Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_3MDT8Gy0-1_oi8AP5rLRwjHdsk.roa
File: _3MDT8Gy0-1_oi8AP5rLRwjHdsk.roa (raw, json)
Hash identifier: 4DO3O5i8TjpE42VVK4xk3/T857l7OoZi0oGhZQlmD2k=
Subject key identifier: FF:73:03:4F:C1:B2:D3:ED:7F:A2:2F:00:3F:9A:CB:47:08:C7:76:C9
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A1C0A1AEB2B11FDC91F874185818D29511
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_3MDT8Gy0-1_oi8AP5rLRwjHdsk.roa
Signing time: Mon 09 Nov 2026 14:06:23 +0000
ROA not before: Mon 09 Nov 2026 14:06:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218568
IP address blocks: 185.98.63.0/24 maxlen: 24
193.160.140.0/24 maxlen: 24
193.160.141.0/24 maxlen: 24
193.160.143.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:a1:ae:b2:b1:1f:dc:91:f8:74:18:58:18:d2:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Nov 9 14:06:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff73034fc1b2d3ed7fa22f003f9acb4708c776c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:ae:60:62:a6:4f:3c:d9:3a:f3:b4:b3:63:
c7:ae:f9:d3:b2:7e:c5:b6:87:3f:fe:3b:8e:1f:34:
a3:bb:fc:fa:7d:53:39:28:57:86:c4:6b:32:01:53:
a4:26:d4:e6:58:97:21:46:0f:f1:e7:39:98:3e:46:
2f:87:e2:75:16:25:b3:23:8f:45:78:41:7b:3c:11:
7e:50:e1:80:f9:e6:cd:03:40:12:9c:06:77:cb:32:
5b:48:d8:cd:bc:d3:e0:06:c9:21:31:70:53:b1:e1:
0a:2b:7d:22:95:d0:23:40:4f:cc:d7:b5:b1:4b:a1:
4f:06:6a:d8:e4:9b:66:ac:ec:9d:d4:3f:94:c1:2d:
0b:4e:45:0f:47:8d:23:98:0b:21:6d:f8:56:16:d8:
2e:56:53:8e:c3:47:66:c7:1e:1b:f7:c2:e2:67:a3:
52:08:22:d4:14:e3:c0:88:72:ec:e5:c5:c9:45:91:
58:e0:42:01:e1:a8:a6:f8:88:e4:11:d2:3c:a4:ff:
51:07:63:f7:9f:cc:de:64:45:14:3e:d2:ae:1e:4e:
cd:f0:6c:87:3c:ac:08:2e:34:42:2c:9c:f4:d7:5e:
40:69:09:3b:13:d2:13:49:01:c1:bb:44:0a:eb:ae:
d2:17:d7:c8:b2:6d:bd:bf:a1:b1:79:89:3e:d0:bc:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:73:03:4F:C1:B2:D3:ED:7F:A2:2F:00:3F:9A:CB:47:08:C7:76:C9
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/_3MDT8Gy0-1_oi8AP5rLRwjHdsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.63.0/24
193.160.140.0/23
193.160.143.0/24
193.223.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:46:84:82:b6:d7:b4:6a:23:8b:8f:99:b9:37:7f:d2:f7:0b:
a6:95:87:6a:0c:3b:14:4a:04:07:95:4d:50:3b:3a:06:64:a9:
37:dc:b3:48:a8:9c:c7:ce:f2:fa:b9:8e:e4:80:db:4a:0e:15:
89:78:d8:57:7a:68:22:ed:c1:59:24:e6:5c:82:63:66:fb:85:
a8:8c:5a:d4:9d:90:1b:97:48:88:b1:a8:80:5c:70:ce:41:9d:
21:d9:c6:28:24:1f:8c:27:37:46:48:f1:ca:66:aa:80:4b:17:
db:63:6a:04:5a:4d:62:72:e2:07:e0:9b:95:93:24:02:bc:bf:
47:18:1e:42:0e:fa:25:57:70:42:f6:65:80:16:77:ad:86:41:
a7:f1:c8:f3:b4:43:b4:cc:44:32:ef:16:37:b5:66:be:e2:26:
11:81:07:fa:d5:ba:dc:a9:07:45:ee:97:0e:3e:f2:7a:cf:66:
a4:00:a7:38:92:40:e0:c5:0c:32:c8:19:35:58:67:fd:14:36:
ff:a8:df:4c:14:3a:78:6b:fe:2e:d8:b5:a3:82:b3:45:eb:ff:
6a:7e:5b:f9:ef:95:f1:19:96:0a:10:d0:74:44:fb:00:73:63:
5b:59:2a:f8:50:fc:7d:1e:01:99:33:bd:81:9b:e1:ee:1f:c3:
77:fb:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:23 2026 by rpki-client