Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa
File: 3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa (raw, json)
Hash identifier: 2OptZ+4wmOrAzANexNVFxgqEQ6WPy7TJBLwiEO3CjTM=
Subject key identifier: DD:A3:FB:B5:FD:BF:20:40:16:5C:C6:2B:86:48:2D:FC:51:AF:9E:83
Certificate issuer: /CN=e637899b505f34c75577031ad15d461159fa3ecc
Certificate serial: 019F2368F018D6095929CD20F658A7099DE1
Authority key identifier: E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41616
IP address blocks: 81.163.80.0/24 maxlen: 24
81.163.81.0/24 maxlen: 24
81.163.82.0/24 maxlen: 24
81.163.83.0/24 maxlen: 24
81.163.84.0/24 maxlen: 24
81.163.85.0/24 maxlen: 24
81.163.86.0/24 maxlen: 24
81.163.87.0/24 maxlen: 24
91.247.152.0/24 maxlen: 24
91.247.153.0/24 maxlen: 24
91.247.154.0/24 maxlen: 24
91.247.155.0/24 maxlen: 24
91.247.156.0/24 maxlen: 24
91.247.157.0/24 maxlen: 24
91.247.158.0/24 maxlen: 24
91.247.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:18:d6:09:59:29:cd:20:f6:58:a7:09:9d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e637899b505f34c75577031ad15d461159fa3ecc
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dda3fbb5fdbf2040165cc62b86482dfc51af9e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:88:2c:2e:d1:3c:51:b3:c7:d0:58:77:a4:
18:28:c4:ba:62:d8:81:fe:db:f5:d9:80:28:7e:c9:
17:16:5f:da:df:22:b0:8e:e0:43:3d:4e:59:f0:90:
33:88:bc:1c:08:ff:0e:fb:1e:bc:f9:38:ff:4f:d1:
a7:b4:b7:61:40:e8:6f:4e:ad:02:94:fe:84:d3:13:
8a:e3:06:db:af:ed:8a:c5:c5:72:b1:3c:ed:17:95:
e9:ff:de:37:67:99:ad:24:1f:ec:91:57:32:5a:dc:
4f:31:bb:fc:5c:7b:a0:55:ac:d7:31:eb:b9:96:db:
80:17:38:df:53:91:b9:8e:e6:1d:28:3f:15:d9:07:
3b:0b:ae:39:6c:d2:90:55:09:9d:9e:ff:f1:21:e6:
ed:30:11:79:40:29:ac:d1:d5:97:33:fe:e9:de:87:
18:ce:c1:10:4a:bb:5d:b8:62:a4:39:e6:e8:1c:1e:
ae:30:4e:ac:64:3c:c3:6d:f4:ae:3f:12:d8:64:3a:
d4:db:08:f3:d4:61:99:06:1e:1a:85:5c:4e:2f:45:
d5:d1:af:cd:95:0b:35:08:30:73:c4:eb:06:38:18:
8c:91:44:a1:73:fe:e1:fc:14:a2:d3:f5:3d:5f:89:
10:73:1c:af:4a:d8:ad:3c:7b:ce:cd:8b:4e:ad:ea:
e7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A3:FB:B5:FD:BF:20:40:16:5C:C6:2B:86:48:2D:FC:51:AF:9E:83
X509v3 Authority Key Identifier:
keyid:E6:37:89:9B:50:5F:34:C7:55:77:03:1A:D1:5D:46:11:59:FA:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jeJm1BfNMdVdwMa0V1GEVn6Psw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/3aP7tf2_IEAWXMYrhkgt_FGvnoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/5jeJm1BfNMdVdwMa0V1GEVn6Psw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.163.80.0/21
91.247.152.0/21
Signature Algorithm: sha256WithRSAEncryption
12:83:83:20:59:8f:9a:68:85:b5:6f:25:ce:c0:b6:dc:7f:b6:
84:51:71:98:0e:2f:59:39:be:15:20:1a:f0:a7:47:4f:6d:4d:
e0:47:65:98:69:7f:b6:59:05:f4:53:ef:0d:d5:34:c3:ae:6b:
b8:f7:95:6d:14:4f:b9:0a:53:9d:4d:d0:ec:c7:e2:ec:33:79:
10:f2:04:e7:1f:79:6f:75:d2:14:e4:9d:48:24:27:b9:7d:d7:
24:ca:78:7c:bd:18:07:95:e4:d7:46:33:8d:a9:52:69:02:cd:
1a:8b:5c:5d:53:90:cb:8c:ea:de:78:13:e9:ed:22:4b:d4:0e:
ae:81:6c:23:b4:18:e7:c6:6f:f0:c9:aa:47:7a:a4:2a:c4:c1:
9f:e9:a5:b1:a4:33:78:ea:e2:4d:86:1e:d4:73:66:bc:9f:4b:
48:9c:49:54:fd:3d:d4:d2:dd:4e:3d:b8:6d:7b:63:88:d1:82:
90:60:cc:ae:08:1a:f5:30:95:0a:fe:4d:42:cc:48:d8:99:f8:
d0:a9:69:93:f4:e9:22:ae:b6:1d:15:74:ab:e7:6f:20:b7:18:
5c:1a:2a:ba:e5:12:24:e6:5c:d9:c5:30:85:ea:54:44:04:67:
8d:3d:a9:6f:90:72:c9:08:f9:15:9d:f0:2b:49:23:2e:e5:ee:
0f:27:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:55 2026 by rpki-client