e:d4:5a:ae:5a:45:58:31:05:ea:77:be:f1:4d:
df:1b:05:a4:fb:c1:54:7b:4e:77:31:05:01:ed:d3:
8d:f5:17:4e:9b:3d:7e:ae:19:06:31:56:2f:26:46:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:FF:A5:DE:80:C5:DB:83:2A:21:77:C4:A8:09:1A:AC:A6:12:A9
X509v3 Authority Key Identifier:
keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/3v7_pd6AxduDKiF3xKgJGqymEqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.192.0/19
Signature Algorithm: sha256WithRSAEncryption
90:a0:5e:33:54:82:35:19:32:21:5a:21:d4:f7:4b:1b:cf:2d:
d3:8c:b1:db:8d:c6:ef:5e:94:e5:53:df:e0:23:f8:c0:47:27:
85:c6:30:59:b3:c7:82:ce:6f:b6:06:f2:62:ea:11:0e:ab:d1:
6c:c9:cd:df:9b:ac:da:45:b5:4c:e5:e5:cb:83:4b:9c:4f:69:
15:58:92:dd:5a:3e:02:77:e6:4a:ab:bb:88:88:79:ae:9a:19:
18:3d:25:41:38:0e:b4:3e:9d:96:69:d2:10:f9:3d:4f:b9:5b:
83:ff:fc:13:fe:7e:be:e9:e6:74:49:65:61:63:d6:3f:1b:1b:
c9:7f:54:0c:4d:5f:83:2e:18:68:87:da:36:ef:56:24:d7:da:
9f:4c:96:78:28:f0:f0:57:27:d6:85:ad:5f:08:0d:26:97:a2:
da:48:6b:89:f4:cd:6f:da:a0:32:b8:0b:26:ae:78:f0:d0:a2:
ad:f0:e2:6d:9f:ec:9c:8b:8c:e8:77:2e:52:f0:5d:58:b0:6b:
32:a3:ac:ec:c4:f8:94:07:68:0b:b9:44:af:98:14:1f:1a:ea:
f6:e0:b8:84:57:98:49:bf:d8:a2:b3:7e:6d:1e:3b:de:5e:36:
f7:af:cb:2b:d4:34:3a:07:17:5f:ca:fc:6d:db:43:9a:e9:1e:
0c:af:22:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+QM/7TXJuZkN4wNUZty71WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDc1Yzg0ZjUyOWM4N2RkODVmZDRhZmVhNGUwOTM0MzY2
YWY1NGEwHhcNMjYwNzIzMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWZlZmZhNWRlODBjNWRiODMyYTIxNzdjNGE4MDkxYWFjYTYxMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO+DgK5hSrMtMSbh7HzHDjmXb6Ko
r8kKIar6sd2M1fUkGVB4VyqPjWnV1dhPXGwysl9qFUb6K0xL6e47+/mh0IWM5r18
x8frL74lbud2I4b32gXKDUNcQxcerU6RAPZkzp8r7tB0fxSPaxTIDDbSW8yrBZwz
AdLsX96YAwgWGMvtFxJDBBIz6N5WCBt7BULe9k8d19ooS7fWUdcnUIqkYujFGIu1
Hx83bV2uawyzyfzxQXa1qccGXpB49/RLrBqlTAiBsxUfGCrA9K8y1LKSQQQzTtRa
rlpFWDEF6ne+8U3fGwWk+8FUe053MQUB7dON9RdOmz1+rhkGMVYvJkan9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7+/6XegMXbgyohd8SoCRqsphKpMB8GA1UdIwQY
MBaAFNIHXIT1Kch92F/Ur+pOCTQ2avVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTkt
YjRlYWEwNTYxZmM3LzEvM3Y3X3BkNkF4ZHVES2lGM3hLZ0pHcXltRXFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lZWZhNzItOGY0Yy00ODZjLWIwMTktYjRlYWEwNTYxZmM3
LzEvMGdkY2hQVXB5SDNZWDlTdjZrNEpORFpxOVVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw27AMA0G
CSqGSIb3DQEBCwUAA4IBAQCQoF4zVII1GTIhWiHU90sbzy3TjLHbjcbvXpTlU9/g
I/jARyeFxjBZs8eCzm+2BvJi6hEOq9Fsyc3fm6zaRbVM5eXLg0ucT2kVWJLdWj4C
d+ZKq7uIiHmumhkYPSVBOA60Pp2WadIQ+T1PuVuD//wT/n6+6eZ0SWVhY9Y/GxvJ
f1QMTV+DLhhoh9o271Yk19qfTJZ4KPDwVyfWha1fCA0ml6LaSGuJ9M1v2qAyuAsm
rnjw0KKt8OJtn+yci4zody5S8F1YsGsyo6zsxPiUB2gLuUSvmBQfGur24LiEV5hJ
v9iis35tHjveXjb3r8sr1DQ6Bxdfyvxt20Oa6R4MryL8
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:15 2026 by rpki-client