Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3dk-6x7DWTnIiWUf2HLh7xOMNkM.roa
File: 3dk-6x7DWTnIiWUf2HLh7xOMNkM.roa (raw, json)
Hash identifier: 5nd29dxz8d6sXp2QRVe42zYk2yfK3IPMS94oimBwqkk=
Subject key identifier: DD:D9:3E:EB:1E:C3:59:39:C8:89:65:1F:D8:72:E1:EF:13:8C:36:43
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019DF25377476A6460691EAAABB0A34FDAE1
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3dk-6x7DWTnIiWUf2HLh7xOMNkM.roa
Signing time: Mon 04 May 2026 09:30:49 +0000
ROA not before: Mon 04 May 2026 09:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57344
IP address blocks: 5.104.168.0/23 maxlen: 23
5.104.174.0/24 maxlen: 24
46.253.134.0/24 maxlen: 24
77.76.0.0/24 maxlen: 24
77.76.8.0/24 maxlen: 24
77.76.10.0/24 maxlen: 24
77.76.11.0/24 maxlen: 24
78.128.0.0/24 maxlen: 24
78.128.8.0/24 maxlen: 24
78.128.41.0/24 maxlen: 24
78.128.43.0/24 maxlen: 24
78.128.60.0/24 maxlen: 24
78.128.67.0/24 maxlen: 24
78.128.72.0/24 maxlen: 24
78.128.76.0/24 maxlen: 24
78.128.79.0/24 maxlen: 24
78.128.81.0/24 maxlen: 24
78.128.92.0/24 maxlen: 24
78.128.94.0/24 maxlen: 24
78.128.96.0/24 maxlen: 24
78.128.98.0/24 maxlen: 24
78.128.106.0/24 maxlen: 24
78.128.107.0/24 maxlen: 24
78.128.108.0/23 maxlen: 23
78.142.1.0/24 maxlen: 24
78.142.4.0/23 maxlen: 23
78.142.17.0/24 maxlen: 24
78.142.20.0/24 maxlen: 24
78.142.24.0/24 maxlen: 24
78.142.30.0/24 maxlen: 24
78.142.31.0/24 maxlen: 24
78.142.33.0/24 maxlen: 24
78.142.34.0/24 maxlen: 24
78.142.47.0/24 maxlen: 24
78.142.48.0/24 maxlen: 24
78.142.60.0/24 maxlen: 24
78.142.63.0/24 maxlen: 24
79.124.0.0/24 maxlen: 24
79.124.15.0/24 maxlen: 24
79.124.20.0/23 maxlen: 23
79.124.23.0/24 maxlen: 24
79.124.24.0/22 maxlen: 24
79.124.28.0/24 maxlen: 24
79.124.47.0/24 maxlen: 24
79.124.50.0/24 maxlen: 24
79.124.51.0/24 maxlen: 24
79.124.53.0/24 maxlen: 24
79.124.73.0/24 maxlen: 24
79.124.74.0/24 maxlen: 24
79.124.76.0/24 maxlen: 24
79.124.79.0/24 maxlen: 24
79.124.82.0/24 maxlen: 24
82.118.224.0/24 maxlen: 24
82.118.236.0/24 maxlen: 24
82.118.238.0/24 maxlen: 24
82.118.244.0/24 maxlen: 24
82.118.246.0/23 maxlen: 23
87.246.2.0/24 maxlen: 24
91.148.131.0/24 maxlen: 24
91.148.140.0/24 maxlen: 24
91.148.149.0/24 maxlen: 24
91.148.160.0/24 maxlen: 24
91.148.168.0/24 maxlen: 24
91.148.169.0/24 maxlen: 24
91.148.187.0/24 maxlen: 24
91.191.216.0/23 maxlen: 24
94.72.145.0/24 maxlen: 24
94.72.148.0/22 maxlen: 24
94.72.158.0/24 maxlen: 24
94.72.159.0/24 maxlen: 24
130.185.224.0/24 maxlen: 24
130.185.226.0/24 maxlen: 24
130.185.229.0/24 maxlen: 24
130.185.235.0/24 maxlen: 24
130.185.236.0/24 maxlen: 24
130.185.237.0/24 maxlen: 24
130.185.248.0/24 maxlen: 24
130.185.250.0/24 maxlen: 24
176.241.176.0/23 maxlen: 24
178.132.80.0/24 maxlen: 24
178.132.81.0/24 maxlen: 24
178.132.82.0/23 maxlen: 24
178.132.84.0/23 maxlen: 24
185.148.160.0/22 maxlen: 22
185.148.162.0/24 maxlen: 24
185.197.152.0/22 maxlen: 24
185.232.156.0/23 maxlen: 24
185.232.159.0/24 maxlen: 24
217.174.148.0/23 maxlen: 24
217.174.148.0/24 maxlen: 24
217.174.149.0/24 maxlen: 24
217.174.150.0/24 maxlen: 24
217.174.152.0/23 maxlen: 24
217.174.152.0/24 maxlen: 24
217.174.153.0/24 maxlen: 24
217.174.154.0/24 maxlen: 24
217.174.159.0/24 maxlen: 24
