Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/3DD1GqM4VMCI2iIn07pCJxzLRt0.roa
File: 3DD1GqM4VMCI2iIn07pCJxzLRt0.roa (raw, json)
Hash identifier: +QXq2lGOdBUmdmEAE4jHcDP4XRlLl+rR3VZKeTQaV/s=
Subject key identifier: DC:30:F5:1A:A3:38:54:C0:88:DA:22:27:D3:BA:42:27:1C:CB:46:DD
Certificate issuer: /CN=0efad7551516f0c4d912da0313c995c9e714e09a
Certificate serial: 019F23682AA8B21B18639351F062F9198833
Authority key identifier: 0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/3DD1GqM4VMCI2iIn07pCJxzLRt0.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24951
IP address blocks: 89.45.84.0/22 maxlen: 22
185.39.228.0/22 maxlen: 22
2a01:4aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:a8:b2:1b:18:63:93:51:f0:62:f9:19:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efad7551516f0c4d912da0313c995c9e714e09a
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc30f51aa33854c088da2227d3ba42271ccb46dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:6f:17:bd:ce:29:bd:af:28:c0:ac:ef:eb:
a2:24:48:37:2f:6d:9f:f6:c9:d1:7f:1c:65:ac:30:
71:df:d7:da:cf:b6:92:0e:16:98:f2:54:16:e5:46:
53:c9:5c:4a:bb:4c:76:9f:98:69:3b:a3:03:87:05:
db:62:1a:21:41:7a:08:c4:71:f6:89:99:70:e3:c5:
ca:4a:ef:90:de:77:42:ac:21:44:11:ec:e4:21:04:
8d:de:69:4a:d5:03:1b:0f:dd:5e:8a:c3:c8:9d:a5:
ea:2d:8f:14:41:f9:1e:3e:5a:79:32:a4:14:47:a6:
c1:24:55:dc:24:eb:05:af:a5:e6:f8:e0:f2:1c:b1:
c3:65:4c:df:d8:e4:d8:1a:f6:de:07:e9:c2:6c:4c:
ba:5b:93:2c:9f:e2:94:93:bf:b0:95:dd:bf:e9:3d:
f5:ca:6b:79:56:3e:33:d8:d2:55:1f:83:11:06:3d:
9f:b9:85:f1:4b:09:7a:94:b6:3f:02:00:7e:6a:3c:
8e:ef:0d:81:df:67:4a:7e:d1:eb:6d:d3:67:0d:5f:
94:77:b5:d2:32:4c:54:68:b8:e4:30:40:99:58:77:
46:62:7a:3e:a4:57:2b:bb:f4:1f:bf:16:de:d9:25:
0f:f0:6d:14:57:12:ec:01:20:21:0b:fe:b5:0d:26:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:F5:1A:A3:38:54:C0:88:DA:22:27:D3:BA:42:27:1C:CB:46:DD
X509v3 Authority Key Identifier:
keyid:0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/3DD1GqM4VMCI2iIn07pCJxzLRt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.84.0/22
185.39.228.0/22
IPv6:
2a01:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
6c:81:10:a7:ff:45:2a:fa:4d:f2:16:46:dd:74:3f:b4:12:26:
55:52:32:42:bf:aa:16:5c:96:4b:f0:9b:ee:8f:21:0f:7f:49:
1a:82:4a:e3:ff:e7:6b:37:47:19:e2:28:a9:88:d3:94:03:e5:
8d:c7:d3:67:a9:20:c3:c3:92:b8:be:d8:8b:30:91:8b:a9:68:
6a:a0:b5:cf:c1:15:80:b6:49:2b:94:46:4e:51:64:d4:61:84:
27:00:54:35:b7:3a:2e:0a:18:ca:eb:d1:91:f1:83:46:26:f7:
9e:27:c1:25:08:f7:f9:2c:cb:34:93:86:c8:61:72:98:7d:93:
a8:8f:a1:01:f5:92:44:84:57:04:7b:b2:24:9e:4b:e5:96:1e:
95:74:c0:ec:44:33:c0:37:16:0a:11:de:b0:85:26:2b:a1:79:
b7:92:23:b7:8e:78:1b:d4:e1:61:f8:e9:d3:33:3f:f0:3b:2c:
0c:35:04:83:3a:a8:84:43:45:ee:6d:f7:e5:9b:7c:85:38:43:
81:95:e7:a1:55:8a:f8:3d:9a:0d:8a:51:cf:22:1b:a4:d9:90:
39:e0:db:6d:df:ff:e5:a9:4b:4c:4b:1f:79:08:c8:40:73:ca:
16:7d:a5:eb:b1:96:31:8f:15:a7:d3:23:3e:5a:5a:61:af:ae:
e1:b0:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:44:16 2026 by rpki-client