Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa
File: 3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa (raw, json)
Hash identifier: sT+SSBni7dZcvlHSV+3jhOFDUsj7LFoenmqYmqUNvq8=
Subject key identifier: DF:33:11:87:58:E5:52:73:5D:C4:4A:F5:83:B0:94:56:35:52:EC:8A
Certificate issuer: /CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Certificate serial: 019F3398DC34F62E630A09B09098E3EABF82
Authority key identifier: 65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa
Signing time: Sun 05 Jul 2026 18:44:43 +0000
ROA not before: Sun 05 Jul 2026 18:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57705
IP address blocks: 5.32.132.0/23 maxlen: 23
5.32.133.0/24 maxlen: 24
5.32.134.0/24 maxlen: 24
5.32.135.0/24 maxlen: 24
85.187.17.0/24 maxlen: 24
91.247.180.0/24 maxlen: 24
213.232.237.0/24 maxlen: 24
2a0c:7740::/31 maxlen: 31
2a0c:7742::/31 maxlen: 31
2a0c:7744::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:98:dc:34:f6:2e:63:0a:09:b0:90:98:e3:ea:bf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65436f68b8dce1977f595b7a122b31ece0fdc96b
Validity
Not Before: Jul 5 18:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df33118758e552735dc44af583b094563552ec8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:e8:7e:f6:b8:cf:46:46:9d:c7:83:b6:30:
ee:86:c5:53:20:fd:23:d5:2a:19:92:e8:ab:9c:f7:
3a:6c:80:13:e1:52:bd:3f:c1:01:d8:63:59:60:34:
46:55:c0:25:67:aa:70:a8:a8:aa:d1:45:69:d2:4b:
3f:ac:85:34:da:d7:44:56:7b:88:8a:4d:b5:e2:24:
c8:f6:53:36:05:d5:18:8a:eb:06:82:2f:78:25:7c:
af:92:f7:a8:a9:5a:69:83:97:53:62:6c:ab:60:63:
6b:df:eb:0b:c0:d9:d5:ac:fe:14:b4:79:a7:c1:82:
6c:e4:d7:19:c3:3a:27:42:86:4d:da:52:3f:24:96:
5d:09:b4:b2:c4:1a:4f:d1:ba:c8:ee:51:d7:84:76:
8a:34:e1:da:34:05:f5:cc:53:9f:ed:24:ea:47:31:
0d:d3:e9:3a:d6:7a:8e:d4:cf:e6:11:09:73:59:5f:
a3:51:36:46:db:a1:68:62:a4:b6:f8:87:42:c7:70:
30:d9:7c:ba:be:92:6a:ca:7b:a7:75:df:0b:94:be:
4d:3c:15:84:19:43:09:21:cc:db:37:d2:84:f5:f5:
e9:38:11:12:73:3a:4d:c9:25:54:6b:ef:a8:e1:40:
91:19:c3:40:f4:26:15:3a:6d:da:e7:c1:79:6a:6b:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:33:11:87:58:E5:52:73:5D:C4:4A:F5:83:B0:94:56:35:52:EC:8A
X509v3 Authority Key Identifier:
keyid:65:43:6F:68:B8:DC:E1:97:7F:59:5B:7A:12:2B:31:EC:E0:FD:C9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/3zMRh1jlUnNdxEr1g7CUVjVS7Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/043544-80e7-4486-bec4-aaf6e13410f5/1/ZUNvaLjc4Zd_WVt6Eisx7OD9yWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.132.0/22
85.187.17.0/24
91.247.180.0/24
213.232.237.0/24
IPv6:
2a0c:7740::-2a0c:7745:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:5e:6a:3b:08:af:0a:84:28:81:bc:50:e0:8b:1b:bd:df:08:
f0:12:d7:1a:82:71:c6:a5:a9:d8:ea:e7:ba:7b:20:76:ee:2f:
c3:51:bf:1f:b8:98:89:d9:6d:29:ba:4c:e3:25:fc:f8:9c:59:
04:76:9d:f8:fa:af:62:84:89:dc:5d:af:15:ec:1c:33:fb:70:
cf:33:16:c1:1b:a2:0b:93:dd:67:2b:36:d0:ca:07:28:ee:80:
be:72:d7:30:9b:94:73:28:d7:38:96:46:d3:ab:f0:ed:a3:05:
a9:4d:db:95:dd:1d:f7:4a:96:56:69:38:aa:fe:d1:91:1c:57:
91:ab:e3:0b:05:3a:6e:85:42:44:87:3c:d4:0a:95:84:5f:ee:
ea:f4:9b:01:38:78:49:e4:b8:72:74:56:3d:18:c7:af:2d:c6:
05:de:31:b4:8d:93:c0:cb:4b:d9:af:35:6b:f0:ea:02:ef:ab:
89:82:73:0b:cd:ac:3e:2c:7e:c6:e9:d8:85:de:93:05:04:49:
30:a6:ad:41:e3:2c:38:2f:f0:c8:46:27:3b:68:52:58:67:51:
98:2d:1b:ba:92:f9:ef:a2:84:7f:f0:53:23:b0:fd:5c:5c:3e:
51:c1:f8:1d:97:2b:e0:23:32:57:18:8d:fb:82:bf:43:19:24:
66:ae:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:44:18 2026 by rpki-client