Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3eJRBdq4aRl7XQ59pQr0KRI3OyA.roa
File: 3eJRBdq4aRl7XQ59pQr0KRI3OyA.roa (raw, json)
Hash identifier: kt57lbrcgTqUnlpeqgklW/TvY+Qtl9COlqaubDW+rBE=
Subject key identifier: DD:E2:51:05:DA:B8:69:19:7B:5D:0E:7D:A5:0A:F4:29:12:37:3B:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E0823146A44B086F337D46B68ADD32FAE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3eJRBdq4aRl7XQ59pQr0KRI3OyA.roa
Signing time: Fri 08 May 2026 15:09:37 +0000
ROA not before: Fri 08 May 2026 15:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.253.38.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
193.168.208.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:23:14:6a:44:b0:86:f3:37:d4:6b:68:ad:d3:2f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 8 15:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dde25105dab869197b5d0e7da50af42912373b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:bc:2c:ed:e6:34:af:36:cf:3f:71:94:ef:
69:d6:d9:c9:08:4c:fb:3b:6c:0c:54:8b:5d:6d:3d:
11:3c:6b:18:3e:45:b2:b9:34:00:71:25:4c:43:00:
9f:e9:5d:e3:e2:a3:aa:f7:b4:43:9e:73:47:d5:f2:
c9:3d:a2:d9:40:98:8c:ec:60:0f:4a:d6:18:dc:a1:
23:b9:0b:fd:b1:5e:75:95:a3:e9:01:2e:f2:76:d3:
f3:99:70:c4:b4:0c:71:ed:bd:6f:72:4c:84:85:e0:
9d:db:8d:d8:a8:cf:6b:a4:5e:41:aa:0c:f7:ea:96:
4a:62:50:b2:46:bf:c1:30:78:14:8a:5e:02:7a:37:
f5:46:db:51:d3:1e:69:04:cf:63:04:98:6d:73:d7:
fb:3c:ca:a0:6d:b4:ef:61:5a:43:5f:bd:32:72:56:
4d:26:b2:fb:d8:45:c6:26:d0:58:f2:ee:12:5d:a4:
42:d0:f0:b8:26:dc:73:94:a4:88:73:c8:f8:50:de:
f6:0f:88:52:04:f1:47:86:ae:68:c9:51:6c:ce:bf:
44:85:39:3e:33:ba:3d:b1:d9:08:e7:7d:b4:fd:1a:
c2:53:a1:b1:8f:a5:13:0d:fa:14:72:68:fc:56:4b:
8c:9a:68:b9:32:db:b3:cb:d7:b3:9f:e3:b9:21:4b:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E2:51:05:DA:B8:69:19:7B:5D:0E:7D:A5:0A:F4:29:12:37:3B:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3eJRBdq4aRl7XQ59pQr0KRI3OyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.8.252.0/23
45.15.143.0/24
45.92.195.0/24
193.168.208.0/24
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6e:db:50:2f:01:88:6a:99:99:f7:ec:69:13:81:c8:9b:f5:
c4:92:3f:92:88:67:3c:72:ad:5f:4e:90:63:54:0a:a9:c5:24:
a1:0d:a4:1f:58:2f:1a:42:8d:1d:e4:17:d4:7e:a5:58:2c:a8:
af:08:d4:3a:8e:2a:dd:85:12:4e:61:cf:0a:67:93:ee:4d:50:
37:a5:1e:6d:f8:58:7e:49:e0:1f:68:a8:2a:09:c3:1a:90:39:
a9:98:94:a2:a3:8c:82:bc:ca:93:d4:0c:f7:55:7c:0b:8e:91:
af:e9:2d:50:6a:bc:f0:d7:81:d6:2c:5a:f6:8e:84:e5:8d:c4:
c7:78:08:9e:b7:59:54:ce:7c:2d:48:ff:df:f5:79:86:54:5a:
00:cc:cb:f3:1a:0a:de:0d:40:f7:f7:14:10:8f:c5:cf:25:77:
3f:50:9b:0e:b2:83:71:36:dd:00:99:f7:69:e2:4b:e6:6e:0f:
b8:95:39:3e:87:d7:f1:4a:58:0f:9b:c1:85:d5:74:f6:3b:61:
91:a9:cf:56:be:31:da:ac:9b:41:40:1f:69:30:5a:8e:55:1b:
cf:40:5a:e0:22:ed:c7:0e:58:57:bc:6b:30:59:45:93:33:eb:
3c:ad:b2:a1:5e:cc:72:2a:08:34:63:6d:c9:80:2b:ea:5f:bb:
a3:8d:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:32 2026 by rpki-client