Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/3zNJZY1mynaOMt0PR_6OOhCID_k.roa
File: 3zNJZY1mynaOMt0PR_6OOhCID_k.roa (raw, json)
Hash identifier: eVoFznym7O4+TfKPzoOO9hJbiKl608aCcwNQSwV6jhY=
Subject key identifier: DF:33:49:65:8D:66:CA:76:8E:32:DD:0F:47:FE:8E:3A:10:88:0F:F9
Certificate issuer: /CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Certificate serial: 01A019075C7EDE05C012A0FEA62991727293
Authority key identifier: 5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/3zNJZY1mynaOMt0PR_6OOhCID_k.roa
Signing time: Wed 19 Aug 2026 07:58:27 +0000
ROA not before: Wed 19 Aug 2026 07:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205879
IP address blocks: 45.137.227.0/24 maxlen: 24
91.220.222.0/24 maxlen: 24
195.88.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:07:5c:7e:de:05:c0:12:a0:fe:a6:29:91:72:72:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Validity
Not Before: Aug 19 07:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3349658d66ca768e32dd0f47fe8e3a10880ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:08:ed:7d:5b:71:2c:b1:17:c0:59:55:22:
eb:7c:bb:c9:7f:51:d8:d7:3d:ed:b4:8c:0b:18:d3:
cd:f8:08:6a:69:5a:e5:f1:9b:d8:72:3c:c3:6e:96:
a1:91:bf:d6:32:27:16:c2:f4:bb:d5:41:10:6f:e7:
57:a5:46:ab:0b:80:9d:71:8f:93:44:8c:05:7f:a2:
a5:8a:08:d9:24:90:48:4c:12:98:8e:a6:60:ee:d2:
d2:6f:cb:5a:41:f5:b7:59:50:b5:51:13:36:df:d4:
3a:b7:8c:e0:55:f5:81:ec:25:df:9f:0e:4d:ea:0e:
37:57:26:89:83:3e:c6:b5:78:2d:55:94:e5:c4:0a:
8b:15:cf:34:a7:60:f4:a4:ed:70:24:f1:5b:f4:49:
02:66:ca:6d:39:e1:96:17:0f:48:d0:04:97:cc:d2:
fe:8d:a7:1f:9e:39:11:df:2c:fc:cd:23:fa:48:5b:
cc:3b:07:7c:a6:25:f5:b2:66:2d:7e:56:fc:64:8f:
c1:9c:cc:01:fc:31:3a:b0:63:46:b7:af:04:ad:13:
81:6e:28:f0:48:e1:45:83:00:f3:6b:83:cb:60:4f:
6d:cc:c8:9b:0e:db:10:38:e7:1f:aa:9f:f7:3b:28:
ef:e6:d1:8b:81:8c:be:5a:53:dc:39:1d:e4:5b:ae:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:49:65:8D:66:CA:76:8E:32:DD:0F:47:FE:8E:3A:10:88:0F:F9
X509v3 Authority Key Identifier:
keyid:5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/3zNJZY1mynaOMt0PR_6OOhCID_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.227.0/24
91.220.222.0/24
195.88.180.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7f:d3:df:d8:c2:8d:1e:f8:26:90:6e:b4:78:a9:3f:f9:5a:
7b:3f:cf:7a:d7:e8:e1:d0:26:06:77:aa:be:66:e3:8d:3e:14:
99:cd:24:5a:63:53:db:05:a2:42:be:bf:dd:8f:aa:62:78:c0:
ee:dd:b5:0a:e7:d8:f6:bc:2d:31:d6:57:f5:1b:97:0f:e5:79:
7e:e2:de:28:51:28:9c:bc:dc:b4:0b:47:06:0f:16:e8:f9:bb:
2b:28:74:50:c4:7a:3e:0d:3c:9e:b9:44:3d:76:18:dd:ce:d8:
6f:0c:34:d4:e1:26:fd:78:3a:88:39:ee:e0:2f:16:70:aa:cf:
99:17:3d:cf:0a:f3:c8:af:72:a6:8d:c9:7d:85:df:64:71:28:
d5:cb:36:be:0d:0c:1f:78:f1:26:84:bc:ea:38:07:d6:b5:b5:
35:34:2b:16:82:5e:b7:47:cb:81:08:23:be:5b:90:13:6d:8a:
c4:c1:65:5d:95:67:a3:b6:91:01:07:95:28:a1:37:55:6b:72:
a5:ac:16:90:f4:07:b8:e9:9e:aa:90:f3:93:3d:8a:c8:9d:6a:
86:e5:d6:b2:54:49:bd:0d:96:c9:49:2d:09:33:af:75:36:73:
6c:fb:88:94:8f:a1:f8:8f:6c:eb:2e:20:80:af:7c:42:41:5b:
5e:e3:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:02 2026 by rpki-client