Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/3MMMGshhscEgulI14fb6J99Eo_s.roa
File: 3MMMGshhscEgulI14fb6J99Eo_s.roa (raw, json)
Hash identifier: G/JjT7AwdgSVF27o9D8WRmeWK0qxg60WOrdOIzV2kzw=
Subject key identifier: DC:C3:0C:1A:C8:61:B1:C1:20:BA:52:35:E1:F6:FA:27:DF:44:A3:FB
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 019DAF0C377E7C902DEE0325EAF36FD26A72
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/3MMMGshhscEgulI14fb6J99Eo_s.roa
Signing time: Tue 21 Apr 2026 07:58:26 +0000
ROA not before: Tue 21 Apr 2026 07:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 45.85.120.0/24 maxlen: 24
45.85.123.0/24 maxlen: 24
109.205.189.0/24 maxlen: 24
146.19.131.0/24 maxlen: 24
178.212.137.0/24 maxlen: 24
194.63.144.0/24 maxlen: 24
194.147.218.0/24 maxlen: 24
213.239.152.0/24 maxlen: 24
213.239.153.0/24 maxlen: 24
217.180.23.0/24 maxlen: 24
2a11:6a00::/48 maxlen: 48
2a12:2780::/48 maxlen: 48
2a12:8200::/48 maxlen: 48
2a12:ab00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:0c:37:7e:7c:90:2d:ee:03:25:ea:f3:6f:d2:6a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Apr 21 07:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcc30c1ac861b1c120ba5235e1f6fa27df44a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:8d:9a:27:4d:bb:2b:a2:66:75:f3:fe:a2:
76:d2:1d:d9:93:6e:68:d5:f9:fe:44:96:6c:62:c5:
1c:f0:f0:cf:ac:6b:ba:e5:d3:3f:26:04:9a:5b:19:
3c:56:fe:65:d2:de:0f:e0:a2:8f:ce:ec:83:3d:fd:
6d:69:5a:2b:d2:57:19:1d:e1:92:f9:bd:61:6d:11:
c6:a9:66:73:60:fa:3d:67:05:8e:8b:d1:a7:87:24:
29:2a:b2:c4:5b:80:dc:fa:1d:42:d1:f5:bc:51:e1:
1f:9a:97:a8:d8:d8:26:dd:f8:b3:83:7a:6f:d7:7c:
7f:40:08:91:02:5f:be:35:dc:22:f9:87:63:4c:6f:
72:17:5f:22:6e:5c:38:a8:b4:70:d5:00:7f:0c:9b:
16:ee:82:77:b3:95:f4:bf:80:7e:70:09:a4:7d:59:
10:e8:13:64:90:6c:0b:d2:99:fe:37:39:4b:6c:a4:
86:9e:d7:f5:02:23:1a:a0:b8:9e:29:ac:c5:f2:36:
03:c9:00:58:48:f1:f9:2f:50:8d:d9:83:a5:ee:42:
a4:2b:c4:3b:33:e1:e6:58:50:e7:f8:46:37:4d:8a:
73:d8:2f:46:ae:97:dd:3e:32:0b:9a:55:58:aa:ae:
41:49:ed:bd:8f:1d:a5:6a:e5:5e:61:c7:93:55:01:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:0C:1A:C8:61:B1:C1:20:BA:52:35:E1:F6:FA:27:DF:44:A3:FB
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/3MMMGshhscEgulI14fb6J99Eo_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.120.0/24
45.85.123.0/24
109.205.189.0/24
146.19.131.0/24
178.212.137.0/24
194.63.144.0/24
194.147.218.0/24
213.239.152.0/23
217.180.23.0/24
IPv6:
2a11:6a00::/48
2a12:2780::/48
2a12:8200::/48
2a12:ab00::/48
Signature Algorithm: sha256WithRSAEncryption
47:9a:54:d9:35:68:5f:50:b7:35:5b:27:7e:b2:4b:e8:56:b3:
be:4e:30:6a:ae:71:e6:4f:6b:54:a3:c0:a1:33:1c:3b:22:08:
20:83:56:35:31:44:19:81:f3:20:76:fd:0c:00:0e:71:b6:7f:
f7:12:b5:b8:0a:d9:6b:d2:3c:5d:18:1d:47:85:46:2e:d5:4a:
7b:fb:4a:a8:08:59:43:8b:61:a8:46:60:3b:8c:14:1c:37:2c:
a1:0d:84:3f:94:a1:38:35:b7:3d:4b:2b:0b:65:39:a9:ed:7e:
0d:4b:fb:76:61:0a:cc:ef:20:1d:e0:7b:69:e5:be:2d:27:8d:
10:11:36:53:d0:da:f0:a4:e5:5c:da:fd:0a:6e:d0:b1:c6:4c:
da:83:2d:43:a4:0a:1e:57:1a:35:14:44:ad:a0:4d:8b:3f:f3:
e1:31:a2:fa:46:3d:41:53:14:89:7e:a0:41:3f:32:18:ff:9c:
14:f2:1c:98:d5:09:9a:c1:c2:c3:06:b7:0e:8e:a2:b6:5d:95:
cb:79:d4:44:ba:de:3c:9f:d9:10:d8:ba:15:28:70:0e:9d:36:
53:ac:97:ca:f4:c9:43:c9:f6:69:a9:f9:be:66:b7:2b:d1:95:
42:69:5a:e5:20:52:6c:7d:01:9e:e1:85:ce:30:84:80:de:3b:
ce:34:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:17 2026 by rpki-client