Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/3xeqzOPmiV-ru_3aJ3kfdqxXzJY.roa
File: 3xeqzOPmiV-ru_3aJ3kfdqxXzJY.roa (raw, json)
Hash identifier: jKc1RUJSnHc/SqsjGMbhRMXTEf3y6Iz/CxfH7c4pCy4=
Subject key identifier: DF:17:AA:CC:E3:E6:89:5F:AB:BB:FD:DA:27:79:1F:76:AC:57:CC:96
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019E12E98E8FAC4F307C13C6BFCBC734B589
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/3xeqzOPmiV-ru_3aJ3kfdqxXzJY.roa
Signing time: Sun 10 May 2026 17:22:36 +0000
ROA not before: Sun 10 May 2026 17:22:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/20 maxlen: 20
31.44.44.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.22.0/24 maxlen: 24
46.21.29.0/24 maxlen: 24
185.155.176.0/22 maxlen: 22
185.155.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:12:e9:8e:8f:ac:4f:30:7c:13:c6:bf:cb:c7:34:b5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: May 10 17:22:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df17aacce3e6895fabbbfdda27791f76ac57cc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:b8:8c:c4:f5:61:30:5d:bc:40:c8:05:4c:
e9:33:1d:f0:20:7b:91:6b:c7:8a:0d:dd:17:45:5e:
43:58:f4:95:67:70:4f:04:c0:ae:57:4f:0f:d9:e1:
c1:90:8f:f0:2b:49:90:01:f5:1f:80:7a:90:6a:02:
ca:8c:45:7c:7c:54:a6:67:71:28:da:de:35:83:7b:
8a:35:7a:cd:2a:18:d9:49:e8:31:ea:25:c6:9d:81:
f5:ec:00:a9:7d:49:31:97:00:d3:dc:5d:6a:eb:65:
d4:a4:1a:4a:a5:88:fb:8a:e1:c5:6f:74:6f:cb:af:
ee:01:b6:16:4b:73:30:17:e6:0b:91:91:26:fc:8a:
85:ed:d7:0e:ba:94:0e:7b:cd:fe:98:fb:dc:64:9f:
0e:66:d8:5c:3c:7e:65:1e:03:3d:cd:bf:f3:92:ff:
81:89:5b:bc:dc:1b:65:31:96:ff:29:8e:c0:31:be:
04:1f:34:b7:6b:2d:c0:97:a9:8d:6a:2b:f8:71:dd:
8a:84:66:8f:f3:a7:3e:7f:a2:37:5f:24:7c:2a:83:
09:43:38:a9:60:ce:05:1a:ad:54:6d:86:60:86:a5:
fd:3b:c0:cd:e1:de:99:2d:39:3f:0d:95:e7:b5:cf:
7b:bf:3b:10:b5:0e:00:7a:7d:ce:6b:0e:a8:02:7a:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:AA:CC:E3:E6:89:5F:AB:BB:FD:DA:27:79:1F:76:AC:57:CC:96
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/3xeqzOPmiV-ru_3aJ3kfdqxXzJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.22.0/24
46.21.29.0/24
185.155.176.0/22
185.155.184.0/23
Signature Algorithm: sha256WithRSAEncryption
49:37:80:f1:72:e0:b1:48:76:0b:8d:ad:a3:80:47:88:23:cd:
c7:97:94:8a:58:08:f0:ae:fa:95:8c:2d:01:b5:d0:78:7a:25:
ce:a3:1a:25:c8:8d:1d:02:87:39:c1:8d:94:0c:bc:01:80:09:
f5:9e:5c:90:08:c7:2c:db:75:09:d2:9e:22:f0:be:77:de:a8:
9d:ac:71:f3:87:55:e0:7b:3d:2f:ea:81:93:b4:83:f8:d3:25:
d5:34:16:18:d2:76:4f:91:88:f2:d2:db:e0:32:4d:5d:dd:a3:
07:c9:d7:2c:c1:ea:d4:7b:87:29:b2:5b:0d:ae:82:8f:d5:8d:
5d:8d:0d:e3:61:9e:fc:d0:c1:c2:73:bc:6c:0a:33:be:1d:00:
42:b7:95:75:97:b0:9e:db:79:01:06:7b:52:dd:bc:11:c1:e1:
0a:af:1a:90:d4:98:cf:85:97:2b:ff:53:b5:cb:96:4b:73:09:
53:84:6d:64:e5:67:04:a1:8a:75:9b:e7:14:78:67:c3:d3:8b:
2c:ae:65:c6:31:58:d9:2f:ee:61:f9:df:e8:59:7b:d9:cd:aa:
ea:2e:20:0a:47:b3:b5:f9:36:24:20:11:53:93:93:d4:fb:90:
95:f4:e3:8f:84:bc:c0:0f:9e:40:8b:e0:f2:2a:72:1e:08:e7:
4e:02:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:30 2026 by rpki-client