Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/3Y0DvCCQl1T1M_Odsj25KMfoj0s.roa
File: 3Y0DvCCQl1T1M_Odsj25KMfoj0s.roa (raw, json)
Hash identifier: bYPYLnwJfT6YQz6FMrLKBCsJh4hMqdOt81D/lCQeK9w=
Subject key identifier: DD:8D:03:BC:20:90:97:54:F5:33:F3:9D:B2:3D:B9:28:C7:E8:8F:4B
Certificate issuer: /CN=e3e445dcc69af2a84b98b07f901167f6e2b88334
Certificate serial: 019F2368A6E2F81524091CA9161CB2066575
Authority key identifier: E3:E4:45:DC:C6:9A:F2:A8:4B:98:B0:7F:90:11:67:F6:E2:B8:83:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/3Y0DvCCQl1T1M_Odsj25KMfoj0s.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197369
IP address blocks: 46.16.40.0/21 maxlen: 21
46.16.45.0/24 maxlen: 24
46.16.47.0/24 maxlen: 24
188.240.4.0/22 maxlen: 22
188.240.4.0/24 maxlen: 24
188.240.5.0/24 maxlen: 24
188.240.6.0/24 maxlen: 24
188.240.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:e2:f8:15:24:09:1c:a9:16:1c:b2:06:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e445dcc69af2a84b98b07f901167f6e2b88334
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd8d03bc20909754f533f39db23db928c7e88f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:cd:10:9a:55:85:5f:9d:f3:29:37:19:18:
a2:b0:bb:0f:34:75:88:ef:02:a8:39:57:9f:25:64:
80:d1:bb:03:43:38:fc:91:5b:78:61:a2:2b:bf:f5:
9e:62:1f:da:e9:43:3e:8c:78:01:ac:8e:89:2e:c6:
dd:21:e7:7c:75:e6:45:9d:46:00:25:6c:d0:f8:65:
fc:22:f8:85:52:11:53:3f:b3:77:ce:6b:23:f4:10:
71:2d:07:5b:5e:02:2b:f6:fd:4f:2e:33:5c:0c:1f:
cf:66:88:e4:1d:69:47:36:5b:f7:40:3b:19:96:43:
3c:2b:49:4a:11:d4:56:a6:59:77:82:65:da:5c:a5:
80:cf:2e:d4:47:fc:15:56:3c:0a:93:06:99:69:3c:
de:55:92:a5:66:55:8f:4b:52:ca:e8:45:5f:59:0f:
fd:4b:1b:79:44:c2:15:06:37:02:6d:07:9b:99:64:
5d:db:c6:58:80:9e:0d:0a:5a:f4:65:d5:96:65:14:
80:03:7c:7e:01:2e:50:7f:95:eb:2a:76:4a:82:3e:
12:1e:39:cc:0d:ca:ec:4d:1f:d1:6e:e5:59:04:fc:
32:1c:f6:61:ab:5e:92:80:3a:ba:f2:09:6f:ad:e1:
c5:47:b4:60:87:33:e7:8a:8b:2a:4f:8c:07:7e:1a:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:03:BC:20:90:97:54:F5:33:F3:9D:B2:3D:B9:28:C7:E8:8F:4B
X509v3 Authority Key Identifier:
keyid:E3:E4:45:DC:C6:9A:F2:A8:4B:98:B0:7F:90:11:67:F6:E2:B8:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/3Y0DvCCQl1T1M_Odsj25KMfoj0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/4-RF3Maa8qhLmLB_kBFn9uK4gzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
188.240.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7e:4d:c5:22:c3:58:b2:aa:df:ab:cc:d7:0a:26:1c:55:07:
cb:10:53:6b:ea:32:2a:8c:d0:72:e7:db:19:58:06:8a:fd:f3:
44:98:6a:5d:ed:c1:0f:2c:1e:d5:8d:68:bc:f3:8a:67:a6:24:
fb:31:3c:75:31:db:d7:d0:55:ee:1e:c6:9b:23:82:1e:1e:ba:
2e:cb:65:be:68:70:f8:e6:1c:a4:9e:01:22:b2:de:45:71:a5:
4e:34:34:d2:0f:58:b6:a9:2b:8d:59:ba:00:e2:af:5f:83:c6:
e3:4a:cc:dd:c7:4d:33:2a:2a:da:64:78:f9:e1:89:89:c6:3a:
ab:03:a3:d4:43:5a:58:36:86:27:da:e4:9e:9c:df:f9:84:30:
cc:62:25:58:21:92:c5:09:be:52:cb:64:b5:a8:ba:09:5b:30:
1c:3f:ad:b1:9a:aa:f4:11:f3:24:11:67:81:ef:63:b0:6a:21:
f3:fd:07:19:62:36:b1:d9:c7:60:08:95:21:93:75:c9:f0:65:
f5:60:0a:69:ec:af:ec:4a:ac:e6:34:7c:7b:72:c2:85:50:db:
87:5a:78:0d:bf:80:9a:29:07:4b:7e:9f:ad:2c:dd:dd:f3:06:
11:d3:d0:da:79:f9:07:10:e5:70:7c:65:50:cf:82:6d:2c:46:
16:a0:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:52 2026 by rpki-client