Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/3k7FbVwhmyQLuAj9pPe4WjPFPlo.roa
File: 3k7FbVwhmyQLuAj9pPe4WjPFPlo.roa (raw, json)
Hash identifier: O6sRXL4a8MdMFVOkKhZtZjs9oQiB3OUE5r6W391+yms=
Subject key identifier: DE:4E:C5:6D:5C:21:9B:24:0B:B8:08:FD:A4:F7:B8:5A:33:C5:3E:5A
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019CCBDE43E38BE9FE301F4A2CC6E25FAE21
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/3k7FbVwhmyQLuAj9pPe4WjPFPlo.roa
Signing time: Sun 08 Mar 2026 05:14:26 +0000
ROA not before: Sun 08 Mar 2026 05:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152913
IP address blocks: 185.241.40.0/22 maxlen: 24
209.33.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cb:de:43:e3:8b:e9:fe:30:1f:4a:2c:c6:e2:5f:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Mar 8 05:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de4ec56d5c219b240bb808fda4f7b85a33c53e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:60:ad:12:72:45:fc:d8:d3:45:2c:0a:a8:
30:64:eb:68:43:67:65:6b:35:73:26:fa:9c:dc:82:
c4:3e:5c:5e:6b:a1:62:bd:ad:8d:af:49:f8:b8:8e:
9f:8c:29:71:91:e3:0f:90:78:1e:59:05:20:7e:74:
f9:4d:31:c6:4f:d1:15:d1:3c:fb:aa:49:cc:26:29:
f1:09:2c:bc:0a:85:69:0f:72:59:22:05:e2:04:9f:
97:d6:49:2a:0e:32:37:7a:48:31:95:6a:83:58:3a:
56:58:41:b9:f1:3e:b8:67:22:fb:c1:e1:d9:62:50:
d7:37:91:c2:8d:4a:66:cb:57:86:80:73:08:65:d5:
c5:50:a4:e6:48:5d:ae:c5:c6:87:6e:cb:2a:e4:c3:
7d:7e:2b:d5:d5:26:c7:91:2d:c5:30:ca:74:c9:07:
3f:b8:d6:26:1f:8f:e7:fb:96:1b:f9:22:90:4c:43:
7f:9c:05:7a:f9:af:45:c5:5a:6e:bb:68:27:fe:66:
36:0d:e7:f0:a4:c6:a1:44:cc:90:c8:3a:0c:ff:57:
bf:f4:df:1e:f4:b5:a5:54:c5:7d:07:70:54:21:00:
1d:f5:3d:ce:f5:c2:af:81:34:a4:77:33:f3:9f:89:
31:0a:0e:12:bf:7f:77:d2:21:6e:1c:12:2e:7a:41:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:C5:6D:5C:21:9B:24:0B:B8:08:FD:A4:F7:B8:5A:33:C5:3E:5A
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/3k7FbVwhmyQLuAj9pPe4WjPFPlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.40.0/22
209.33.160.0/20
Signature Algorithm: sha256WithRSAEncryption
e0:0f:75:d0:f0:ad:78:ee:e6:1f:78:ea:e2:b8:44:9e:52:7c:
8c:34:53:b8:eb:be:e5:b1:78:13:50:9a:9a:85:4a:6c:67:ef:
f7:56:c2:d6:80:9e:16:9c:01:29:96:a4:65:00:bf:31:3b:70:
f6:f9:bd:ab:83:0a:0b:44:6d:59:f9:ff:35:67:29:ba:16:65:
87:41:ee:0d:8b:17:2e:88:fb:e9:d4:80:eb:50:fd:2d:40:bb:
ce:20:1b:90:e3:8b:82:29:8d:35:e9:ba:46:be:03:70:7e:96:
c2:0a:58:ec:b6:08:3c:5f:5f:03:2a:a9:47:c8:a3:f8:c1:4c:
50:6a:b0:f3:9f:a6:f0:b8:73:ca:2b:86:53:42:fd:de:fb:14:
0c:fb:2a:a4:12:81:d9:81:4c:06:65:85:a6:93:d8:92:b8:91:
4a:d6:c3:67:07:45:50:ab:32:d4:c0:d1:27:26:d7:13:47:09:
a8:4f:67:40:8d:23:cb:38:92:0f:32:b5:49:82:dd:f1:ba:43:
2f:cd:0b:fa:fb:95:af:4f:a9:53:76:bf:17:c1:76:94:2c:01:
d1:44:6c:4d:bd:c7:c4:a0:4f:4e:a5:38:0e:1e:44:0a:20:ce:
fa:5f:d8:89:c9:63:84:54:9a:14:e0:63:53:45:85:e4:2c:e2:
fd:ba:44:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZzL3kPji+n+MB9KLMbiX64hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjYwMzA4MDUxNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTRlYzU2ZDVjMjE5YjI0MGJiODA4ZmRhNGY3Yjg1YTMzYzUzZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQxgrRJyRfzY00UsCqgwZOtoQ2dl
azVzJvqc3ILEPlxea6Fiva2Nr0n4uI6fjClxkeMPkHgeWQUgfnT5TTHGT9EV0Tz7
qknMJinxCSy8CoVpD3JZIgXiBJ+X1kkqDjI3ekgxlWqDWDpWWEG58T64ZyL7weHZ
YlDXN5HCjUpmy1eGgHMIZdXFUKTmSF2uxcaHbssq5MN9fivV1SbHkS3FMMp0yQc/
uNYmH4/n+5Yb+SKQTEN/nAV6+a9FxVpuu2gn/mY2DefwpMahRMyQyDoM/1e/9N8e
9LWlVMV9B3BUIQAd9T3O9cKvgTSkdzPzn4kxCg4Sv3930iFuHBIuekFAyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN5OxW1cIZskC7gI/aT3uFozxT5aMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvM2s3RmJWd2hteVFMdUFqOXBQZTRXalBGUGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCufEoAwQE
0SGgMA0GCSqGSIb3DQEBCwUAA4IBAQDgD3XQ8K147uYfeOriuESeUnyMNFO4677l
sXgTUJqahUpsZ+/3VsLWgJ4WnAEplqRlAL8xO3D2+b2rgwoLRG1Z+f81Zym6FmWH
Qe4NixcuiPvp1IDrUP0tQLvOIBuQ44uCKY016bpGvgNwfpbCCljstgg8X18DKqlH
yKP4wUxQarDzn6bwuHPKK4ZTQv3e+xQM+yqkEoHZgUwGZYWmk9iSuJFK1sNnB0VQ
qzLUwNEnJtcTRwmoT2dAjSPLOJIPMrVJgt3xukMvzQv6+5WvT6lTdr8XwXaULAHR
RGxNvcfEoE9OpTgOHkQKIM76X9iJyWOEVJoU4GNTRYXkLOL9ukTq
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:01 2026 by rpki-client