Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa
File: 3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa (raw, json)
Hash identifier: PQf0TYbRUaWDGilp0A7TiyN7qbDatKPuZrY3XALzNR4=
Subject key identifier: DE:C3:27:6E:01:65:81:13:7A:A9:33:A0:11:A2:31:AF:AF:FC:77:E9
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F23683903067E7A2AC56E8DF599C542EC
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62243
IP address blocks: 185.29.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:03:06:7e:7a:2a:c5:6e:8d:f5:99:c5:42:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dec3276e016581137aa933a011a231afaffc77e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:7e:1b:c6:f3:2e:67:10:77:fd:d7:d3:ae:
8c:33:0d:9b:ec:c4:92:74:f2:b7:b3:bf:f4:0c:aa:
e4:e6:d3:d2:df:aa:5d:c0:4c:e6:a5:24:5c:a2:cf:
42:57:23:28:2b:92:32:42:f0:6b:bb:03:ea:47:8e:
9d:30:5f:3f:73:62:34:20:25:f8:70:8a:eb:a9:e1:
79:ab:a0:01:2f:73:03:b4:14:d7:bd:e1:c2:1a:89:
33:b7:0d:8a:a2:70:ce:bf:25:78:52:93:f0:a7:23:
30:9f:6c:8a:1a:17:47:10:31:05:c7:f4:46:37:7b:
49:9f:8f:66:bf:90:1c:7d:86:f4:4e:49:2b:c5:22:
37:a8:34:72:2d:77:ee:6b:b8:31:2f:db:50:67:0d:
a2:a5:6e:92:63:4c:68:cd:19:47:81:b9:c5:1d:5d:
68:c6:55:c2:88:cd:34:fa:fc:d2:c1:50:f2:81:79:
76:09:c9:2f:91:ab:f6:5b:ec:f2:46:da:b3:54:12:
c3:7d:0b:88:5e:3f:1b:56:7c:04:38:50:14:19:61:
1d:76:63:98:d6:6c:ca:d5:64:6b:bc:ba:64:a7:65:
ff:ec:c9:e9:98:bb:ff:8b:80:a9:71:84:54:4c:2d:
92:4f:37:77:8d:0e:5f:43:17:1e:fc:79:fd:60:8d:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:27:6E:01:65:81:13:7A:A9:33:A0:11:A2:31:AF:AF:FC:77:E9
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cf:f0:00:72:31:32:7e:39:36:6f:3b:bf:4b:44:29:fb:4f:
e6:cd:fb:af:5c:0c:a5:41:89:78:88:f4:6c:48:41:43:03:91:
cc:69:b8:38:51:83:17:42:71:61:66:e5:1e:db:4b:b6:17:0e:
46:a5:7e:4c:96:08:75:78:f0:fb:fa:a5:59:e2:d3:4a:51:13:
92:07:e3:fd:21:81:92:88:e0:0e:fe:e4:f5:90:73:e0:49:16:
23:c4:e2:37:2e:42:94:11:ab:f1:19:b8:89:6e:d0:3f:cd:49:
cd:e1:a6:2b:d1:e6:1c:28:25:e1:0d:39:31:82:53:54:49:25:
ad:ff:68:26:e7:3f:e3:d6:c1:11:e4:00:69:a6:72:c9:1c:23:
f3:8f:e4:d4:a9:d3:3c:d1:05:77:f0:51:13:f7:60:82:77:48:
c1:de:bc:6a:84:c0:e0:f6:1f:66:2e:f1:99:75:59:c1:c7:2f:
1d:7e:87:15:73:e0:06:ac:4b:73:b7:f6:58:63:8b:47:5b:84:
65:bc:ba:f1:cc:f1:cb:4f:10:63:65:6e:ca:e3:1b:87:03:e9:
41:4f:cc:e5:58:59:e1:e8:89:dd:d8:a2:fb:2d:40:5e:87:ee:
62:a0:8a:7c:c9:86:df:c2:a0:01:79:4d:ad:54:a6:6a:c9:0b:
5d:84:df:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaDkDBn56KsVujfWZxULsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWMzMjc2ZTAxNjU4MTEzN2FhOTMzYTAxMWEyMzFhZmFmZmM3N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQZ+G8bzLmcQd/3X066MMw2b7MSS
dPK3s7/0DKrk5tPS36pdwEzmpSRcos9CVyMoK5IyQvBruwPqR46dMF8/c2I0ICX4
cIrrqeF5q6ABL3MDtBTXveHCGokztw2KonDOvyV4UpPwpyMwn2yKGhdHEDEFx/RG
N3tJn49mv5AcfYb0TkkrxSI3qDRyLXfua7gxL9tQZw2ipW6SY0xozRlHgbnFHV1o
xlXCiM00+vzSwVDygXl2Cckvkav2W+zyRtqzVBLDfQuIXj8bVnwEOFAUGWEddmOY
1mzK1WRrvLpkp2X/7MnpmLv/i4CpcYRUTC2STzd3jQ5fQxce/Hn9YI1pBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7DJ24BZYETeqkzoBGiMa+v/HfpMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvM3NNbmJnRmxnUk42cVRPZ0VhSXhyNl84ZC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR2CMA0G
CSqGSIb3DQEBCwUAA4IBAQC3z/AAcjEyfjk2bzu/S0Qp+0/mzfuvXAylQYl4iPRs
SEFDA5HMabg4UYMXQnFhZuUe20u2Fw5GpX5Mlgh1ePD7+qVZ4tNKUROSB+P9IYGS
iOAO/uT1kHPgSRYjxOI3LkKUEavxGbiJbtA/zUnN4aYr0eYcKCXhDTkxglNUSSWt
/2gm5z/j1sER5ABppnLJHCPzj+TUqdM80QV38FET92CCd0jB3rxqhMDg9h9mLvGZ
dVnBxy8dfocVc+AGrEtzt/ZYY4tHW4RlvLrxzPHLTxBjZW7K4xuHA+lBT8zlWFnh
6Ind2KL7LUBeh+5ioIp8yYbfwqABeU2tVKZqyQtdhN94
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:48 2026 by rpki-client