Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/3M6LA-oo_M8iW0WHMWzqNuawrXI.roa
File: 3M6LA-oo_M8iW0WHMWzqNuawrXI.roa (raw, json)
Hash identifier: mbA8j0JMCwuQFEr3+eq0m532/7RxJbUAb2My/6/L17o=
Subject key identifier: DC:CE:8B:03:EA:28:FC:CF:22:5B:45:87:31:6C:EA:36:E6:B0:AD:72
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 019F23688B66BF64FEEEB25AB5F16C355AAF
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/3M6LA-oo_M8iW0WHMWzqNuawrXI.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35584
IP address blocks: 89.33.96.0/22 maxlen: 22
193.200.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:66:bf:64:fe:ee:b2:5a:b5:f1:6c:35:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dcce8b03ea28fccf225b4587316cea36e6b0ad72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:2d:dd:c4:7f:25:23:34:e6:91:0a:b7:cd:
59:2d:ae:5a:ab:5b:59:69:19:68:67:d7:0e:c0:27:
07:62:c1:83:13:c1:a3:f6:a8:eb:46:de:6e:e3:ae:
2b:23:b9:e9:74:fb:d1:ea:5f:40:b5:d3:ec:90:c9:
17:16:9e:e3:42:10:82:0d:bb:43:5f:02:b4:c5:d4:
c3:80:9a:e4:5e:25:a7:a2:a5:d3:00:14:2c:86:3e:
b9:aa:2e:ef:7c:13:d6:69:77:aa:3a:40:34:a6:b1:
1d:04:fa:03:f7:d3:a1:fb:52:e1:fe:4c:25:41:b6:
13:38:cd:48:0b:cc:b0:f2:97:db:36:c4:2a:f7:8b:
ae:79:8f:e3:6c:a8:b2:2a:bc:ab:62:af:4f:6d:23:
b8:e8:87:79:2d:b9:c9:62:55:68:26:ba:68:88:34:
d6:5e:d5:21:a2:a8:47:47:5e:9c:7b:09:ef:0c:55:
7b:f6:f7:08:9d:3b:2c:f4:c0:e9:d7:02:f8:ea:bc:
40:11:c0:b5:18:cc:66:58:2e:2e:e8:a4:90:a3:b7:
f8:12:ab:0f:56:de:83:f5:e6:84:de:f6:e6:10:af:
24:08:66:f2:21:bc:c6:a0:96:7d:9f:76:6a:9f:f1:
9c:73:a7:9c:47:9c:da:b9:d3:39:b9:1b:62:15:05:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:8B:03:EA:28:FC:CF:22:5B:45:87:31:6C:EA:36:E6:B0:AD:72
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/3M6LA-oo_M8iW0WHMWzqNuawrXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.96.0/22
193.200.200.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d8:11:d7:d6:8d:ed:2d:e4:45:05:53:77:ff:99:6d:c4:23:
31:68:fa:f4:14:2a:91:ba:e5:3e:07:f3:67:d4:e2:68:b0:e6:
71:88:2d:ae:9a:1e:da:b1:30:99:a1:86:70:88:75:cf:bb:12:
1b:ed:85:45:0e:1c:f3:31:98:8e:14:ab:c4:aa:3b:d8:07:62:
cd:64:ad:c3:24:bd:14:71:88:69:86:af:18:e2:ce:8e:fd:9b:
0d:1b:b0:9c:4a:bf:f4:be:60:66:20:9e:f0:10:d4:02:43:7b:
ac:e5:f6:ab:94:be:dc:fe:ac:c5:47:9d:8a:4d:4c:72:ac:2b:
a6:3a:c4:05:d3:14:bb:12:eb:92:3d:bb:f6:45:6c:2b:0b:35:
40:20:36:77:29:03:5d:f4:ce:0c:ad:db:c6:a3:32:1a:b1:c4:
2e:af:ae:e8:32:a6:b7:74:8a:a7:b7:a5:95:b9:6a:15:95:82:
a9:b9:98:c7:e7:fb:50:e4:da:de:25:8f:f7:c4:9d:6c:c5:01:
0a:1e:26:c3:e2:42:80:10:55:f4:29:b3:5b:c1:10:35:c3:70:
ea:c9:7c:aa:37:9f:8e:e9:e7:1a:e2:33:87:fb:9c:92:83:4f:
da:10:43:08:bf:1f:14:89:29:4b:85:ec:77:e1:7b:51:54:59:
3a:f9:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:28 2026 by rpki-client