2a01:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:53:77:47:6a:64:60:69:1e:aa:ab:b0:a3:4f:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: May 4 09:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddd93eeb1ec35939c889651fd872e1ef138c3643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:81:d0:23:64:ed:da:1b:db:ee:38:87:7f:
18:57:64:91:62:68:d2:7c:90:5a:4b:2d:f4:aa:fb:
c7:7e:8d:82:ce:e2:af:dd:a3:c2:80:ec:f7:6e:5b:
ef:bc:19:3e:01:25:a5:ce:64:a4:da:53:a6:38:5d:
ee:b6:f1:38:7e:f3:1a:9e:08:fe:0f:60:03:2c:be:
7e:b6:17:e6:69:85:11:ee:50:1e:fa:bb:d1:77:a0:
ae:34:33:21:80:a9:e3:49:ef:52:08:85:80:19:ae:
ad:d7:5a:f6:56:c3:6b:91:93:08:3f:b1:c5:33:16:
44:85:63:3f:ac:33:3a:3a:5a:c6:09:55:ea:8e:01:
d2:5a:7c:be:04:ed:e5:70:67:8f:a8:48:bd:9b:c4:
3d:2b:ae:95:f3:d5:36:df:00:fd:f2:d1:03:19:48:
ff:5c:b0:e2:4b:c9:20:7e:5a:ac:a4:58:76:2d:33:
6a:2b:6e:ec:a2:80:47:19:5d:16:09:5d:51:c5:de:
06:7e:90:bc:cf:fa:6f:c0:33:77:8a:8c:0d:44:a7:
cd:96:7c:42:fe:df:2f:c4:41:53:52:b7:75:fb:b1:
22:9c:07:61:a3:4c:ac:a1:70:51:09:74:0e:75:e6:
01:f2:1a:8d:b4:63:33:51:90:c8:aa:db:36:9c:cf:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:3E:EB:1E:C3:59:39:C8:89:65:1F:D8:72:E1:EF:13:8C:36:43
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/3dk-6x7DWTnIiWUf2HLh7xOMNkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.168.0/23
5.104.174.0/24
46.253.134.0/24
77.76.0.0/24
77.76.8.0/24
77.76.10.0/23
78.128.0.0/24
78.128.8.0/24
78.128.41.0/24
78.128.43.0/24
78.128.60.0/24
78.128.67.0/24
78.128.72.0/24
78.128.76.0/24
78.128.79.0/24
78.128.81.0/24
78.128.92.0/24
78.128.94.0/24
78.128.96.0/24
78.128.98.0/24
78.128.106.0-78.128.109.255
78.142.1.0/24
78.142.4.0/23
78.142.17.0/24
78.142.20.0/24
78.142.24.0/24
78.142.30.0/23
78.142.33.0-78.142.34.255
78.142.47.0-78.142.48.255
78.142.60.0/24
78.142.63.0/24
79.124.0.0/24
79.124.15.0/24
79.124.20.0/23
79.124.23.0-79.124.28.255
79.124.47.0/24
79.124.50.0/23
79.124.53.0/24
79.124.73.0-79.124.74.255
79.124.76.0/24
79.124.79.0/24
79.124.82.0/24
82.118.224.0/24
82.118.236.0/24
82.118.238.0/24
82.118.244.0/24
82.118.246.0/23
87.246.2.0/24
91.148.131.0/24
91.148.140.0/24
91.148.149.0/24
91.148.160.0/24
91.148.168.0/23
91.148.187.0/24
91.191.216.0/23
94.72.145.0/24
94.72.148.0/22
94.72.158.0/23
130.185.224.0/24
130.185.226.0/24
130.185.229.0/24
130.185.235.0-130.185.237.255
130.185.248.0/24
130.185.250.0/24
176.241.176.0/23
178.132.80.0-178.132.85.255
185.148.160.0/22
185.197.152.0/22
185.232.156.0/23
185.232.159.0/24
217.174.148.0-217.174.150.255
217.174.152.0-217.174.154.255
217.174.159.0/24
IPv6:
2a01:8740::/32
Signature Algorithm: sha256WithRSAEncryption
2a:84:b7:b4:af:5d:7c:b7:1b:33:9c:24:a2:7d:c5:89:ef:35:
47:1a:cb:74:63:88:28:02:70:e9:a8:ce:15:ed:62:05:c4:4a:
71:50:c0:b7:36:96:87:e8:0b:87:ec:c2:31:f3:1b:06:1d:8d:
8d:96:90:52:c1:3e:c4:d2:8b:af:99:ad:91:fe:3f:ba:4e:28:
67:a7:5f:fc:08:0b:93:b4:fb:5c:e4:19:6c:6f:9b:e5:7f:29:
19:da:b0:76:f5:22:6d:1f:a8:a7:c2:52:30:32:6a:59:ff:97:
a8:f3:a5:6c:bb:9b:98:fa:1e:73:0b:bf:07:44:e4:71:a4:5c:
5c:a1:b6:7c:38:ad:64:c3:8d:75:57:cd:4e:1e:43:1e:b9:a8:
fa:d4:9d:7c:fa:72:f4:d4:2e:8c:8e:c7:9c:01:e2:b3:d7:df:
f1:85:30:ae:5f:92:e5:69:50:71:b9:eb:5e:af:e4:fc:6d:50:
1b:cb:53:93:12:a4:8a:d4:69:db:71:84:13:e0:3f:9d:5d:07:
32:3a:7a:6b:81:3d:f5:e9:f0:f0:cd:73:76:f0:b3:33:63:a0:
d5:79:75:6d:76:6b:6a:b5:f3:fd:02:77:67:63:85:18:43:fd:
53:1a:60:d0:14:6e:32:b8:7a:3a:8e:23:07:54:62:e2:1f:c0:
a3:10:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:03 2026 by rpki-client