Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/3s2ZJUQAOdZQJN2QTpFD73M4leg.roa
File: 3s2ZJUQAOdZQJN2QTpFD73M4leg.roa (raw, json)
Hash identifier: +xm6BHzusOZzGKozAQdu+MZkDVhhL6TdcM7wkPQ8Ae0=
Subject key identifier: DE:CD:99:25:44:00:39:D6:50:24:DD:90:4E:91:43:EF:73:38:95:E8
Certificate issuer: /CN=263c9c5ee318264730976fafc7291533ebdab0ae
Certificate serial: 019F23682AD1381C30E303329076868A8155
Authority key identifier: 26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/3s2ZJUQAOdZQJN2QTpFD73M4leg.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34959
IP address blocks: 45.139.24.0/22 maxlen: 22
194.55.234.0/23 maxlen: 23
194.55.244.0/23 maxlen: 23
2a0f:1140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:d1:38:1c:30:e3:03:32:90:76:86:8a:81:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=263c9c5ee318264730976fafc7291533ebdab0ae
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=decd9925440039d65024dd904e9143ef733895e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:e3:3f:8c:c6:fb:04:f2:65:76:01:9c:60:
14:45:c1:42:42:d1:e5:4b:5e:ed:bc:ef:ae:f7:5d:
88:62:14:bd:6c:16:e2:64:17:ad:53:b1:b9:61:7d:
44:03:e6:f1:4e:a7:99:b8:35:aa:c0:cb:df:38:9d:
1e:1c:1c:e9:9a:74:eb:ad:7a:8d:77:19:92:5e:e0:
49:76:ea:5e:e4:3d:80:fb:57:25:e3:9c:de:e5:cf:
8c:27:dc:fd:6d:d7:b9:03:ac:b5:91:53:4f:35:88:
c7:1d:b0:4d:b5:60:36:87:fc:ec:ce:d3:3e:7a:55:
92:ee:0b:96:94:da:fa:74:ec:f9:65:2c:e6:c9:a4:
e6:d6:60:5b:e6:9a:22:77:13:f4:86:27:dc:c7:c3:
24:4f:30:d0:1f:ef:9e:44:51:bd:fe:2b:36:4c:93:
ea:16:e3:69:2b:3c:d2:00:a4:17:a8:6f:a0:55:fa:
e8:da:8e:db:c9:42:51:30:1a:ed:7b:e4:0d:d0:de:
46:b9:25:05:0b:95:23:f9:8c:a6:d8:19:24:6f:58:
1a:eb:3e:af:a5:54:8e:1c:59:35:b3:55:d8:2b:fc:
f8:91:5a:52:88:1f:5a:59:5d:03:d5:9f:cf:c2:c0:
ba:d6:83:fd:fb:ea:e0:00:8a:5b:b9:de:ed:a2:83:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:99:25:44:00:39:D6:50:24:DD:90:4E:91:43:EF:73:38:95:E8
X509v3 Authority Key Identifier:
keyid:26:3C:9C:5E:E3:18:26:47:30:97:6F:AF:C7:29:15:33:EB:DA:B0:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjycXuMYJkcwl2-vxykVM-vasK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/3s2ZJUQAOdZQJN2QTpFD73M4leg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/JjycXuMYJkcwl2-vxykVM-vasK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.24.0/22
194.55.234.0/23
194.55.244.0/23
IPv6:
2a0f:1140::/32
Signature Algorithm: sha256WithRSAEncryption
46:5c:56:d0:26:35:70:7a:02:f6:f6:c4:00:61:c0:69:1e:cb:
89:6b:2e:ff:74:34:bc:c6:76:57:49:a6:fc:ad:40:87:2d:3a:
31:85:ad:bb:9f:ad:27:b6:57:bd:2e:66:2e:c3:ae:2d:6c:cf:
7b:06:7f:bc:31:b1:f9:42:f8:2a:11:d8:9f:0e:da:54:02:dc:
9d:a7:50:22:57:66:c8:57:89:65:13:be:7a:57:96:e1:7a:38:
44:69:15:bc:5b:fe:fd:0b:3c:b8:60:78:d9:e9:d7:8d:db:87:
5b:40:32:27:06:cb:cc:4b:aa:27:5e:5a:92:6f:0c:7f:29:83:
d8:eb:db:1a:55:18:e1:ab:d2:d1:2b:b5:88:7e:7a:e7:75:b9:
af:a1:3c:9e:eb:08:99:e3:65:4d:4e:d8:80:2e:ae:d9:d8:1f:
e0:b2:42:a5:e8:59:8f:01:65:3d:f1:28:d5:b6:ab:2c:29:72:
71:db:df:11:bc:5a:58:50:c7:31:04:53:1e:c5:31:79:b0:fc:
0f:7c:1e:09:87:27:8b:59:1a:8e:58:86:08:ca:de:61:d9:44:
c7:6b:b3:b3:5a:03:c9:05:b7:22:94:b7:8f:59:d7:00:62:76:
70:54:64:44:e0:27:cd:90:dc:9d:aa:cc:ad:43:ed:ea:d6:a0:
17:c0:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:15 2026 by rpki-client